Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
File:                     664fmrSVbxg0tzUpNXyfPx4SBfA.mft (raw, json)
Hash identifier:          j3Ix3AGqdFh+SbrsedGWOkZauF0nYC11CvsgZF28NbU=
Subject key identifier:   DC:29:A4:3B:80:95:05:29:70:BC:1F:F5:8A:CF:EA:30:C9:C0:D5:C7
Authority key identifier: EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0
Certificate issuer:       /CN=A91923E1/serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0
Certificate serial:       054B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
Manifest number:          0542
Signing time:             Sun 01 Mar 2026 00:07:26 +0000
Manifest this update:     Sun 01 Mar 2026 00:07:26 +0000
Manifest next update:     Sun 08 Mar 2026 00:07:26 +0000
Files and hashes:         1: 664fmrSVbxg0tzUpNXyfPx4SBfA.crl (hash: OA8bQ7XAQA5qG8E3y660oztcyimWmAy4hbT28BDVw9Y=)
                          2: 42A39472C74E11ECB4AD656CC4F9AE02.roa (hash: fImPoQjcCGEMtVaG0vXMRn+nIx0n4x6cFQDmdGHL2YY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl
                          rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1355 (0x54b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91923E1, serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0
        Validity
            Not Before: Mar  1 00:07:26 2026 GMT
            Not After : Mar  8 00:07:26 2026 GMT
        Subject: CN=69a3833e-968d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:cc:ab:b2:db:70:f3:e1:a8:1a:73:f4:57:
                    61:3a:d7:39:40:f9:69:96:97:e2:90:be:43:47:08:
                    7e:68:39:4f:a6:2b:6c:d0:17:da:f4:1e:29:7f:0b:
                    b3:db:4c:83:8f:36:b3:ad:ad:ad:e9:46:d0:da:08:
                    de:04:f1:75:29:ac:d2:ce:db:94:83:94:b6:01:5f:
                    61:6e:07:23:17:18:66:94:95:ae:6b:9d:ce:52:c2:
                    97:bf:c0:ed:b9:4c:fe:c7:35:bf:89:39:d9:dd:06:
                    1e:25:f3:28:28:61:92:85:a4:6a:fd:2b:37:13:e9:
                    6a:7a:23:77:0f:2d:f2:6f:d7:e2:09:b6:8a:f9:92:
                    5c:23:fa:ec:52:cf:9e:10:cc:68:1d:93:85:6a:b0:
                    ad:00:ca:73:19:3e:75:60:61:11:df:31:d2:44:56:
                    a6:f3:92:5a:de:8c:e8:d0:5c:06:af:e4:bf:69:3e:
                    d9:70:9d:7d:6a:66:94:5c:e1:d9:e4:86:79:f2:31:
                    ae:ba:35:9e:45:8a:9e:bc:5d:87:19:38:b4:60:4d:
                    ad:4c:84:d3:95:2e:2d:25:54:d5:4c:f8:fd:92:8e:
                    e7:15:cd:4b:ed:a0:63:83:2e:77:d2:a6:58:6c:c4:
                    bd:71:da:e7:28:c3:2f:98:8e:bd:c8:76:b1:49:30:
                    a5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:29:A4:3B:80:95:05:29:70:BC:1F:F5:8A:CF:EA:30:C9:C0:D5:C7
            X509v3 Authority Key Identifier:
                keyid:EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a0:ba:4f:75:50:0e:cd:1a:57:db:13:8e:bc:c4:0a:ac:27:
         6c:92:0f:d3:d5:65:84:e4:3b:81:c9:ce:28:92:c6:cb:51:12:
         a6:2d:94:51:21:89:40:8d:ae:db:b7:48:67:b6:60:dc:d2:43:
         6e:aa:b3:36:30:90:a5:6c:f5:16:1b:9a:b9:1e:9f:ff:64:94:
         89:a1:31:5f:d5:ae:f7:75:71:be:db:ec:80:cb:e8:89:46:5a:
         c2:fd:62:73:93:a4:1c:79:fb:49:2a:df:33:0d:2d:b4:5c:b7:
         d0:60:86:fc:17:20:99:ea:5c:b2:14:3e:5c:60:15:3d:62:7f:
         bf:02:19:4c:93:19:9d:18:b2:df:4a:bd:1c:a7:23:47:2c:3a:
         96:5f:1a:d3:95:ee:99:17:c7:79:20:64:56:53:cf:c1:21:68:
         89:83:44:c1:0c:0d:de:83:de:96:08:a0:e2:11:49:c6:ff:25:
         10:c5:47:f3:12:90:16:9f:fe:23:39:ff:94:bc:5c:ff:a2:4f:
         3b:68:84:66:25:58:e7:71:59:b9:22:ff:fd:f9:c2:ed:f7:b3:
         c1:f1:c8:b8:a5:c2:1f:01:7e:64:22:84:ba:ff:b8:c7:48:c1:
         bb:e7:dc:45:f2:b2:84:80:1d:1b:7b:ab:1c:6e:fa:03:3d:d9:
         c8:12:cc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:28:24 2026 by rpki-client