Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
File:                     mFDq_-09ooRdUfCVrBEkUIjVYj8.mft (raw, json)
Hash identifier:          MaYqs+zgl2hhj0YUjMRhz4ny8jfAJ9NXwvK2illYzZY=
Subject key identifier:   40:8E:00:42:51:A1:4F:51:1E:23:E4:DD:94:5A:01:40:C3:69:1B:C2
Authority key identifier: 98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F
Certificate issuer:       /CN=A91678AA/serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
Manifest number:          55
Signing time:             Sun 01 Mar 2026 09:35:03 +0000
Manifest this update:     Sun 01 Mar 2026 09:35:02 +0000
Manifest next update:     Sun 08 Mar 2026 09:35:02 +0000
Files and hashes:         1: mFDq_-09ooRdUfCVrBEkUIjVYj8.crl (hash: HZ+5M9zRrBDkHuVHsrmWCCzZg147jV9DZ+9Ff6hyW9c=)
                          2: ACA405589E7011F083978F1AC4F9AE02.roa (hash: YmblmfroJEPUhmWz7o6a8qxz0P00eBgbcYH8HDNSw40=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl
                          rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91678AA, serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F
        Validity
            Not Before: Mar  1 09:35:02 2026 GMT
            Not After : Mar  8 09:35:02 2026 GMT
        Subject: CN=69a40847-0558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7d:e3:4f:ae:9c:a2:4d:51:6a:9d:1b:70:f6:
                    70:fd:77:68:77:bd:3b:71:97:a9:68:38:da:9a:83:
                    be:14:c7:f0:77:97:6a:e0:47:0c:3d:28:30:29:bb:
                    cb:d8:8b:c7:7e:c8:7a:1e:b4:75:e2:6f:da:bf:f8:
                    07:e8:79:9d:5b:2e:a2:d9:a2:97:02:05:8e:60:51:
                    b8:38:1a:29:01:52:22:e3:8e:7c:28:1e:74:82:9a:
                    57:76:4f:cf:7e:ad:33:b5:82:bf:6d:31:52:3b:ba:
                    60:9d:95:ac:d4:eb:6f:8f:06:47:d7:72:57:db:67:
                    03:06:20:77:b3:fa:43:6b:ad:d4:46:72:51:c9:51:
                    f9:87:d5:5b:ad:da:c2:da:cc:d1:f5:60:03:05:f1:
                    3c:29:e0:1a:89:d1:c3:17:f1:27:43:01:dd:29:e4:
                    b8:c6:64:fd:80:7e:b1:db:ad:70:41:5f:86:9d:e9:
                    fa:6e:b8:a3:a0:2d:bf:1d:85:cf:07:22:0b:36:94:
                    0b:20:0a:61:10:d1:5b:27:b9:6d:ff:26:33:19:61:
                    77:d9:4b:e4:06:75:a1:8f:12:56:fa:60:db:20:b1:
                    bc:6c:b2:52:dc:08:ff:5f:91:2e:81:49:b8:1d:6a:
                    d9:b2:1c:c5:0d:42:ce:e5:b7:df:45:93:75:26:06:
                    ec:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8E:00:42:51:A1:4F:51:1E:23:E4:DD:94:5A:01:40:C3:69:1B:C2
            X509v3 Authority Key Identifier:
                keyid:98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:56:b5:f1:7b:08:af:08:35:d1:ca:08:42:75:20:04:96:f0:
         e0:7e:8c:bb:9c:9f:2c:a4:31:37:66:72:44:3e:80:85:ea:a9:
         3d:7f:77:9d:fe:91:7f:eb:a7:d8:e9:f3:38:c9:c5:0a:39:44:
         ec:59:e8:dc:63:27:bf:1d:39:80:06:94:ab:5e:15:06:78:bf:
         79:de:06:ad:01:ea:68:93:4d:81:e3:43:74:8f:12:41:aa:67:
         b3:1b:2b:1b:92:71:e3:81:7b:01:44:95:cc:b3:68:27:d5:d0:
         ce:f1:1f:83:d6:ba:09:fe:8a:9e:02:7b:2b:45:c0:cc:1b:1c:
         4d:4e:5a:d7:8f:68:ef:b8:ab:f1:96:a1:2b:b3:40:f0:89:c0:
         df:f7:53:53:cb:d2:c0:c5:c7:5c:40:e7:3e:00:96:10:1e:98:
         c7:63:f7:aa:ee:1a:67:78:c1:23:08:4d:cd:66:16:f2:3d:04:
         c7:d4:af:2e:63:09:a2:49:2e:87:19:38:51:b4:9b:a2:e0:fe:
         4f:6f:1b:1d:62:99:67:95:ad:6c:c8:61:c3:af:c2:c7:ec:92:
         60:28:70:a4:b4:16:67:74:8a:c2:ef:cb:6c:cd:20:39:44:e5:
         eb:af:50:59:99:8c:8e:90:43:9f:e7:2e:de:38:4a:7c:66:fd:
         08:bd:82:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:01:28 2026 by rpki-client