Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
File:                     J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json)
Hash identifier:          rzaeE5/xT9j/Jd18lKCcnPzB3N5xGWstApNXH0mX+WE=
Subject key identifier:   BD:1F:16:C4:51:25:06:F7:F4:31:D0:D2:53:F2:44:DC:A0:4E:95:0E
Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58
Certificate issuer:       /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
Certificate serial:       D6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
Manifest number:          D4
Signing time:             Sun 01 Mar 2026 07:52:26 +0000
Manifest this update:     Sun 01 Mar 2026 07:52:25 +0000
Manifest next update:     Sun 08 Mar 2026 07:52:25 +0000
Files and hashes:         1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: 1AGVOgBAKjvu9IwCsJhZGbI0P3uO4m8A4ie0ripgx/c=)
                          2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: C6tDI3rJ/iD8oB/JqL4h4hgvRMylwXHdbQGCV6gQBXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl
                          rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
        Validity
            Not Before: Mar  1 07:52:25 2026 GMT
            Not After : Mar  8 07:52:25 2026 GMT
        Subject: CN=69a3f03a-5f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e9:62:e7:9e:2f:9b:e1:e9:15:9d:75:1f:15:
                    ae:3c:ec:be:bf:74:5f:7c:4d:37:d4:bb:71:4a:66:
                    6e:a2:a3:e9:6c:91:e5:f2:58:1c:73:2b:1d:b8:ba:
                    f6:2c:5f:6b:1f:58:1e:76:82:1f:bc:c5:d5:9c:b9:
                    2a:73:40:ba:b3:59:c7:a8:67:24:0c:40:df:63:4b:
                    e1:eb:77:f1:5a:63:f1:af:61:aa:eb:06:64:3e:6e:
                    48:ac:26:ad:a0:04:a3:04:30:28:a1:1e:2a:de:9f:
                    60:00:34:a4:7f:9d:b8:7f:d5:a0:9f:2b:49:a5:a9:
                    b1:ed:c8:0d:e4:4f:9b:53:b5:04:88:24:9d:85:d6:
                    7b:0e:0e:70:ff:93:09:7a:da:2c:ac:f8:4d:33:bc:
                    27:a7:b1:33:19:e2:e8:5e:55:d5:05:bf:25:5c:95:
                    5c:fb:a1:b2:97:ec:b4:c9:88:7a:66:33:b0:b6:de:
                    28:87:19:62:14:3e:89:d4:74:f9:e1:65:a8:44:cd:
                    27:4a:0f:98:8a:c9:89:0a:4f:97:8b:9b:3d:fa:cd:
                    88:44:6b:8c:c0:bd:25:6d:18:02:4f:db:75:56:cd:
                    d6:cf:90:f4:cb:29:77:53:ee:ee:95:6b:aa:56:6c:
                    d9:75:d9:be:00:a2:a7:bd:28:43:5b:d8:df:ba:0c:
                    99:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1F:16:C4:51:25:06:F7:F4:31:D0:D2:53:F2:44:DC:A0:4E:95:0E
            X509v3 Authority Key Identifier:
                keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:07:14:6e:e5:b7:98:95:b8:b1:f9:01:db:52:e8:93:0e:90:
         ac:95:68:5d:70:bb:23:d8:75:59:80:73:11:29:42:00:6c:83:
         0a:cd:ee:da:0a:e3:56:37:e7:51:d7:06:c7:e8:c0:af:07:f7:
         c9:96:34:47:72:91:36:65:91:26:05:eb:38:c5:e6:f0:ca:fa:
         70:6b:55:ee:c4:16:8f:94:d4:dd:8e:4d:ac:c1:b1:72:a5:6c:
         6f:87:05:86:74:ae:2b:12:8b:8c:98:94:d7:01:77:ff:00:f3:
         e0:93:3e:5d:d6:e8:a0:40:99:a6:05:2e:f1:b3:97:97:1f:fc:
         c9:53:b7:4d:ba:db:f3:fc:3f:42:2b:4d:f4:6b:d5:36:cd:2d:
         2c:8b:75:7a:ae:9f:4c:ee:71:f4:bc:52:b6:75:d3:97:39:0d:
         c0:68:e0:80:2c:08:5c:56:52:9f:34:de:a0:62:ab:6e:d2:60:
         f5:be:94:8f:10:b5:77:fa:12:ec:c3:2d:7b:6e:32:ac:df:86:
         b4:8a:ea:da:5a:3d:5c:e9:75:87:4a:13:26:19:b8:a9:d9:9c:
         b7:b8:45:af:b4:21:04:77:5f:77:70:b5:0c:1a:57:32:be:f5:
         14:21:dc:41:45:ce:7e:62:c6:02:93:32:a7:02:62:92:7d:d8:
         32:7e:17:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:27 2026 by rpki-client