Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft
File:                     _nQHcdbqABLeOHBW-Iy-3TbEqGA.mft (raw, json)
Hash identifier:          VKU+o3yRNXY7S6mCZGfvAr87dQHSuJH7r1Wz6cxbs9g=
Subject key identifier:   D2:29:77:82:0E:98:D1:8F:90:1F:B1:2D:3D:36:07:E0:95:7E:BF:A1
Authority key identifier: FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60
Certificate issuer:       /CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860
Certificate serial:       0205
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft
Manifest number:          0201
Signing time:             Mon 02 Mar 2026 02:56:14 +0000
Manifest this update:     Mon 02 Mar 2026 02:56:11 +0000
Manifest next update:     Mon 09 Mar 2026 02:56:11 +0000
Files and hashes:         1: _nQHcdbqABLeOHBW-Iy-3TbEqGA.crl (hash: hmB1YwOBqy6GhkhKzV9DcoIU9PPwghY1oy/KTFvfFPM=)
                          2: 37B318C0050111EEAFBCAE7EC4F9AE02.roa (hash: eMm1aATtYTxr8yulbbTqFy3KIRD0+Hc1f6QKDsCg/8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl
                          rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:56:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91889A4, serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860
        Validity
            Not Before: Mar  2 02:56:11 2026 GMT
            Not After : Mar  9 02:56:11 2026 GMT
        Subject: CN=69a4fc4e-9244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:e1:1a:e7:09:6a:c5:a2:24:13:4c:b9:22:
                    f6:15:87:2b:42:29:18:e7:9a:9f:16:c4:45:d8:5a:
                    26:c8:d2:e5:51:22:a3:fc:c4:d1:cb:ef:90:2b:6a:
                    bc:ef:7c:c2:7a:8b:db:ab:cc:91:7a:20:c4:cf:ee:
                    bb:02:04:4c:2b:66:1a:f6:46:43:5b:33:24:13:3a:
                    2e:0a:06:ab:f7:77:c2:3b:c0:73:9f:18:23:db:fb:
                    86:04:98:1a:ec:5b:17:e7:e8:9c:30:1d:74:ad:81:
                    df:85:b4:6f:8c:5b:3a:05:af:73:cc:4f:b3:9a:77:
                    2b:f3:37:38:85:20:b7:e2:29:00:f5:1c:67:1a:9b:
                    3b:0d:83:07:4a:57:5f:e9:d6:9b:70:bb:47:81:5c:
                    75:f4:4e:be:cd:39:ac:29:00:19:e8:e2:33:af:e9:
                    ec:50:e0:c4:10:0c:b8:31:0b:65:da:0c:e1:e0:97:
                    87:47:be:1f:4f:a2:a4:7e:c7:62:3c:6e:f3:81:33:
                    bd:a8:d5:00:09:7d:e4:7b:42:7c:43:d8:99:97:90:
                    c4:3c:29:0b:3e:64:c3:34:3e:2c:84:2f:5f:61:3f:
                    89:4c:c7:d1:f6:a9:69:b7:c5:86:fc:49:d0:01:c0:
                    8e:99:cd:03:7c:52:25:de:06:b2:0c:cf:12:7e:f7:
                    0d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:29:77:82:0E:98:D1:8F:90:1F:B1:2D:3D:36:07:E0:95:7E:BF:A1
            X509v3 Authority Key Identifier:
                keyid:FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f7:27:80:ee:ae:08:d2:ab:2a:8b:e3:bb:8c:fe:85:8c:6e:
         42:08:fb:f6:e2:27:17:02:47:91:7f:57:0c:77:6b:77:3b:4f:
         8a:4b:0d:3c:25:33:a1:06:8c:ae:53:7f:6c:90:25:7c:63:48:
         8e:8a:58:ec:2f:5e:4f:2f:6b:ef:95:c1:8a:8f:c7:b8:bb:b0:
         d6:10:54:93:62:34:58:b0:dc:6d:6d:68:b5:5c:d3:70:39:d3:
         9e:23:09:5b:ae:09:75:84:b3:1f:bf:df:f0:43:48:79:8c:83:
         d1:09:9a:5a:20:7e:f3:f7:fc:26:1f:79:4a:29:75:44:08:7b:
         15:5c:ed:5e:3e:a6:1e:07:3f:2c:58:1d:1b:3c:e7:a6:8b:ea:
         72:69:90:bc:72:76:81:2e:70:32:da:44:df:d0:4f:8b:95:a7:
         43:77:1a:3a:c5:3b:18:28:17:8f:38:b0:d4:1e:3a:d5:3a:01:
         17:2e:9c:8e:7e:fa:17:61:65:81:4f:05:35:6a:21:00:d8:e2:
         cc:0f:00:7f:c4:9f:f3:f3:4d:55:57:b3:65:20:87:0f:a4:b0:
         7f:ef:70:d0:09:e1:f2:55:9a:6e:31:12:0f:54:8b:ce:34:5e:
         4b:d4:4c:a9:72:87:1d:f1:20:d6:a9:81:c5:9b:1a:b1:18:d3:
         7a:a4:4e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:11 2026 by rpki-client