Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.mft
File:                     4-ABdWjohx9OiHmxBiqu1yw08jo.mft (raw, json)
Hash identifier:          u6wbGHamTLF4LWkooEkoY/8YV4WKxu7+wLqjoiy9BvI=
Subject key identifier:   9D:FA:13:AE:86:0E:E5:B7:FC:75:BD:7F:19:EC:C5:26:07:08:34:08
Authority key identifier: E3:E0:01:75:68:E8:87:1F:4E:88:79:B1:06:2A:AE:D7:2C:34:F2:3A
Certificate issuer:       /CN=A91A05BF/serialNumber=E3E0017568E8871F4E8879B1062AAED72C34F23A
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4-ABdWjohx9OiHmxBiqu1yw08jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.mft
Manifest number:          46
Signing time:             Sun 01 Mar 2026 09:48:09 +0000
Manifest this update:     Sun 01 Mar 2026 09:48:08 +0000
Manifest next update:     Sun 08 Mar 2026 09:48:08 +0000
Files and hashes:         1: 4-ABdWjohx9OiHmxBiqu1yw08jo.crl (hash: ipcdd4IY5SrGonv+9uSah5rY+A9kmwZ6sC92k39VpNQ=)
                          2: 5FC8CD04B3B511F0BF1A0B54C4F9AE02.roa (hash: WoeOR+zlZASpmeTPc2cNATAqH5VHw3bRg4XkQfACANw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.crl
                          rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4-ABdWjohx9OiHmxBiqu1yw08jo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A05BF, serialNumber=E3E0017568E8871F4E8879B1062AAED72C34F23A
        Validity
            Not Before: Mar  1 09:48:08 2026 GMT
            Not After : Mar  8 09:48:08 2026 GMT
        Subject: CN=69a40b59-4604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e5:14:a4:18:60:b1:8e:a0:cf:bc:a9:22:a4:
                    1b:07:53:19:06:f3:99:1e:f6:8b:23:97:05:fd:ac:
                    3f:2d:18:dd:be:1f:c4:c7:56:a9:d0:d2:ef:31:c5:
                    bc:f7:0e:0b:23:19:46:0a:65:8a:92:e9:ed:df:24:
                    15:9d:43:0a:a6:bd:15:cc:0a:f3:26:e5:3a:02:4f:
                    a2:1c:96:61:b8:73:12:43:bc:91:31:4c:9f:ed:d1:
                    44:99:e6:2b:b8:c7:33:61:bf:01:f1:a0:2b:b7:b6:
                    dd:6e:fa:df:f5:76:c3:4c:70:a4:53:c9:12:32:7b:
                    a4:e0:02:ef:e0:44:09:ec:09:6e:1f:9f:9c:2e:be:
                    c5:8a:1a:a5:92:af:44:4d:85:6d:2a:5f:ea:6d:4b:
                    87:1c:71:04:51:bd:83:90:55:1c:7f:13:40:f0:0b:
                    52:f9:5f:b3:6a:86:66:68:2f:ed:c5:57:89:a7:b3:
                    f7:59:62:fd:45:91:16:e5:74:8e:96:e6:c7:b8:60:
                    91:cc:19:94:e3:d4:82:b5:64:ee:c9:a7:e9:88:9b:
                    00:7a:c8:ff:5b:13:38:b7:d2:26:af:9a:20:8f:a2:
                    1b:37:25:3b:93:90:ff:04:c0:74:47:ce:d8:51:4a:
                    7d:4f:1e:cf:f4:22:94:8a:8b:cc:29:52:68:90:e4:
                    d2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FA:13:AE:86:0E:E5:B7:FC:75:BD:7F:19:EC:C5:26:07:08:34:08
            X509v3 Authority Key Identifier:
                keyid:E3:E0:01:75:68:E8:87:1F:4E:88:79:B1:06:2A:AE:D7:2C:34:F2:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4-ABdWjohx9OiHmxBiqu1yw08jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b3:c0:34:ce:08:1d:4b:bc:c0:3a:9e:af:91:1b:1e:bb:38:
         1f:3c:46:4b:f7:43:73:64:08:6f:6d:c9:75:aa:81:0a:98:2b:
         09:c2:c3:c0:d1:55:7c:71:c1:6f:27:26:7d:d3:7f:8f:c6:07:
         4b:1d:12:e3:0f:87:c3:2c:4c:ca:30:e6:2b:1f:1d:0c:d1:53:
         66:69:97:69:db:1c:87:95:0d:44:65:dd:c0:f7:a5:b8:00:9c:
         92:56:f6:33:f1:62:46:ec:9d:0f:93:2b:04:3b:ad:17:9b:b1:
         74:e9:4f:3a:09:e5:72:98:9d:4e:14:e9:ed:28:55:2b:ad:71:
         29:73:ab:1a:38:f4:19:48:af:75:68:cb:e3:b2:52:fa:98:c0:
         d9:75:b5:bb:94:a5:50:2f:4d:66:a9:1e:dc:3d:9f:42:24:29:
         89:ca:87:81:b3:0d:b2:e9:09:e0:22:f5:9e:c5:5f:65:b3:58:
         4c:a1:c7:7f:3e:83:ce:f7:e8:7a:86:14:12:61:9f:f4:6b:2e:
         94:e7:84:3a:4d:ec:ba:93:9f:a1:c8:39:ad:6c:05:64:56:45:
         d7:1b:5e:79:b9:e9:05:2c:3e:9c:bc:ff:44:6f:26:16:ca:68:
         20:e9:f3:5e:6d:14:18:61:84:07:ca:df:d1:ea:77:7d:c6:aa:
         8a:23:78:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:21 2026 by rpki-client