Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
File:                     xHWJli7Q04kmIr5be4vu_ozniKc.mft (raw, json)
Hash identifier:          f6CbR7XxPBKpdKMJH8jSNvTTAn2c6iTEm03nEQ2jXsg=
Subject key identifier:   38:A9:5D:90:54:31:27:3B:E3:35:60:95:0A:6B:3D:EC:BB:5E:F5:7A
Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
Certificate issuer:       /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Certificate serial:       019D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
Manifest number:          0192
Signing time:             Mon 02 Mar 2026 01:06:20 +0000
Manifest this update:     Mon 02 Mar 2026 01:06:19 +0000
Manifest next update:     Mon 09 Mar 2026 01:06:19 +0000
Files and hashes:         1: xHWJli7Q04kmIr5be4vu_ozniKc.crl (hash: m7NO7hLZkD+x5dhm5E8dN/9CSNstVgEM6uj0vjkTFcQ=)
                          2: 8C7D223C2DAB11EF88127264C4F9AE02.roa (hash: 18T8dqrb31atCAaKR8ddYqk4Fx8QZQe+kHL0u3VnNZM=)
                          3: 4E2CAC386E8711EF8521ED6FC4F9AE02.roa (hash: UkaIgEQ/KJbKOWddwnVWeEntsfiHyI0qHu/TpvJIg5Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
                          rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A13A6, serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
        Validity
            Not Before: Mar  2 01:06:19 2026 GMT
            Not After : Mar  9 01:06:19 2026 GMT
        Subject: CN=69a4e28c-558e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:82:2e:fd:2e:5c:ea:e3:e2:6b:a4:e0:6c:ef:
                    0c:11:97:50:88:5c:ab:5f:02:57:03:07:be:96:7b:
                    92:6a:32:71:99:3a:fa:f5:47:08:ba:ba:e6:53:54:
                    99:8d:00:fe:0c:05:3b:46:b1:56:f0:4b:b4:85:e6:
                    e5:15:50:88:a2:e2:ec:72:ff:38:4d:b4:9c:8b:e8:
                    46:79:e2:33:bd:ae:b6:fb:40:cd:9f:fd:d5:b1:f9:
                    c5:5a:de:ad:96:f2:8a:96:6b:3a:63:55:95:88:79:
                    9c:4f:6f:43:2e:a5:14:d9:61:32:92:dd:64:da:a1:
                    e3:12:d4:79:6a:17:c4:75:5f:fe:8b:f5:5a:31:95:
                    b2:2a:66:d2:d5:b0:f9:40:a8:15:2d:fe:52:56:09:
                    95:8b:96:15:e5:5c:a9:39:b1:e9:05:c2:f0:d3:8f:
                    51:05:df:78:0b:61:7a:5c:fb:27:cd:5b:db:79:06:
                    03:30:09:1d:57:61:ce:3b:4f:2c:99:8a:90:94:15:
                    8b:c2:56:4d:4c:2b:42:ef:f9:d2:b8:6d:25:b7:82:
                    a8:5f:54:7a:3c:f1:cf:eb:a2:d3:8a:db:7b:03:9e:
                    b7:7b:9d:66:11:3b:d3:bb:c4:b5:28:b9:ac:d0:26:
                    37:ce:df:d2:e4:81:fe:88:31:76:32:b6:29:7f:dd:
                    44:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A9:5D:90:54:31:27:3B:E3:35:60:95:0A:6B:3D:EC:BB:5E:F5:7A
            X509v3 Authority Key Identifier:
                keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:79:c6:90:a7:05:ac:a7:f2:cb:3e:21:01:2c:28:e8:bd:35:
         64:6f:8d:02:73:9b:bd:31:1c:c2:6e:b5:8b:9b:92:f4:3e:e8:
         10:fa:e5:22:9d:c4:68:ab:74:78:40:15:71:c3:83:70:02:ef:
         f4:1e:9b:bc:ef:6a:1c:f2:8a:02:2a:89:93:94:c0:fd:f2:f4:
         4a:cd:16:91:f2:26:92:48:ad:56:a2:d3:e2:83:4a:1e:69:43:
         8f:36:ff:20:4e:8b:ec:48:c2:79:b0:e7:9a:86:04:aa:d5:e4:
         d0:d2:ae:69:41:e5:c1:42:dc:1e:cf:0c:ce:61:bb:c9:5f:99:
         fa:a2:52:2a:6d:22:fb:09:b6:e7:fa:60:7f:8e:42:7c:b2:29:
         7f:6e:57:8e:27:3f:56:f7:56:81:7e:05:0d:0b:d5:52:17:7f:
         d9:88:88:2b:95:fb:47:91:db:f7:64:03:3e:06:73:7f:30:3b:
         16:5e:99:89:67:45:ff:56:76:61:30:70:08:69:6c:d4:37:30:
         ec:85:8a:27:72:ee:e3:5a:b1:54:c1:95:fd:68:f0:da:88:90:
         ae:d4:ac:ae:52:49:aa:22:cf:b7:72:53:40:aa:81:ac:65:af:
         30:51:b0:6b:11:21:bc:d0:32:5b:1f:ed:b9:2e:5c:84:e1:60:
         73:8d:a5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:29 2026 by rpki-client