Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
File:                     a4KWpYFUMCeOwxG16cvrf_CpDcY.mft (raw, json)
Hash identifier:          0Uvukuy43IIKWfVSHB8TZJwfiD7HX3GQnHKx3MNmNF4=
Subject key identifier:   78:A8:98:77:0F:DF:AB:5C:04:56:62:93:BA:F0:89:FC:B4:AE:E4:25
Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
Certificate issuer:       /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
Manifest number:          79
Signing time:             Sun 01 Mar 2026 09:07:29 +0000
Manifest this update:     Sun 01 Mar 2026 09:07:28 +0000
Manifest next update:     Sun 08 Mar 2026 09:07:28 +0000
Files and hashes:         1: a4KWpYFUMCeOwxG16cvrf_CpDcY.crl (hash: 0n0JCvaLg/Lb2QXOk9uKEyWTtpm/APjQs95XoEmCLI8=)
                          2: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (hash: oCr3aQd1HSJF91DdiESRPlphTmJf2c8Lshvn2EKkib4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl
                          rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
        Validity
            Not Before: Mar  1 09:07:28 2026 GMT
            Not After : Mar  8 09:07:28 2026 GMT
        Subject: CN=69a401d0-2a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f8:97:b0:1c:57:65:8a:06:6e:f5:d6:67:af:
                    17:04:a0:06:0b:29:c3:e1:e2:b0:ea:de:2c:79:34:
                    47:05:77:de:6c:6d:5f:b2:33:1b:a6:5b:18:ad:0a:
                    e2:de:3f:59:a8:b0:28:6f:85:95:f7:f2:11:87:e0:
                    c4:28:d7:b0:5d:0b:cc:aa:c8:fd:ee:a8:18:54:f9:
                    4b:be:4c:34:ff:f6:cd:d7:57:4b:a8:db:8a:d1:6f:
                    b6:03:dc:71:60:b3:17:e1:08:e6:f2:e1:25:e3:80:
                    5a:b8:f4:15:27:65:07:2a:b0:31:2c:4d:bd:a0:bd:
                    99:a9:d4:7a:e1:72:a2:bb:70:8d:0e:0d:b0:6c:0e:
                    0d:64:7f:29:2c:8b:b2:02:0e:ed:b4:14:3d:7c:47:
                    c5:94:6e:ab:42:8d:21:8c:32:6e:c1:fd:51:ed:48:
                    a4:f1:8b:99:78:cf:03:a7:6c:cb:63:fd:ee:4d:0d:
                    fa:48:32:b1:da:65:ad:8f:eb:24:df:6b:f0:74:62:
                    1e:5e:37:27:e7:7b:1d:3a:c3:7a:67:eb:8c:39:88:
                    8a:8a:19:b2:a4:e8:6b:4f:c7:b5:b0:b5:79:e7:2a:
                    cd:66:85:a5:2f:60:f8:97:a5:4e:11:73:03:a7:aa:
                    f7:ef:bb:3b:96:2c:bb:8f:4d:98:f0:b3:57:74:95:
                    b2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A8:98:77:0F:DF:AB:5C:04:56:62:93:BA:F0:89:FC:B4:AE:E4:25
            X509v3 Authority Key Identifier:
                keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:37:2c:0f:98:e5:26:2b:c8:00:83:28:5d:40:4d:fd:a9:9b:
         03:19:dc:38:06:26:4c:be:17:b4:75:49:c3:eb:da:57:ce:42:
         df:5a:aa:b0:f8:4a:7e:e2:bb:88:a2:cc:cb:a0:f8:27:05:63:
         0a:c4:dc:d0:b9:2b:9b:e2:16:cd:ff:5c:6d:78:b5:e9:16:7f:
         d7:b8:f5:00:82:07:1e:4d:7a:ca:02:ca:41:06:47:30:52:d2:
         a5:c8:91:21:e0:95:a2:a5:11:07:32:a1:9e:ee:f6:6e:48:4c:
         14:61:0f:6e:e8:31:ff:2e:c7:9d:59:0a:5c:84:51:be:41:ec:
         76:8d:4c:b6:d5:7a:7d:87:7f:5c:73:77:49:0c:29:f5:fd:1d:
         60:26:0f:e4:ce:92:f1:f8:fc:e8:00:b7:70:f9:48:65:8b:a9:
         c6:3f:d1:7e:4c:30:bd:16:37:d2:e1:c2:12:63:e8:c4:dc:de:
         53:94:21:4f:2d:b2:c2:04:a6:e9:e6:0c:b1:95:0e:b1:4c:6a:
         0e:62:2c:25:8a:45:19:3b:0a:4a:b6:4b:32:dd:36:0f:d2:2f:
         f8:f3:c5:fb:61:5a:f1:75:aa:e0:5f:1a:ea:e6:28:a3:bb:4a:
         e0:6a:0d:c3:cd:34:7b:35:dd:65:e8:5b:e6:22:ca:05:5a:af:
         d2:58:34:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:10 2026 by rpki-client