Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
File:                     5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft (raw, json)
Hash identifier:          CsFjzCj9SOH9c++FASgm9NHRCNQrXbkmWhWoG45Cjnw=
Subject key identifier:   B8:AE:61:9C:4F:27:48:4F:1F:17:06:63:BE:E4:B8:24:9C:41:BC:31
Authority key identifier: E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE
Certificate issuer:       /CN=A91164FE/serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE
Certificate serial:       01BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
Manifest number:          01B7
Signing time:             Sun 01 Mar 2026 04:42:06 +0000
Manifest this update:     Sun 01 Mar 2026 04:42:05 +0000
Manifest next update:     Sun 08 Mar 2026 04:42:05 +0000
Files and hashes:         1: 5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl (hash: CSZ4EhICPxhUdGvhlFNNm2/qez+fgdNp/W55Xi0A1ms=)
                          2: 63EC7E9476C211EE9FDED166C4F9AE02.roa (hash: 5kehy6INc2ToLeOi19J6b3LvAIXj1iv4FwMeLT93MH8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl
                          rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:42:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91164FE, serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE
        Validity
            Not Before: Mar  1 04:42:05 2026 GMT
            Not After : Mar  8 04:42:05 2026 GMT
        Subject: CN=69a3c39e-de40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2e:b3:2c:55:44:d9:11:9b:e0:36:b4:9a:d0:
                    45:50:0f:1d:e1:85:cb:01:5f:e0:cd:7b:0f:95:bd:
                    3e:9c:25:22:89:1b:cd:95:07:83:7b:bf:16:11:c9:
                    6f:64:ff:38:71:3d:ca:74:fc:c5:96:fb:53:90:6e:
                    10:ee:70:55:ac:29:96:f9:00:02:6a:26:69:c1:ad:
                    04:74:17:8c:99:b2:d2:04:55:ad:60:ea:e7:32:9d:
                    52:c8:4c:9f:e3:55:50:25:83:0b:a3:0e:97:76:54:
                    dd:92:13:ba:4a:ea:f3:c2:91:a6:36:f0:ec:32:e1:
                    20:9f:84:82:7d:4c:9d:a8:01:28:40:aa:19:26:c6:
                    53:f7:9c:6a:83:fc:55:ad:7d:e0:2a:34:77:24:a1:
                    4b:43:42:59:d5:cb:60:e6:75:a9:46:79:03:6a:be:
                    95:72:e3:51:38:21:56:fa:0d:d9:7c:1e:5f:a7:8c:
                    74:1f:92:67:55:b8:86:06:4b:4d:ac:80:8c:99:9b:
                    e4:53:75:ff:ae:53:c1:34:07:96:c3:be:bd:68:cb:
                    ed:9a:da:bb:e0:cd:51:63:bd:a2:93:41:4d:70:38:
                    ff:68:1a:0b:55:3f:d8:fa:09:99:c6:4f:de:04:3e:
                    d7:fd:68:62:48:08:cc:b1:2e:ea:b3:03:12:bf:57:
                    0f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AE:61:9C:4F:27:48:4F:1F:17:06:63:BE:E4:B8:24:9C:41:BC:31
            X509v3 Authority Key Identifier:
                keyid:E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:bb:3c:68:4e:fc:c8:32:c5:83:dd:14:a2:bd:86:d3:c0:99:
         53:96:9f:a7:4c:8d:56:47:ac:1c:ca:05:9d:38:95:09:cc:8d:
         ce:83:48:41:a9:05:75:29:61:89:0c:5b:d3:26:2c:95:c6:13:
         bd:78:e7:ef:84:27:98:20:23:f6:ea:c8:d0:9d:96:18:ec:d4:
         01:26:ca:26:82:d5:6f:05:be:4c:99:64:6d:f9:2f:a3:4c:ad:
         9c:91:05:be:71:fa:58:49:cb:19:49:2e:24:e3:a6:ef:b2:4c:
         8e:7c:eb:8a:c9:d0:32:f9:60:c0:e1:03:bb:69:10:3a:81:2e:
         5c:eb:c9:84:f6:80:d3:bb:ed:ed:17:be:1c:44:66:e6:03:ee:
         25:1c:c0:e0:31:54:27:22:c2:e0:6e:b4:a0:07:49:0c:9f:fd:
         e7:eb:61:ba:72:8d:18:6b:f2:ff:35:52:32:07:88:d6:cd:1d:
         7e:28:90:24:2f:c3:d4:f2:db:4b:39:fc:8b:14:6c:69:9c:2b:
         b5:30:bb:2c:57:a3:27:d8:1e:c9:dc:7e:12:68:a6:ea:49:c1:
         2a:e6:d5:92:b9:48:ad:9f:80:47:85:5d:eb:b9:15:7d:34:e8:
         a6:ee:6f:0c:85:ec:09:4d:9a:f8:04:5f:a1:10:c9:fe:ea:bc:
         5c:dd:dd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:04 2026 by rpki-client