Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft
File:                     fKdQzAmQd9S0MpCnYoOre_C2Smg.mft (raw, json)
Hash identifier:          gEu5h4lfsmDJHtjCRfroV4y42+lnwguQyWpmeZiIgCQ=
Subject key identifier:   75:38:74:E0:77:58:8F:AE:A6:64:75:C8:D1:18:15:41:04:CD:03:DC
Authority key identifier: 7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68
Certificate issuer:       /CN=A91300ED/serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68
Certificate serial:       0750
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft
Manifest number:          0748
Signing time:             Sun 01 Mar 2026 23:56:27 +0000
Manifest this update:     Sun 01 Mar 2026 23:56:23 +0000
Manifest next update:     Sun 08 Mar 2026 23:56:23 +0000
Files and hashes:         1: fKdQzAmQd9S0MpCnYoOre_C2Smg.crl (hash: MCd585/ffJlLdvnoHE84HZb89w0tgBRr97IPYoFTmSg=)
                          2: 74897CC0622A11EBA8BA0B7EC4F9AE02.roa (hash: /2CQn8Xz4XzOHOkBAvSY7m36OcQFemlRFzK8Et8qbzM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl
                          rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1872 (0x750)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91300ED, serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68
        Validity
            Not Before: Mar  1 23:56:23 2026 GMT
            Not After : Mar  8 23:56:23 2026 GMT
        Subject: CN=69a4d22a-f21f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:17:f2:ab:ab:69:f7:e4:69:c3:41:2e:01:90:
                    34:d3:e0:63:7c:ea:9c:54:6f:ca:7c:cc:30:08:51:
                    64:63:5f:35:32:3d:9b:57:02:25:47:7a:c2:f2:2d:
                    ed:a4:e5:7e:e2:75:3f:14:d7:64:3c:1e:e8:c0:74:
                    ac:3e:81:0e:3c:06:c0:07:6b:c0:94:a0:5c:19:5c:
                    ec:49:c8:4c:be:6b:a2:8b:3a:ae:df:a2:c4:a1:5e:
                    de:7d:d8:07:5f:e9:98:dc:33:91:7b:9d:b4:43:d8:
                    88:01:20:21:5b:8b:91:61:bd:31:89:59:3e:95:b3:
                    95:db:47:21:d7:72:98:23:fe:21:9a:27:11:88:b9:
                    85:09:08:7a:b8:b5:f1:69:6a:96:d2:60:64:6e:2b:
                    a7:96:fd:34:5f:30:b6:b7:9c:13:4a:03:ef:bf:f4:
                    0f:d2:26:25:a6:de:7b:a1:be:fb:3a:71:ff:2e:2d:
                    d1:b7:62:c3:4b:b5:7e:41:52:99:2e:18:9b:38:06:
                    3d:7b:07:5e:07:26:b4:f7:32:05:df:34:3a:4b:63:
                    32:9d:39:85:6b:19:51:cc:0e:48:cf:f9:1a:fd:34:
                    b9:ca:ed:5a:03:9a:1e:7d:c2:f4:58:c1:c2:45:80:
                    45:6a:fe:09:c2:c8:95:53:bb:3d:5a:8a:a3:0c:c1:
                    17:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:38:74:E0:77:58:8F:AE:A6:64:75:C8:D1:18:15:41:04:CD:03:DC
            X509v3 Authority Key Identifier:
                keyid:7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e5:21:36:29:10:f2:17:4a:01:ba:a5:78:a1:3c:d8:52:37:
         ac:d6:90:fa:14:28:56:cb:ab:fd:2c:59:98:97:22:dd:92:9c:
         7d:03:5b:47:95:b6:ba:1e:a3:d0:49:c9:25:63:a5:76:5a:cf:
         e9:33:37:2c:70:f4:b4:6f:b7:7f:d8:c6:85:49:dc:c4:6e:f6:
         74:55:88:b6:fc:6d:6e:f4:42:de:9a:3f:87:a4:3f:16:19:f0:
         83:85:ad:10:2c:b9:c5:ec:03:e7:94:89:fc:9c:1c:47:e8:27:
         57:61:80:5e:52:34:ac:06:21:0c:10:cc:89:a7:2a:5b:70:b4:
         6e:06:aa:cb:ed:9f:67:c6:ce:b9:3e:51:92:cb:8c:3b:50:1e:
         f9:33:70:c3:cb:34:f4:59:c2:10:31:25:68:9b:65:92:c8:cd:
         6e:84:e0:36:25:e1:67:bb:c8:77:cb:f9:38:09:fd:6e:79:d0:
         36:b7:34:c2:10:4c:6f:a6:5f:1c:2c:bb:75:c0:52:75:16:23:
         b4:05:bc:49:10:5a:62:42:2f:c8:97:75:f2:db:a2:17:c6:23:
         dd:dd:75:df:85:fa:a4:39:3a:57:87:79:3c:cc:e2:9a:1a:5c:
         7f:98:42:6f:d7:63:73:ea:64:bc:58:c7:8c:29:05:7e:6f:04:
         af:44:34:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:50 2026 by rpki-client