Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft
File:                     ahpG6ANoiAaY7zBCQgW5d5voseA.mft (raw, json)
Hash identifier:          fT6j3VEHiw8xekgE3+giti0T9mz5oEF6aaZ4rLw/Fg8=
Subject key identifier:   AC:20:50:F8:23:43:E1:C2:1A:03:EE:C7:3D:57:D4:A2:24:52:37:45
Authority key identifier: 6A:1A:46:E8:03:68:88:06:98:EF:30:42:42:05:B9:77:9B:E8:B1:E0
Certificate issuer:       /CN=A91442DE/serialNumber=6A1A46E80368880698EF30424205B9779BE8B1E0
Certificate serial:       0679
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahpG6ANoiAaY7zBCQgW5d5voseA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft
Manifest number:          0674
Signing time:             Mon 02 Mar 2026 02:29:09 +0000
Manifest this update:     Mon 02 Mar 2026 02:29:08 +0000
Manifest next update:     Mon 09 Mar 2026 02:29:08 +0000
Files and hashes:         1: ahpG6ANoiAaY7zBCQgW5d5voseA.crl (hash: rCTz31oXMFG7x8DR6u7xnADRMxId24hP07iAqJlTJRg=)
                          2: 0D5812C4B2E711EB8A61B44EC4F9AE02.roa (hash: x6RJn5oQmyrZkTIL+jnIDh/DG4GNtduzvhq+KZOjCjM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.crl
                          rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahpG6ANoiAaY7zBCQgW5d5voseA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1657 (0x679)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91442DE, serialNumber=6A1A46E80368880698EF30424205B9779BE8B1E0
        Validity
            Not Before: Mar  2 02:29:08 2026 GMT
            Not After : Mar  9 02:29:08 2026 GMT
        Subject: CN=69a4f5f5-3cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:90:89:fe:f3:f2:44:f2:83:c5:72:f6:95:3d:
                    9e:ec:15:c9:80:86:e1:37:ef:f8:18:e0:e6:38:29:
                    0a:6b:61:53:90:9a:6d:08:4b:4a:38:fd:3c:9d:7b:
                    d3:3f:cc:e1:99:ef:9d:8b:e7:e5:43:dd:da:e3:99:
                    47:a7:27:ab:a4:be:72:c8:5a:27:98:9b:38:74:2c:
                    15:55:59:40:1b:58:86:7d:72:10:37:b6:0c:8c:ec:
                    5d:0e:ca:00:06:c7:aa:9d:96:a7:6a:28:f4:6d:21:
                    69:39:da:a9:aa:49:94:9a:71:08:60:e3:d5:dd:08:
                    60:c0:30:22:ec:89:66:16:fb:d8:47:05:cd:f5:7d:
                    27:1f:b7:a3:7a:16:49:86:b3:c4:4d:16:17:59:6a:
                    d5:5d:4c:97:4a:9b:e2:2a:06:fe:b6:01:57:bd:a1:
                    6d:91:c1:42:93:9b:2a:be:c1:55:68:09:4e:90:66:
                    06:38:af:bd:7b:1a:c9:a7:e8:2e:4f:04:e5:09:67:
                    47:93:5c:36:2a:e4:a6:dd:9a:b1:b3:14:2e:f4:15:
                    7e:6f:51:f5:9d:e2:2b:2e:46:49:12:93:8a:70:24:
                    45:fb:1b:19:e5:89:ef:56:21:98:a5:da:2e:ef:2d:
                    5c:c1:61:8a:3a:35:cb:13:c0:45:36:9b:eb:ff:ee:
                    21:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:20:50:F8:23:43:E1:C2:1A:03:EE:C7:3D:57:D4:A2:24:52:37:45
            X509v3 Authority Key Identifier:
                keyid:6A:1A:46:E8:03:68:88:06:98:EF:30:42:42:05:B9:77:9B:E8:B1:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahpG6ANoiAaY7zBCQgW5d5voseA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d4:b4:73:19:48:d4:af:26:d4:90:cf:2e:51:e8:03:83:5e:
         9a:65:1d:0a:0e:3d:53:0f:14:d1:a0:90:bc:13:b0:1e:1b:c4:
         a3:10:9c:20:6f:2c:52:03:ae:2b:d1:ae:b8:9f:29:cc:c4:12:
         c8:83:53:9c:a5:51:d9:ac:5c:58:3e:eb:2e:21:1e:73:e0:37:
         41:08:bc:f5:b9:c2:77:d6:eb:36:39:66:4c:ed:6f:65:4b:bc:
         0d:c9:a7:ea:76:e6:c0:e7:d5:d2:7a:56:62:4b:1d:23:c3:86:
         e7:ee:f8:8c:b6:c5:37:00:04:07:56:16:0d:ed:f3:d9:48:8a:
         d1:ca:e5:fc:bb:3a:02:5d:c9:cc:99:25:fc:b9:b8:99:25:ab:
         be:01:78:09:46:32:5d:54:f6:30:d8:ac:70:51:61:14:99:6e:
         8f:8e:a6:a9:95:a0:98:ae:c2:73:fa:51:37:7a:b8:a5:de:23:
         61:0a:19:09:40:20:01:8a:51:89:97:1d:7d:a9:a0:e8:87:e0:
         14:10:85:82:67:79:61:f6:83:d7:c9:16:3d:9a:02:2e:4c:4e:
         59:3a:27:0b:e3:02:64:cf:30:f2:40:d8:77:8e:bf:4a:f9:1e:
         df:df:fc:04:8b:0f:40:dd:c6:39:23:dc:7d:8e:91:ad:61:91:
         63:e9:3b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:48:31 2026 by rpki-client