Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
File:                     Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json)
Hash identifier:          1yOsTxv4FsFizODcgFbHhdb94BWVspGrn3WIVUD9hR0=
Subject key identifier:   61:DA:38:E4:99:F1:5E:3B:59:3B:EC:52:90:4D:50:FC:8B:B5:B9:76
Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14
Certificate issuer:       /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
Manifest number:          F3
Signing time:             Sun 01 Mar 2026 07:21:42 +0000
Manifest this update:     Sun 01 Mar 2026 07:21:41 +0000
Manifest next update:     Sun 08 Mar 2026 07:21:41 +0000
Files and hashes:         1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: jmQN0YYW7kcW79g02pYytiiIo1ji4NOnbIOsWbqlHvY=)
                          2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: uGGRc65Ma65DEa8FpOK6rAJO4fZNCGwB4590o1lrFu4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl
                          rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91637FD, serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
        Validity
            Not Before: Mar  1 07:21:41 2026 GMT
            Not After : Mar  8 07:21:41 2026 GMT
        Subject: CN=69a3e906-8fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:45:e6:bc:87:86:5d:82:f9:05:8a:77:d8:
                    31:bc:45:18:71:87:2d:f0:78:2e:d8:b3:26:6c:55:
                    8d:b9:bb:da:28:11:13:da:23:87:14:f1:8b:ca:9c:
                    2b:4d:ec:e5:d5:42:a0:d4:ce:e8:1a:06:9e:94:5b:
                    b3:bf:9d:81:e9:f1:4f:10:e5:44:04:02:4c:2e:88:
                    e3:f7:03:77:2c:aa:36:3c:67:d1:ff:9c:28:ad:23:
                    23:47:5b:c6:e7:99:54:ba:5c:ed:bf:20:cc:ab:0b:
                    15:95:e6:13:d4:64:f5:b3:b7:07:30:7f:cf:d4:c0:
                    a2:19:87:b1:c1:3d:39:3b:9f:eb:ac:c4:40:2a:ec:
                    0a:3f:ac:04:c0:fd:81:ff:63:e8:53:b3:d9:97:bf:
                    86:cb:76:51:08:ad:76:ab:a9:ae:47:48:cd:93:25:
                    64:b3:72:24:29:7b:3d:28:a6:e4:bb:f0:37:72:0d:
                    cc:dc:4a:d6:4c:03:4e:8c:3a:ce:53:6b:55:bf:a8:
                    05:49:0c:f3:46:ce:b8:18:16:aa:6d:51:de:38:8a:
                    57:18:6d:82:1e:51:6f:ce:78:c3:1c:12:24:c0:23:
                    ef:48:93:06:47:7b:ff:8f:8c:99:fa:aa:73:fd:ea:
                    67:3c:95:ae:78:05:64:2a:49:a4:16:9b:7e:f5:89:
                    a9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DA:38:E4:99:F1:5E:3B:59:3B:EC:52:90:4D:50:FC:8B:B5:B9:76
            X509v3 Authority Key Identifier:
                keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:8a:7e:95:84:06:27:36:43:5f:ed:04:95:ef:ca:b0:45:37:
         03:e5:a3:42:4e:cb:0a:09:99:8c:e7:6a:ec:ab:c7:89:fd:23:
         db:30:8f:5c:2d:8d:89:fc:0f:ca:89:4f:65:cc:eb:07:29:8e:
         53:30:fe:08:cd:e1:e2:0f:de:1f:3f:f9:a4:0b:f1:e0:86:ef:
         61:ca:e2:3d:f1:31:61:b6:78:27:65:74:26:45:4e:01:c7:d1:
         fc:e3:35:67:d9:fa:5e:8e:53:53:49:42:52:85:07:75:d8:fb:
         1b:e9:ad:c1:f9:2d:3a:58:d6:a9:fb:60:04:71:54:1a:c6:6e:
         b1:09:9c:2f:e7:a5:4a:a2:cc:ac:b7:f2:28:dc:31:90:9c:a6:
         de:b1:07:91:71:b5:b6:70:14:6a:8c:0b:4d:8f:a1:c9:89:75:
         84:ec:7f:66:fe:9f:97:1d:7f:59:c0:2d:cc:cb:36:23:7b:79:
         85:3f:41:2c:ef:ef:35:d0:ff:1c:a0:91:ec:76:20:08:cc:d0:
         51:7c:4a:6e:12:5a:fe:7c:58:5b:6f:a0:8b:73:51:66:62:85:
         63:fe:3e:9d:97:f5:16:1a:1e:69:4f:ed:ca:d6:91:2f:da:c1:
         92:7b:31:50:1d:e7:8c:b4:fb:34:a1:6b:02:6e:0d:06:62:08:
         e7:e6:32:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:24:06 2026 by rpki-client