Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft
File:                     M0SkOWDcSkdzux3w_wON9BYPNXo.mft (raw, json)
Hash identifier:          5Z/6VwWwSaSYWPBJ8KkE5xOyT+qQH9fqGhMzdgtEqhs=
Subject key identifier:   2E:43:D2:7D:A6:4F:EC:75:FD:3C:D0:EB:87:EC:0C:EC:28:34:D1:3E
Authority key identifier: 33:44:A4:39:60:DC:4A:47:73:BB:1D:F0:FF:03:8D:F4:16:0F:35:7A
Certificate issuer:       /CN=A91676E2/serialNumber=3344A43960DC4A4773BB1DF0FF038DF4160F357A
Certificate serial:       03BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft
Manifest number:          03A3
Signing time:             Sun 01 Mar 2026 01:38:21 +0000
Manifest this update:     Sun 01 Mar 2026 01:38:21 +0000
Manifest next update:     Sun 08 Mar 2026 01:38:21 +0000
Files and hashes:         1: M0SkOWDcSkdzux3w_wON9BYPNXo.crl (hash: KSGMWOm9YSYSJnnuMcaoVhy3RoggkDh0M3Rbw4ro9PU=)
                          2: 4D03B06C83FA11EF9E6EC075C4F9AE02.roa (hash: hpv7gHEkBMfI8IhiYswhvBmYC+76f/Bx92ErHlGJsZw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.crl
                          rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 955 (0x3bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91676E2, serialNumber=3344A43960DC4A4773BB1DF0FF038DF4160F357A
        Validity
            Not Before: Mar  1 01:38:21 2026 GMT
            Not After : Mar  8 01:38:21 2026 GMT
        Subject: CN=69a3988d-5891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:92:4d:68:de:af:ba:85:d6:9e:65:ba:76:67:
                    cd:21:c4:f6:d9:6c:79:0c:f2:2d:26:33:02:d1:4b:
                    e6:d3:bd:e2:b0:e4:58:d1:8d:50:f5:37:e8:60:ac:
                    80:f7:d3:58:da:38:e0:f3:e2:ba:ea:cd:2c:5f:af:
                    57:0e:d8:72:b5:20:08:90:69:a7:ec:1c:cc:12:18:
                    9d:d2:d9:51:79:af:e5:f8:36:ca:08:27:50:4f:4b:
                    c3:63:27:a9:f3:bf:c4:ad:03:c8:6e:95:9a:03:90:
                    d1:ad:e5:49:81:c8:c9:2a:93:53:c2:62:54:7c:ef:
                    29:6f:f0:95:8f:11:ad:47:a9:8b:e6:9f:d8:65:43:
                    85:6c:32:63:2f:fc:63:48:bd:e8:ae:4a:45:08:dc:
                    7b:8d:00:6b:af:7a:8a:47:82:0a:cb:11:54:d0:a8:
                    ae:24:5b:25:1f:c8:44:89:d9:86:28:5c:98:b2:34:
                    29:b6:70:04:3c:a0:6d:8e:de:ad:be:46:bc:9b:52:
                    54:94:f9:d6:45:5e:c6:4e:c3:55:29:a9:ef:db:87:
                    85:d8:4b:32:97:f5:54:93:0d:86:d3:45:4b:52:4e:
                    f5:74:e5:85:4d:60:69:eb:f6:df:f1:03:f3:d8:d0:
                    f3:cb:4f:9f:ae:ad:fb:90:de:e6:7b:01:30:bc:05:
                    ce:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:43:D2:7D:A6:4F:EC:75:FD:3C:D0:EB:87:EC:0C:EC:28:34:D1:3E
            X509v3 Authority Key Identifier:
                keyid:33:44:A4:39:60:DC:4A:47:73:BB:1D:F0:FF:03:8D:F4:16:0F:35:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b5:e9:bf:0e:75:08:50:11:7f:c0:f5:54:67:e4:51:af:2a:
         fd:2c:64:92:5f:c4:5d:ed:ef:88:2f:f0:ce:39:65:8d:1a:c6:
         5e:80:ae:27:30:e7:ce:c1:ca:80:32:4d:00:83:2d:b7:dd:26:
         d4:79:64:23:42:5e:4c:bd:f9:8a:54:d5:7e:80:5d:64:1d:19:
         9f:ac:e8:e5:34:69:ab:da:42:83:01:e4:70:f2:eb:fb:d3:82:
         4a:9c:9c:2c:dd:ea:89:08:b5:61:9c:78:22:eb:0d:3d:e7:c6:
         95:43:9d:89:23:3f:e6:68:60:a1:32:cf:cc:d8:e0:9a:17:77:
         6c:17:1f:6f:15:aa:69:84:27:85:9b:11:85:d6:d0:2a:95:71:
         b8:58:ab:a4:05:02:6c:15:11:59:f7:cf:72:cb:3e:2c:4a:2d:
         2e:53:1b:4d:3b:f1:92:75:76:88:57:cb:c2:4f:19:4f:57:5d:
         e8:38:fa:9d:bd:cc:93:ae:f3:e1:9c:5f:b7:b8:a9:83:de:46:
         13:ac:c6:77:64:5d:81:f1:a9:ec:da:44:78:95:cc:41:a7:36:
         6b:59:14:3f:db:4f:ed:9f:58:f6:5c:d7:f9:07:a6:5a:1b:5e:
         25:cc:e2:01:a5:7b:26:04:35:1d:8c:a7:ce:a7:db:a7:c5:5c:
         06:13:ff:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:11:26 2026 by rpki-client