Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
File:                     tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft (raw, json)
Hash identifier:          JRRgV9aYaztMo6T8Fr7YzC1Sxx0ENsJ+YzI9hWJN3/k=
Subject key identifier:   E8:5F:1C:BC:22:D3:B0:33:23:BB:DC:08:9B:AE:51:B5:BF:0F:DE:70
Authority key identifier: B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
Certificate issuer:       /CN=A91897BB/serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
Certificate serial:       081D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
Manifest number:          0814
Signing time:             Sun 01 Mar 2026 23:40:03 +0000
Manifest this update:     Sun 01 Mar 2026 23:40:01 +0000
Manifest next update:     Sun 08 Mar 2026 23:40:01 +0000
Files and hashes:         1: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl (hash: CNIOvTEoSMe7wH6a8dvpcroEOw5TwZp6z/h9B8tOhS4=)
                          2: E51ECC8610E711EBAD066E1DC4F9AE02.roa (hash: FlKi2ZxHz6D5064I2oVQSbDeOoF5annLB1jMFwj5Qkk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl
                          rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2077 (0x81d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91897BB, serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
        Validity
            Not Before: Mar  1 23:40:01 2026 GMT
            Not After : Mar  8 23:40:01 2026 GMT
        Subject: CN=69a4ce53-fb71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:93:af:d9:e8:18:d7:d1:43:12:c4:3d:8c:5c:
                    00:57:68:84:fb:01:f9:29:b2:8c:c0:01:07:0e:61:
                    bd:9d:a8:56:b9:eb:c3:49:28:1f:bd:0f:91:da:4e:
                    ac:f2:8f:91:c8:85:92:85:37:c3:ad:11:8b:a4:b0:
                    1b:c5:a2:d7:66:74:dd:9b:72:67:cc:5e:25:d7:fc:
                    32:75:8a:a7:5a:80:4c:21:72:7d:ce:67:ae:cb:a6:
                    67:3e:28:b6:c6:d5:af:67:4b:ee:36:d1:ae:ce:3a:
                    dc:2f:da:ca:4c:f3:68:00:ed:f4:1a:c0:64:e1:0a:
                    9e:54:e5:07:59:29:36:c3:06:c9:cb:4a:e4:25:d3:
                    74:75:cc:d2:91:a6:dd:3c:dc:db:75:44:11:6f:45:
                    34:2d:1e:43:82:77:d0:91:dc:f6:b6:d2:42:b1:59:
                    f9:69:38:81:bd:b0:f7:e7:86:15:29:97:94:84:ff:
                    ea:8f:36:42:06:92:b3:45:e4:76:78:bb:fd:c3:26:
                    bd:b7:b8:e5:e6:d7:e7:25:eb:77:8a:55:37:ad:43:
                    d9:39:01:87:54:9a:78:bd:b3:53:12:5a:5d:08:f4:
                    2c:ae:53:03:42:16:e1:a0:21:ec:7a:58:72:36:d3:
                    03:7d:c9:42:fc:1f:5e:d4:8b:d1:eb:f8:e0:e3:77:
                    ac:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5F:1C:BC:22:D3:B0:33:23:BB:DC:08:9B:AE:51:B5:BF:0F:DE:70
            X509v3 Authority Key Identifier:
                keyid:B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:35:cb:fd:2b:9c:9e:c7:05:b2:c0:1f:81:1f:02:12:b9:cd:
         cf:56:d1:a7:02:35:1e:5b:38:3c:16:bc:2e:3f:77:c1:36:36:
         67:10:69:f6:ec:2b:f0:9a:6d:97:81:b7:39:0a:a7:70:b8:70:
         1c:56:48:fb:dd:1e:8f:17:2d:25:1a:fc:93:a9:a1:7d:28:e3:
         85:11:ce:71:6d:a6:53:c1:9c:42:3e:a0:ca:cb:84:c6:81:0d:
         f5:3c:7b:d9:30:90:86:b8:72:ac:9d:d4:fb:96:aa:a0:54:82:
         bf:17:08:53:d5:49:fe:84:b1:f1:b6:d0:e2:36:bd:53:a7:fb:
         19:2a:b1:7f:fb:36:70:a9:5b:36:eb:74:5c:12:41:81:4a:37:
         14:ac:66:de:e0:1d:9f:e1:96:82:a0:be:e9:84:f3:f8:f9:be:
         46:ee:91:3c:68:d5:ed:5f:d9:30:94:d9:0a:79:f3:88:6c:c8:
         f6:98:33:ec:d9:f9:b5:c4:cd:2e:95:64:04:2a:30:c0:17:2a:
         6b:02:99:62:89:a1:5b:bf:d7:b6:b3:9a:84:0f:04:c9:28:67:
         e5:7b:e0:b0:ef:22:12:d8:21:82:d1:7c:13:53:58:26:37:94:
         e8:83:57:f1:77:f3:58:5c:23:22:53:a7:e0:e1:86:0c:b3:b5:
         63:13:6d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:37 2026 by rpki-client