Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
File:                     nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json)
Hash identifier:          jx0TJ8uJHum8y9VU8S0B4K36eDd+ZdQYdkt7IllEbHY=
Subject key identifier:   4F:5E:BC:F9:3F:8E:DC:31:CC:49:B0:A3:0F:B6:97:A2:02:EB:33:AC
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Certificate issuer:       /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial:       0593
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
Manifest number:          056D
Signing time:             Sun 01 Mar 2026 00:03:33 +0000
Manifest this update:     Sun 01 Mar 2026 00:03:33 +0000
Manifest next update:     Sun 08 Mar 2026 00:03:33 +0000
Files and hashes:         1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: TFlK6/jZDv1qOSP9xGVBdmfrmySOgJEziwZv3XgzGrU=)
                          2: 53B4619407CB11F19B0357131B3D8C67.roa (hash: cDpOxJyGcDUZfsLfbeDDvwlG60DFBR0tHk2S0DKukZs=)
                          3: 9E3C65828CA011F0B1F47C12C4F9AE02.roa (hash: AhcbearK6iV6xBjXUDN0qGwO1GubeQ+m8AdvrMUpw0Q=)
                          4: 9EABFF288CA011F0B1F47C12C4F9AE02.roa (hash: BaDUL34/Gwa3G8jGhtSk9P3jmeq3rCjBk1zIOgJr1cM=)
                          5: FBBECF1A694111F08D368069C4F9AE02.roa (hash: Hxo/oVA2HgH6qQ01M6fl9cqj5vSj3O9qRMc68jJm0P4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
                          rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1427 (0x593)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
        Validity
            Not Before: Mar  1 00:03:33 2026 GMT
            Not After : Mar  8 00:03:33 2026 GMT
        Subject: CN=69a38255-b55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4f:b4:a1:3b:bd:1f:80:b7:26:c0:c5:fe:af:
                    08:b0:bc:81:97:e7:e3:32:8c:72:8f:20:3a:6e:db:
                    3e:d1:eb:8d:19:44:79:14:7f:b0:23:e7:f6:f7:9b:
                    c9:1e:63:55:c2:14:a4:88:98:6b:e4:12:00:30:2b:
                    95:8b:b1:52:4e:9b:c3:a9:72:47:be:4f:02:db:63:
                    1b:e5:a1:a7:59:16:c8:cf:ec:fd:95:b6:24:cb:4c:
                    0d:8d:0a:b0:e7:fc:66:48:42:2e:f4:85:d2:75:bb:
                    27:09:31:95:12:cf:c6:63:09:c6:89:e1:51:a2:92:
                    72:3c:30:18:1e:41:6e:76:bf:1a:b8:f2:93:f5:ee:
                    1c:c1:76:82:e7:69:12:d0:ed:f5:bd:f0:e4:41:5f:
                    1e:2d:38:56:cd:1a:11:5b:02:81:4d:40:cf:f9:c9:
                    bc:e6:dd:2b:34:b7:af:94:01:fc:f4:2d:73:8b:3d:
                    81:91:47:2f:d0:dc:01:71:ad:de:40:1a:29:2f:7e:
                    21:49:5c:70:39:e5:4f:ee:d7:48:f0:07:c3:b6:dd:
                    21:38:13:27:1e:7d:f0:c3:35:11:a8:2c:39:f7:4b:
                    1d:b5:a0:ac:27:4e:81:af:fc:ed:d7:09:ed:4b:c0:
                    a7:39:aa:4c:ce:4b:7a:37:a6:66:23:5c:bd:06:c1:
                    c3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5E:BC:F9:3F:8E:DC:31:CC:49:B0:A3:0F:B6:97:A2:02:EB:33:AC
            X509v3 Authority Key Identifier:
                keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ac:87:f6:c3:92:96:8c:08:f9:ca:27:ed:78:02:b9:f3:25:
         08:00:b7:c5:1e:be:2c:d7:85:d1:c9:a9:d8:08:ee:a7:b3:55:
         88:06:65:86:9a:a4:f2:4f:ed:b6:27:bc:40:77:f2:37:24:a5:
         1f:fc:88:73:6e:d9:4b:7e:86:92:e1:88:5d:1f:cd:75:bc:34:
         ef:88:d1:42:dc:0a:44:66:9d:09:ab:fc:76:e3:92:3a:22:77:
         20:ce:b2:ba:53:84:ed:17:dc:b0:d9:9f:a4:3c:92:22:a9:e7:
         05:51:40:b5:52:7b:a8:ff:98:27:60:99:4d:90:07:9e:07:ae:
         1b:e6:17:79:aa:cc:5f:9f:f0:f2:47:1d:55:c3:35:3b:c7:99:
         35:55:e6:18:2c:50:7d:87:d5:cb:e6:b3:ba:99:ac:d3:0e:11:
         4f:6e:b3:cd:e9:77:a0:84:a3:8a:fc:81:79:a1:ff:14:00:e8:
         6a:c2:57:4e:a5:3c:32:b0:94:19:e7:28:aa:e3:e1:79:5c:39:
         94:fb:27:85:8a:48:64:e4:6d:91:62:d5:67:83:e1:08:05:c0:
         fb:84:13:88:d3:b8:0f:22:e3:90:bb:79:bf:f1:36:f0:42:15:
         c3:1c:c4:75:17:d0:61:d7:be:f1:23:a7:91:93:4f:b3:b5:54:
         64:49:b8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:27 2026 by rpki-client