Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
File:                     N-A1JLWEfb6tAP43jEar0MpwRfg.mft (raw, json)
Hash identifier:          kPAVXryqXUOjSheqyId0cGnF+8lA0exMHdT94DNp3nk=
Subject key identifier:   4F:C4:28:B4:11:D6:75:63:5A:23:E8:8C:5C:8C:D7:84:F5:45:AC:3D
Authority key identifier: 37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8
Certificate issuer:       /CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
Certificate serial:       0440
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
Manifest number:          0430
Signing time:             Sun 01 Mar 2026 23:47:44 +0000
Manifest this update:     Sun 01 Mar 2026 23:47:43 +0000
Manifest next update:     Sun 08 Mar 2026 23:47:43 +0000
Files and hashes:         1: N-A1JLWEfb6tAP43jEar0MpwRfg.crl (hash: vNT6BmlMS1KXcKMgv8fT9qoMWG/tIc7bLbIJMAbGBFE=)
                          2: F39CE41C7C3811EFBF44AF4FC4F9AE02.roa (hash: mzXsIviLzqNFssHWjKdPxrfrQjIOrQyDdrnRheg5sAE=)
                          3: B0A47CAE7DA711EFB7190E26C4F9AE02.roa (hash: sWYV6f6Mq/gOtK8jl6qm1FHDusM3lQd7MnyI98UBc+A=)
                          4: 46A569387DA911EFAC4E642AC4F9AE02.roa (hash: OW6cdcKORRWUDvnbMhKStDDiNQb7XK3dKBXO16VeQlo=)
                          5: 99C173847DA711EFBC48DB25C4F9AE02.roa (hash: WOIniZiHfKK2LXS4UqzBre9hhY37jz+wS/A1b1+/uig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl
                          rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:47:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1088 (0x440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91799A0, serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
        Validity
            Not Before: Mar  1 23:47:43 2026 GMT
            Not After : Mar  8 23:47:43 2026 GMT
        Subject: CN=69a4d020-aa72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:27:65:0d:ee:d8:04:81:45:d6:e9:2a:09:fc:
                    e8:1b:1e:e9:3f:dd:4c:41:fb:68:d8:d7:bf:ca:61:
                    38:7f:ae:ad:64:83:cb:0b:48:a6:74:75:6b:92:da:
                    8b:c3:03:ef:44:a1:fb:9d:9c:7a:81:51:bf:bb:fb:
                    b8:b8:47:a2:a1:f3:4a:7c:25:16:f8:38:18:f1:80:
                    c3:4f:ed:6b:29:65:25:82:4d:2c:f1:7f:bb:08:98:
                    85:99:03:5d:57:9d:40:c3:45:8b:9f:42:88:95:7d:
                    87:a3:4c:ae:98:ba:c8:99:46:df:4e:d0:a8:91:fa:
                    bb:2f:9b:01:8d:1b:63:c2:db:ac:07:b9:61:9f:22:
                    09:bb:b2:21:2c:ac:0b:b9:8f:48:2d:53:92:fa:0f:
                    d3:7f:c7:6c:26:04:94:d0:a2:3d:ba:ca:11:c4:20:
                    df:a3:1a:3c:db:12:55:0b:84:2e:0a:25:e2:e3:e0:
                    ec:4f:12:db:75:8e:32:81:8e:91:59:12:8f:32:bc:
                    85:3c:f5:be:cf:85:8b:5a:c3:a5:cc:9c:0f:d6:60:
                    0a:8a:77:10:fd:9e:e3:cc:d8:3b:c0:3a:aa:4f:d9:
                    20:84:17:60:16:30:68:53:13:3b:e8:d2:78:7c:c6:
                    cc:28:7d:18:18:fd:d0:f9:4f:28:70:48:8f:43:51:
                    eb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C4:28:B4:11:D6:75:63:5A:23:E8:8C:5C:8C:D7:84:F5:45:AC:3D
            X509v3 Authority Key Identifier:
                keyid:37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:52:1b:42:85:bc:93:82:c9:9b:c9:98:24:1f:ba:87:16:19:
         70:e6:a8:5b:02:a7:3b:22:72:34:88:e3:6b:7e:c5:11:ea:48:
         52:83:3c:55:67:8b:5c:17:64:41:ca:c7:90:85:15:21:fc:07:
         f0:72:0c:6b:06:0b:9c:bb:10:16:73:4f:2d:c9:f6:29:d0:f2:
         d2:9d:68:0d:97:a1:0c:94:dd:42:a1:ba:fd:fc:02:1e:60:f3:
         ef:6b:3a:55:e1:ce:c2:1a:5e:3f:cf:73:a6:bd:85:26:a1:26:
         54:ed:0b:a0:44:2d:0b:93:4b:8a:b8:3e:0a:3e:f1:48:08:3f:
         8b:d8:44:9a:d7:21:40:0f:63:3f:65:3c:41:d5:a0:f1:e5:68:
         76:cf:ed:49:4b:b2:c3:a7:e2:1d:3b:07:d2:2b:d7:e6:28:fb:
         c7:a3:a5:a8:36:6b:22:e3:3c:d7:9a:27:ec:03:05:9e:84:66:
         2b:a5:a9:a2:f1:0c:f6:3e:48:80:d4:c8:5a:08:59:a1:3b:23:
         6f:a2:3f:ea:94:aa:1c:c1:f2:b9:fb:54:5b:aa:8f:60:0b:36:
         17:13:00:0e:62:d2:e5:e3:8f:34:d6:96:a9:84:3a:03:e7:77:
         f8:ef:d7:df:07:f5:93:6c:44:3e:1f:a4:08:e8:d2:b1:7a:ec:
         3a:2e:6b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:03 2026 by rpki-client