Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft
File:                     91rI3ARJV7GxWgsVxu2jGLI7QDM.mft (raw, json)
Hash identifier:          P+gRBNiDFDeWfi6FB038R9xFwnkwgQea45FKBndvwhc=
Subject key identifier:   5C:16:A2:D5:77:7A:80:22:E1:95:EE:13:BE:39:8A:DF:74:85:8D:47
Authority key identifier: F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33
Certificate issuer:       /CN=A919CDE4/serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033
Certificate serial:       0232
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft
Manifest number:          022C
Signing time:             Mon 02 Mar 2026 01:24:33 +0000
Manifest this update:     Mon 02 Mar 2026 01:24:32 +0000
Manifest next update:     Mon 09 Mar 2026 01:24:32 +0000
Files and hashes:         1: 91rI3ARJV7GxWgsVxu2jGLI7QDM.crl (hash: kh7PqG5fzpC6wD/ENh8NFycOJkcsU7GBWMTdAeu3Np0=)
                          2: 955C43AAC99E11ED98E9BE5BC4F9AE02.roa (hash: I5lzb/QAAInVeAXwX1UF76K4valuRx7JaU0RB09yN/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl
                          rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CDE4, serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033
        Validity
            Not Before: Mar  2 01:24:32 2026 GMT
            Not After : Mar  9 01:24:32 2026 GMT
        Subject: CN=69a4e6d1-bec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:41:72:9b:23:4a:ca:ee:45:b4:cc:8f:28:d0:
                    da:b0:79:e3:ca:3d:cc:e3:b1:86:98:07:3a:39:ec:
                    c5:79:6f:70:cc:e8:0d:81:52:ee:4e:db:70:ce:1f:
                    26:04:89:e6:14:bf:00:6d:ea:b2:60:4e:fd:ff:f7:
                    af:d8:64:e1:c4:21:8d:40:15:bd:a0:75:9b:ac:69:
                    cc:45:39:b0:e3:cd:6d:d4:59:90:59:bf:90:2b:16:
                    8a:72:cb:51:38:5e:b1:f6:d2:3a:a5:df:ce:0c:c8:
                    64:a4:db:66:cb:01:d6:f6:1a:26:5b:ad:90:af:c5:
                    48:3e:37:28:6a:8f:a3:05:f5:cd:b4:de:ae:0e:2b:
                    7a:52:9f:b5:0f:d3:ac:f2:f7:cf:05:f3:c0:28:ae:
                    80:bc:9d:06:b9:70:37:e6:52:4a:1e:72:f5:44:b0:
                    8a:4d:20:6f:e1:e7:4e:f9:90:46:13:44:33:3d:23:
                    e4:22:2d:65:c4:61:dd:c8:c6:09:eb:07:9d:45:75:
                    79:c9:eb:b3:f5:92:5b:da:91:17:6b:8f:ec:40:b1:
                    40:67:bb:6c:ac:d4:e4:45:c8:dd:48:8b:f8:5c:1f:
                    91:ad:30:79:11:7d:f0:a1:c7:d3:ba:6d:d1:c9:e9:
                    45:f2:7f:c0:e7:cb:31:57:b1:81:7f:69:66:67:f2:
                    9f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:16:A2:D5:77:7A:80:22:E1:95:EE:13:BE:39:8A:DF:74:85:8D:47
            X509v3 Authority Key Identifier:
                keyid:F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:4f:13:be:c1:fe:4c:cc:55:43:8e:61:ba:a9:a4:fb:2b:55:
         92:1f:02:06:b2:7b:89:50:76:2c:87:50:53:1b:e1:2a:a9:a6:
         e8:dd:88:a7:fa:54:84:fc:f5:60:4f:14:dc:66:54:0b:25:fa:
         e4:54:b6:ac:2e:07:bb:97:2a:a3:11:85:d9:a6:58:19:0d:3b:
         e8:8c:d8:16:e3:df:fa:dc:19:5a:56:5c:67:63:af:46:65:3c:
         ac:17:33:f5:f4:dc:c0:29:78:6a:f3:eb:db:56:21:d5:60:b8:
         8c:d3:00:f6:4d:c3:a3:0c:c0:e1:3d:c0:43:cc:d2:88:8e:0d:
         30:28:cc:5d:5e:9c:1f:83:1a:cb:82:e7:27:83:91:23:21:a4:
         1b:16:fb:08:4f:f2:ca:33:58:05:4c:f0:bb:f8:8f:e3:a7:b0:
         db:32:24:0b:72:a9:47:9a:93:3b:e7:7a:17:8b:e2:5c:c8:8c:
         1e:e9:32:99:9e:cd:f3:10:0e:2b:de:bf:d4:c0:2a:18:5c:23:
         70:de:a6:79:53:2b:86:54:c2:39:e2:7b:43:b4:04:0f:6c:66:
         27:bb:a3:5b:91:17:c0:4b:b5:b0:f4:51:92:35:56:6a:a6:45:
         4a:e4:d7:cf:12:37:62:49:d2:c9:29:e6:9e:c3:4a:f3:c1:15:
         7a:28:f2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:33 2026 by rpki-client