Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft
File:                     kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft (raw, json)
Hash identifier:          z8q2CPWtUiHH42SFvzAMxAxaFzlSmDZeZTFF6naVd0g=
Subject key identifier:   14:5E:CB:97:05:59:B2:67:A0:0D:E5:FB:89:0B:CF:68:D5:F8:7A:3A
Authority key identifier: 90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02
Certificate issuer:       /CN=A91A014A/serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102
Certificate serial:       0265
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft
Manifest number:          0260
Signing time:             Sun 01 Mar 2026 02:47:50 +0000
Manifest this update:     Sun 01 Mar 2026 02:47:50 +0000
Manifest next update:     Sun 08 Mar 2026 02:47:50 +0000
Files and hashes:         1: kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl (hash: SpUeulNipZ8b5tnJj+fD5Jmzv+aGTBurdXORiMjclDM=)
                          2: 203FA37E750611ED95126872C4F9AE02.roa (hash: fm9S9mNo6Y2ygfq7yhWG4UNmDV8piD8pCbOO7u7749k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl
                          rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A014A, serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102
        Validity
            Not Before: Mar  1 02:47:50 2026 GMT
            Not After : Mar  8 02:47:50 2026 GMT
        Subject: CN=69a3a8d6-0973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b7:61:ec:4f:06:62:93:4b:80:21:90:c2:8d:
                    eb:32:52:b9:13:ce:6a:0c:4d:85:88:be:33:e5:6b:
                    a8:67:90:48:27:87:de:87:ad:89:b0:c2:0a:46:0f:
                    7a:c4:44:df:0e:9e:df:71:0a:92:14:c0:e8:0d:7e:
                    6b:c0:a6:bf:d9:6e:ac:25:91:85:a4:50:3a:1a:17:
                    2e:8c:33:af:2d:df:6c:71:1d:dd:80:70:22:59:65:
                    4c:6a:7b:14:fc:b6:06:82:3f:35:91:4a:19:fe:e2:
                    9d:48:b5:3c:5a:7d:c9:4e:a9:1d:6a:cc:06:de:69:
                    16:21:da:d9:78:90:58:79:dc:51:3c:ab:84:a8:bc:
                    2f:6d:ab:7d:68:80:59:e3:cd:bd:ef:ac:b8:97:50:
                    77:d0:59:bd:75:88:1b:d2:fa:a4:be:60:dd:de:ba:
                    65:96:b3:ba:cc:62:72:f4:28:b7:b7:79:98:8f:1e:
                    80:d3:73:8a:e1:34:c9:64:66:e7:d1:35:69:0e:e1:
                    08:22:b9:a2:fb:f8:4a:3c:81:d6:1d:46:41:52:5d:
                    7c:ef:75:b8:c6:22:1b:f0:e1:b5:81:31:b4:c9:71:
                    43:b8:fd:f0:4d:40:f1:0d:36:4f:d5:fa:6e:0d:f5:
                    a8:68:da:09:0a:a3:9c:5f:98:98:9e:e8:c4:a5:a1:
                    24:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5E:CB:97:05:59:B2:67:A0:0D:E5:FB:89:0B:CF:68:D5:F8:7A:3A
            X509v3 Authority Key Identifier:
                keyid:90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:24:4e:16:c8:a9:a0:d8:25:1c:f3:c0:50:7f:5c:b9:12:5b:
         13:b1:58:e0:25:32:b9:bf:7f:53:11:5e:92:f1:0d:38:df:09:
         71:18:64:3a:b2:2b:28:d0:26:76:d8:47:3f:12:c4:ea:c3:58:
         91:4b:48:16:36:2f:25:10:01:9e:7d:fc:14:7a:a9:30:4f:3a:
         4e:6e:1c:04:81:bd:46:a5:30:10:0c:e8:f0:e8:63:f2:e4:3d:
         76:f1:ce:0d:ab:3d:f7:d4:b0:6c:85:4c:b2:32:7e:c0:a2:4d:
         73:8f:f2:34:2d:6e:62:83:76:12:d4:cd:eb:75:e6:95:f6:f3:
         2f:03:22:12:5d:0f:35:50:3b:3c:2b:04:ae:45:59:7e:41:9c:
         c0:a8:fd:c1:c8:ec:55:ce:78:96:e1:23:b5:03:81:82:6e:3e:
         37:02:fb:d7:4e:4f:29:95:47:24:e5:c2:a5:d0:8a:65:57:c3:
         d3:30:bb:7e:27:6e:13:e4:a1:d7:96:9e:fa:4f:47:d4:4a:b9:
         5c:c1:35:6b:0f:53:b2:ed:08:50:ae:92:5d:61:7b:41:08:2d:
         75:d1:1f:a0:8e:2e:fa:36:5a:b0:23:3e:65:dc:d8:e7:bd:9f:
         01:0c:05:db:14:93:d5:51:c9:42:99:7b:43:48:50:f1:b5:93:
         76:53:75:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:03 2026 by rpki-client