Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft
File:                     5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft (raw, json)
Hash identifier:          AUerYh0M1OKXzfif9U9qNnQq/9hRHwpumPcJf65cuIQ=
Subject key identifier:   49:C1:82:86:84:03:CC:27:71:DE:C3:63:7D:A9:10:E8:32:5A:B1:2D
Authority key identifier: E5:72:61:FF:C8:10:71:40:79:34:B6:50:4A:22:BB:A3:C1:50:E1:73
Certificate issuer:       /CN=A91509B3/serialNumber=E57261FFC81071407934B6504A22BBA3C150E173
Certificate serial:       73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft
Manifest number:          6B
Signing time:             Sun 01 Mar 2026 09:23:28 +0000
Manifest this update:     Sun 01 Mar 2026 09:23:27 +0000
Manifest next update:     Sun 08 Mar 2026 09:23:27 +0000
Files and hashes:         1: 5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl (hash: +Szbg90n9MIwhITgcXJjWBNd5eM6tJ0U7s/1ZC3/iHs=)
                          2: FD5873EC83BA11F089D8E166C4F9AE02.roa (hash: pgcMYTWRFf4gkxcC+wpc0bSO3rwahz7ouBwd4bk4x64=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl
                          rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91509B3, serialNumber=E57261FFC81071407934B6504A22BBA3C150E173
        Validity
            Not Before: Mar  1 09:23:27 2026 GMT
            Not After : Mar  8 09:23:27 2026 GMT
        Subject: CN=69a40590-b8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:59:f4:84:47:cf:f4:9b:bd:37:2b:ae:3d:96:
                    e5:48:91:5d:83:6f:66:75:57:46:c9:ee:bb:81:35:
                    6f:4c:32:f4:83:8d:b8:26:c5:21:d0:9e:ed:f2:66:
                    72:c1:1b:51:d3:cc:5e:94:58:0d:1c:51:5b:72:94:
                    ed:f2:b1:fd:32:56:ef:c2:ae:f7:ee:18:16:2d:1e:
                    f4:50:b1:68:b5:f0:f3:f2:29:d2:ca:08:a9:91:8d:
                    ee:7f:9b:b8:dd:bb:c3:33:c5:b3:2f:59:c9:3e:54:
                    43:65:66:6b:4a:eb:87:93:bc:16:c8:60:cc:d3:a4:
                    49:62:01:65:bb:08:f1:d3:a8:40:0a:1f:12:61:6f:
                    ef:cb:e0:50:d5:7d:ce:9d:e2:8b:ca:b1:68:37:78:
                    ad:16:c0:ba:64:88:b0:a2:1a:19:f6:30:c3:49:f5:
                    17:a5:54:73:e6:98:04:e9:dc:e0:ae:36:2f:b2:18:
                    21:98:95:51:f5:26:b2:52:4e:53:5a:26:25:f3:2b:
                    e7:76:fd:79:ac:bd:ae:52:24:70:75:f8:62:38:89:
                    03:3a:28:59:72:e4:74:b2:71:d8:1b:73:1b:3f:fd:
                    16:4a:47:ae:04:27:96:59:ac:92:2a:ce:fd:dd:4d:
                    82:b8:04:4b:df:42:e6:49:ef:ab:20:aa:34:81:6e:
                    54:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C1:82:86:84:03:CC:27:71:DE:C3:63:7D:A9:10:E8:32:5A:B1:2D
            X509v3 Authority Key Identifier:
                keyid:E5:72:61:FF:C8:10:71:40:79:34:B6:50:4A:22:BB:A3:C1:50:E1:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:49:98:4a:9c:26:a5:ff:c9:58:c5:ff:47:f1:46:47:55:fc:
         98:28:c8:05:75:79:b1:60:59:99:23:d6:dd:47:c7:82:1b:48:
         27:56:95:48:71:35:9c:2b:48:86:25:2e:f9:3c:82:b4:84:9c:
         30:42:4a:e9:14:6c:cd:60:07:07:c7:4e:10:c2:70:3d:1e:81:
         3f:26:ce:d1:aa:38:2c:b2:46:21:e2:ab:c5:c5:d6:0f:94:ae:
         75:d7:15:d8:d6:3f:0e:f2:84:1c:0c:8b:98:d3:35:eb:82:e6:
         07:2d:2c:05:f3:6b:f2:c6:dc:a0:ea:d7:d5:e3:55:d0:13:c0:
         2f:89:ef:37:23:84:82:8e:d3:d9:30:f5:01:8d:2d:11:5c:c1:
         44:a3:26:d9:df:8a:ac:9e:79:35:4a:be:57:c0:7a:93:8e:e4:
         2c:ab:18:d0:71:88:15:07:17:29:97:16:61:99:3c:35:ec:08:
         cb:e3:69:58:61:78:b9:85:7c:da:e5:5d:b0:50:71:17:47:19:
         81:aa:cc:f8:3a:4d:76:84:5f:35:22:96:28:b5:31:e9:ca:e6:
         31:9e:3f:af:1d:65:d5:02:ff:1d:65:48:ac:63:98:6e:0e:27:
         42:f6:3b:ee:42:c3:d2:c3:53:f8:1e:2f:4d:48:53:2c:b3:3b:
         56:20:88:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:03 2026 by rpki-client