Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
File:                     FfB_78oF6EbUU4USXou0J3WDAPk.mft (raw, json)
Hash identifier:          M3NP9fVb8Zu7Im7aX4m/ypnAm8rWgwLP7FI4octi1Hs=
Subject key identifier:   71:D6:30:18:95:C7:47:26:16:B5:81:18:C8:B6:A2:D3:7E:58:CE:73
Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9
Certificate issuer:       /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
Certificate serial:       0C4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
Manifest number:          0C42
Signing time:             Mon 02 Mar 2026 01:56:41 +0000
Manifest this update:     Mon 02 Mar 2026 01:56:40 +0000
Manifest next update:     Mon 09 Mar 2026 01:56:40 +0000
Files and hashes:         1: FfB_78oF6EbUU4USXou0J3WDAPk.crl (hash: IXg8yA9KxGAbFlly5qAmHegx/n25lXdETidOjt4rUeM=)
                          2: FC90C520213411EA8D675645C4F9AE02.roa (hash: wRh3N1lkasKdB1iov51RXGczR9sD9duj3/LCNc3iLBY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl
                          rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3148 (0xc4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91503BB, serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
        Validity
            Not Before: Mar  2 01:56:40 2026 GMT
            Not After : Mar  9 01:56:40 2026 GMT
        Subject: CN=69a4ee59-dd4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f5:b4:7b:d4:a8:80:e7:86:b0:2e:6a:64:6e:
                    2b:bf:94:0e:fb:ea:8a:3f:0e:08:f3:72:b9:62:95:
                    3f:d3:d8:a4:3b:c3:ba:80:b8:6e:2c:cb:00:0f:43:
                    81:c7:cf:22:0d:56:05:0e:60:47:40:f4:6a:da:a4:
                    eb:15:b4:a4:ab:f5:1c:52:ad:f1:8c:fe:a5:5a:9d:
                    22:bd:c6:d4:97:a8:48:b8:ee:e9:3b:3c:ed:d3:05:
                    74:cb:aa:9f:37:1b:4d:aa:e0:b9:a8:75:79:48:a6:
                    ac:bb:0d:a9:83:55:ed:3e:cd:f5:4e:b5:fe:d3:a1:
                    a2:c9:e3:9d:ef:64:05:ef:20:95:ea:84:00:58:26:
                    50:3a:ca:22:2c:73:67:df:92:77:fe:ea:54:77:cc:
                    b3:0a:5e:aa:08:00:78:b8:03:38:63:3b:fa:5b:71:
                    35:c6:cc:c1:b5:d3:1e:dc:82:4a:b5:a4:bb:73:07:
                    a6:bd:e2:05:21:78:79:11:7b:9c:ea:0f:bc:b9:59:
                    2a:b8:5f:d0:86:59:d2:07:b3:00:14:24:7e:79:c1:
                    e8:17:a3:79:42:58:4a:a1:ba:fc:de:8e:35:9b:33:
                    b4:72:e6:a3:c0:33:50:ca:31:ec:da:f5:31:02:e2:
                    ff:1f:be:33:0d:eb:11:5e:54:21:8b:d1:34:9f:62:
                    69:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D6:30:18:95:C7:47:26:16:B5:81:18:C8:B6:A2:D3:7E:58:CE:73
            X509v3 Authority Key Identifier:
                keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:1e:e7:f6:27:e3:96:73:ec:ca:a8:11:a9:f5:c7:51:e9:72:
         c4:80:96:20:c7:32:8c:20:7f:9c:aa:0f:dc:c1:9a:3e:58:30:
         8c:af:ea:17:6f:c9:2f:b7:6a:a8:49:30:ba:0c:d1:5c:d5:27:
         c7:f1:75:ce:bd:0e:82:63:18:9f:57:22:d9:cc:95:82:fd:0a:
         1d:01:80:83:f4:98:58:29:d6:c0:e0:58:43:47:45:6f:79:05:
         8f:55:8b:9f:2f:07:11:f9:c7:cf:43:3c:fa:98:03:99:c6:6d:
         d9:a2:dd:d1:8f:d3:95:bc:5a:43:0c:bf:dd:e9:5a:38:fd:a8:
         c4:ff:26:ca:eb:c3:1a:63:21:89:cd:0a:cf:6e:f0:28:ab:57:
         b2:8c:1b:81:7a:93:53:8e:a6:d7:30:5d:1e:40:62:6c:29:40:
         48:80:14:9b:35:cb:d7:fb:bc:64:f8:0f:6c:1a:ed:59:35:f8:
         2d:c2:a4:a3:e4:3e:3b:aa:36:44:63:0e:c6:b9:d2:89:8b:6a:
         c3:22:60:d0:b3:0e:4c:39:af:d8:25:3c:12:87:d5:80:df:5b:
         a7:b8:fe:21:4b:80:3d:a7:a2:07:64:29:fe:41:28:e9:44:99:
         c2:25:87:c5:e4:f2:84:d8:0c:02:69:c5:04:93:10:03:02:ae:
         87:2e:38:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:23 2026 by rpki-client