Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft
File:                     sg6f5krzzoyYJyXQEqFCknJjzvA.mft (raw, json)
Hash identifier:          V2EJQe4J3MilpiYMJ8rsPxRd/QSdr9l1XNqrJ7SyDt0=
Subject key identifier:   88:56:C9:3C:3F:48:A7:07:28:39:6F:1B:D8:A4:4D:8A:86:26:AB:F6
Authority key identifier: B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0
Certificate issuer:       /CN=A91477C3/serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0
Certificate serial:       08A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft
Manifest number:          0890
Signing time:             Mon 02 Mar 2026 01:02:13 +0000
Manifest this update:     Mon 02 Mar 2026 01:02:11 +0000
Manifest next update:     Mon 09 Mar 2026 01:02:11 +0000
Files and hashes:         1: sg6f5krzzoyYJyXQEqFCknJjzvA.crl (hash: YsUXPJg4ZADfGftJmEPpYwmUvcUOkRlW8MqCc4jlTCw=)
                          2: 5FB89FD4DA8511EEBD7AF854C4F9AE02.roa (hash: XSSSfE9iJebrluIiHWJs0Zhb1i4/3PM9OkDY26rCm9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl
                          rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2210 (0x8a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91477C3, serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0
        Validity
            Not Before: Mar  2 01:02:11 2026 GMT
            Not After : Mar  9 01:02:11 2026 GMT
        Subject: CN=69a4e194-26f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3a:c2:01:ec:6c:2e:5c:0f:3c:1b:75:4f:6b:
                    fe:e5:1b:84:b3:6b:ac:3b:95:22:54:fa:d7:31:2e:
                    00:fc:69:57:fc:69:73:23:89:49:60:12:43:35:b7:
                    e3:2c:a3:d5:a3:a2:89:8c:c8:58:2b:66:84:c0:e1:
                    da:90:9c:6c:e5:04:65:be:59:ef:c2:24:ff:3a:e7:
                    0d:d0:5b:d0:7c:5c:63:d8:07:d0:86:a6:94:74:90:
                    ae:42:c7:a0:99:13:10:d8:f8:e4:84:e3:dd:fc:d0:
                    e4:a0:a7:03:a0:16:64:12:fa:c7:cb:b8:d3:a4:00:
                    ac:07:29:46:ca:9c:07:6d:0f:26:5d:e6:35:81:3f:
                    69:79:bc:4b:dc:96:0b:90:6f:84:15:ec:69:84:8b:
                    34:7d:65:4d:62:c9:4d:59:62:bc:32:a4:45:0d:9c:
                    21:a3:eb:2c:46:f7:18:66:77:b5:77:ee:e7:ea:2e:
                    f2:85:76:b0:a8:50:a3:7c:73:d8:b0:90:55:ed:40:
                    97:d1:9d:b5:e1:04:6f:90:8f:43:a3:ff:aa:fd:85:
                    0e:b2:b5:2e:9d:d4:23:3d:20:54:59:9e:38:d7:89:
                    83:1a:33:8e:f2:12:04:e1:15:60:e7:d6:81:d9:85:
                    01:a0:fd:0a:d1:05:59:3d:9e:80:e3:ad:34:de:31:
                    13:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:56:C9:3C:3F:48:A7:07:28:39:6F:1B:D8:A4:4D:8A:86:26:AB:F6
            X509v3 Authority Key Identifier:
                keyid:B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:8f:f6:61:47:df:53:08:c6:97:2e:ca:89:3e:46:0a:34:90:
         02:ec:73:dd:f2:51:82:61:d6:3c:82:b7:d9:52:b3:b1:78:3f:
         60:9a:45:65:53:6a:47:23:f9:26:9e:f7:2e:a6:66:45:5a:4b:
         ac:47:50:5d:27:22:83:3a:8f:38:85:25:25:74:a2:ac:f5:bb:
         1c:25:0a:e7:13:2d:b0:9a:2c:86:d8:db:f3:d3:95:da:0e:6f:
         d7:d9:b6:2a:ad:01:68:51:8b:02:79:3d:ed:f3:99:e4:44:d7:
         3e:f1:e1:28:6f:d6:ae:1f:d9:28:09:af:f8:4d:b7:fe:08:1c:
         bb:ac:a9:7c:00:64:85:15:3a:bd:e3:26:9b:2e:33:ad:cc:21:
         54:d4:b5:e3:3d:16:c4:21:a1:32:90:ad:36:b1:0a:f5:19:b8:
         bb:9a:68:9b:9f:43:92:43:f6:74:c0:25:e9:ee:58:27:a4:40:
         00:de:68:75:ef:22:97:7a:bd:cf:ae:d5:2a:67:a0:9e:5a:56:
         86:82:be:be:2c:e3:58:2a:67:32:57:b5:2c:a5:77:11:ee:a9:
         9d:fb:2a:42:34:69:a3:54:4d:8e:39:5f:e5:4e:40:e9:77:15:
         55:ea:3d:8b:85:b8:f4:7a:e3:25:d4:61:fe:5b:e1:b3:26:06:
         50:7e:db:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:33:13 2026 by rpki-client