Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
File:                     W9l8Mex4xvFX13LBu1drgCSCtyg.mft (raw, json)
Hash identifier:          bnWXjyEWMQ2L/uxioFtbb2tTEabsi/j1ZMBtl4pDU04=
Subject key identifier:   46:F3:D0:98:27:60:C1:11:1F:75:9F:7C:FC:76:CA:BC:79:40:1A:64
Authority key identifier: 5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28
Certificate issuer:       /CN=A91764A1/serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728
Certificate serial:       0CE6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
Manifest number:          0CD9
Signing time:             Mon 02 Mar 2026 02:21:53 +0000
Manifest this update:     Mon 02 Mar 2026 02:21:49 +0000
Manifest next update:     Mon 09 Mar 2026 02:21:49 +0000
Files and hashes:         1: W9l8Mex4xvFX13LBu1drgCSCtyg.crl (hash: rj9Ol8tg+GoYaRxHjyZHpfi7MMtMmS50p0eVkWNtmuw=)
                          2: 753703FE045C11EAB8BF0932C4F9AE02.roa (hash: q50wzpuKp2/XOfQFTtCqUx6pSJaLEnYn8T7ElxcuFQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl
                          rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:21:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3302 (0xce6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91764A1, serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728
        Validity
            Not Before: Mar  2 02:21:49 2026 GMT
            Not After : Mar  9 02:21:49 2026 GMT
        Subject: CN=69a4f440-727e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:61:ec:fa:5f:de:32:48:dd:23:30:da:c8:1e:
                    be:0e:6b:35:e0:83:a9:8e:83:54:11:f0:59:e2:63:
                    8c:ec:8c:3b:fe:54:0f:df:1e:50:a0:59:98:af:cd:
                    cf:64:57:56:6e:3b:1f:b1:fc:06:11:54:1c:e1:1c:
                    15:74:79:18:57:a2:e4:9a:61:32:a6:1b:26:c8:cb:
                    24:ea:30:9b:e7:25:52:ae:56:c5:78:b4:fa:48:51:
                    f3:60:8d:51:46:07:fe:c0:3a:d3:4a:7d:09:c7:c7:
                    c4:7e:4f:c5:e7:1e:79:00:da:d9:80:a5:6f:46:1e:
                    73:e9:9a:3c:ee:ec:88:44:d1:12:8b:fe:71:21:8a:
                    93:58:17:32:be:83:54:72:c2:04:5a:c5:19:82:61:
                    42:b8:5e:13:df:e3:2a:69:ee:05:6d:76:4f:8a:23:
                    49:74:b4:be:28:7c:56:e0:df:77:89:80:a7:2c:03:
                    5a:c7:a9:b5:d7:ea:34:48:fd:3d:16:f6:35:f8:7f:
                    72:ed:d5:af:92:db:0c:3d:d8:51:57:ce:6f:27:a4:
                    e4:d4:82:14:bf:26:3d:5f:b6:bd:d5:e2:30:6f:fe:
                    94:b9:13:d5:e1:52:b9:b1:a9:24:88:51:b1:38:93:
                    ce:80:a4:03:e5:0b:64:29:cd:27:c3:1d:43:93:13:
                    89:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F3:D0:98:27:60:C1:11:1F:75:9F:7C:FC:76:CA:BC:79:40:1A:64
            X509v3 Authority Key Identifier:
                keyid:5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:4e:73:f1:f6:4d:d6:91:23:4b:00:ed:9a:30:a0:0f:de:59:
         cd:2a:8e:57:fd:eb:f5:e4:ab:03:46:ce:21:0b:f0:18:83:0d:
         57:f4:3e:e8:42:57:2d:20:1d:cd:aa:98:8f:3c:e2:fb:e3:0c:
         fa:07:14:61:24:d7:3c:f5:d1:a2:6f:2e:34:10:58:10:25:1d:
         34:ff:0c:20:e1:e1:2a:87:19:3a:80:18:b6:55:03:82:30:3e:
         c6:d4:05:3a:38:d7:72:83:15:71:ff:9c:53:8c:20:a9:21:d6:
         f6:97:35:82:34:ac:b7:29:7c:9b:11:a3:47:78:0f:92:46:07:
         99:2c:ff:50:8a:e0:65:7e:d1:db:dd:ca:c9:31:df:13:54:98:
         00:4f:16:99:d1:27:50:c7:da:65:35:03:18:db:c4:54:cf:f1:
         17:3e:c4:a0:ec:77:dd:2f:72:c9:20:0a:0a:a1:4e:58:6e:db:
         d7:c8:c9:9a:a7:d2:8f:85:41:82:27:2f:5a:6a:d6:77:e9:e6:
         ac:4c:ae:2a:c2:e5:e8:96:78:1e:a3:ec:11:8d:90:1d:56:61:
         c1:91:1e:75:58:75:1f:96:80:88:28:69:44:91:61:3c:18:6d:
         d6:5c:89:5c:75:ad:3d:3a:f1:02:fe:c5:e1:74:39:e2:3e:70:
         79:15:fa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:48 2026 by rpki-client