Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
File:                     kDfAsp43CSqDhSzkuIW3dqfB47Y.mft (raw, json)
Hash identifier:          NJVvSvoM0LikBgltmcyNv/r40QGCFn7bvs7Q6Wtx8LM=
Subject key identifier:   83:56:C9:B6:2D:0A:51:C5:DC:38:9E:90:7A:96:87:C7:65:CD:34:A9
Authority key identifier: 90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6
Certificate issuer:       /CN=A91957D1/serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
Manifest number:          01A6
Signing time:             Mon 02 Mar 2026 01:29:42 +0000
Manifest this update:     Mon 02 Mar 2026 01:29:40 +0000
Manifest next update:     Mon 09 Mar 2026 01:29:40 +0000
Files and hashes:         1: kDfAsp43CSqDhSzkuIW3dqfB47Y.crl (hash: hdDC6UT8ZpbAU5Q/I5CjorUcfjX+IfTXk5OPSmDtuqA=)
                          2: 72CE4D80958411EEB3748B58C4F9AE02.roa (hash: Y7CBsuQt9HIpYcN19tybRAYJs+zswt16vqxj5J0HE2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl
                          rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91957D1, serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6
        Validity
            Not Before: Mar  2 01:29:40 2026 GMT
            Not After : Mar  9 01:29:40 2026 GMT
        Subject: CN=69a4e806-1368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:03:9e:0d:d6:31:0d:3d:bb:eb:cf:8c:3a:7b:
                    c6:d2:72:e5:e1:8c:76:d5:db:5e:6e:2c:94:fb:07:
                    e1:89:76:df:60:a0:ef:b4:2d:32:43:08:cb:1b:ad:
                    35:20:84:1e:0b:53:cb:57:56:77:0b:6c:da:23:21:
                    af:9b:16:c9:76:56:d8:9f:cb:26:ac:cf:ef:a5:14:
                    26:b1:70:3e:ba:7f:e7:66:12:e9:0d:e0:77:a0:fa:
                    26:8c:49:b0:b7:73:e0:28:3e:fd:ad:8c:a6:ae:a7:
                    f5:df:7b:52:a2:23:63:68:89:67:f8:c5:5f:dd:af:
                    dd:e3:e2:4e:d9:49:b6:a0:ae:1a:9b:de:74:29:4e:
                    15:a5:32:60:93:ff:3f:0d:aa:6e:94:9a:00:d7:1a:
                    77:03:18:90:87:6d:2d:2f:bd:16:32:8b:1b:69:c0:
                    bc:c2:ed:1b:ac:85:7f:51:fc:aa:84:e4:ab:68:8f:
                    1a:2b:1c:15:4a:11:32:63:a7:c8:7b:7a:39:fb:5f:
                    1b:33:43:21:04:d8:c3:ff:f5:32:88:8f:26:f0:c6:
                    da:8e:4a:7e:ac:87:32:89:6b:e5:6c:e0:92:d4:09:
                    45:24:02:ae:59:13:33:6c:26:cf:4b:63:77:3f:7b:
                    db:4b:1e:45:f0:f1:31:23:21:c9:7f:e0:a0:b0:76:
                    40:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:56:C9:B6:2D:0A:51:C5:DC:38:9E:90:7A:96:87:C7:65:CD:34:A9
            X509v3 Authority Key Identifier:
                keyid:90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c4:9a:29:b6:53:92:c8:20:16:b5:c7:ff:87:87:05:33:db:
         4b:3f:8f:18:7c:34:43:25:0d:e9:8d:d6:ef:39:38:24:27:97:
         21:93:3d:14:27:57:62:07:41:1d:87:6a:8f:2f:77:c0:b2:77:
         e9:36:20:91:8e:f4:7a:7f:9c:76:2e:bd:9f:3d:a1:2e:ae:b8:
         10:36:8c:1f:44:be:16:7d:e7:f5:92:49:bf:30:47:c4:51:c5:
         c8:b3:53:41:74:22:43:b5:5c:2e:6d:13:d6:bc:92:ab:15:de:
         25:c9:78:55:0a:4a:96:79:21:db:8e:60:a3:b1:5f:b2:9d:02:
         26:3c:9d:34:b0:f7:1c:14:3a:ec:d0:96:8c:bf:eb:09:a1:f1:
         fd:a1:82:fa:cc:f2:0e:66:98:c6:75:89:bc:7a:9f:0f:aa:2e:
         36:bb:24:c8:97:13:d2:c8:f1:6d:32:cc:4e:8f:cf:0e:85:4d:
         41:29:b4:4c:82:82:2c:07:db:d1:ae:57:05:2c:ce:cf:c4:f2:
         9a:a5:b0:5d:b7:bd:36:46:cf:5b:3b:ef:a6:69:d2:b1:6d:79:
         a1:01:53:eb:2f:0f:fb:9d:fa:fa:fd:f6:2d:21:05:8d:53:82:
         2f:b1:d3:57:bb:5f:d5:15:80:e4:b5:40:91:9a:3e:c0:01:ed:
         87:78:02:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:07:04 2026 by rpki-client