Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
File:                     csG8nD23m0PzVvI_lWiEjJz7jdU.mft (raw, json)
Hash identifier:          RvMTIZnTzHz5+O94M0mE/kR9imrIOZhlpirGUgwLGlk=
Subject key identifier:   2D:04:8C:7B:54:D9:8C:04:3F:9C:35:16:37:AC:2C:43:0D:B2:82:A3
Authority key identifier: 72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5
Certificate issuer:       /CN=A91820CE/serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5
Certificate serial:       0732
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
Manifest number:          072B
Signing time:             Mon 02 Mar 2026 02:59:37 +0000
Manifest this update:     Mon 02 Mar 2026 02:59:35 +0000
Manifest next update:     Mon 09 Mar 2026 02:59:35 +0000
Files and hashes:         1: csG8nD23m0PzVvI_lWiEjJz7jdU.crl (hash: YtOL/Gg8HvQncrUNDkn+NOJtGRLV7qnQQeUEi1eRqcc=)
                          2: EB292D8A6BF811EB8E899650C4F9AE02.roa (hash: Y+1fvWj3nLlmoNV6cl239YJXWHECE8PMA09Art+Ouzs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl
                          rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1842 (0x732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91820CE, serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5
        Validity
            Not Before: Mar  2 02:59:35 2026 GMT
            Not After : Mar  9 02:59:35 2026 GMT
        Subject: CN=69a4fd19-71cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d8:e5:ec:ef:04:3a:f5:d9:2b:00:fb:9f:07:
                    e0:e8:55:ea:dc:13:60:c3:f8:0e:7c:55:7d:26:75:
                    a0:60:f5:36:ac:8d:5f:26:6a:9f:f4:e9:01:96:cb:
                    85:d5:66:ee:15:16:f9:a5:cb:4c:c0:21:b7:86:26:
                    a0:77:f9:ec:3b:02:a3:b5:75:a8:36:97:2d:03:88:
                    c7:1b:a9:cc:c0:d5:62:a0:aa:5c:e7:fa:5d:97:3a:
                    d7:55:3f:ff:38:fd:e3:c2:c1:8e:d7:2f:0b:f7:75:
                    0e:f4:cd:51:b8:08:82:ea:82:f0:f7:ea:66:fc:13:
                    34:4d:2c:a3:5d:40:84:37:e0:4a:4e:eb:a2:53:88:
                    82:1c:fe:25:c1:e9:d7:57:0c:15:1f:ac:90:70:93:
                    89:95:0b:29:4b:bf:c8:63:f0:23:d9:ff:5f:40:f5:
                    21:f8:a3:1f:6c:2f:d0:fb:81:99:76:17:4a:d7:7c:
                    86:56:31:3e:dd:50:b3:0c:ee:06:c6:02:5b:56:4f:
                    78:5e:22:d0:32:c4:bd:da:ff:c6:29:d1:16:dc:a7:
                    31:07:e0:8a:e4:9e:56:24:ea:a2:9b:f3:91:17:35:
                    83:90:93:e1:12:97:9e:91:82:64:37:f6:a3:75:fa:
                    79:01:f0:3f:9f:50:86:13:73:eb:80:d1:0b:56:be:
                    44:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:04:8C:7B:54:D9:8C:04:3F:9C:35:16:37:AC:2C:43:0D:B2:82:A3
            X509v3 Authority Key Identifier:
                keyid:72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:4c:6f:25:ed:3b:09:85:d2:10:88:b0:22:c3:de:c5:b4:d3:
         9d:d7:d5:18:d9:f7:e3:c6:86:a3:cc:76:4d:b5:5f:14:9b:e2:
         24:74:77:57:52:f6:38:f2:57:e8:23:78:5b:1d:b7:53:7a:a6:
         dd:84:18:fd:84:ca:68:49:db:5f:55:64:4e:fc:90:51:8a:a5:
         e5:da:56:9b:06:f4:e2:ed:66:5d:f1:94:8a:63:f4:2d:64:bc:
         49:c1:8a:b8:52:f2:10:30:58:aa:54:60:55:87:1b:2a:3e:ae:
         99:23:68:23:84:37:34:09:e1:5a:19:8c:5d:60:dc:28:d8:bc:
         38:4d:58:97:9d:d0:2e:e0:6d:4b:66:87:d7:dd:dc:f7:14:a6:
         70:6d:06:39:16:99:45:c2:45:a2:69:0d:5d:cb:de:23:9f:47:
         3c:58:2c:f8:f7:44:1c:aa:86:05:fb:26:c1:c1:c3:ab:3c:36:
         a8:e9:05:1b:eb:d5:b3:ae:dd:fc:e2:2e:21:17:4c:00:8b:b6:
         48:cf:7b:c1:3a:54:59:f1:cc:d1:ca:2f:cd:e0:e0:40:44:85:
         48:90:fc:56:3a:40:95:cc:e1:19:8d:5d:1a:27:be:a7:68:a8:
         2f:5f:fd:94:1d:34:91:ed:38:95:61:e8:9e:d2:be:51:0c:53:
         8d:ec:3b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:51:58 2026 by rpki-client