Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
File:                     iiZW272QAzaEH_UDU2_5kY_rJcY.mft (raw, json)
Hash identifier:          yTEAbl2c7LuLRrHXRTm71C7JKdIrOwd5qxnmin35pk4=
Subject key identifier:   0C:0F:57:C9:2B:AB:E4:35:71:BD:33:49:88:4B:31:88:0E:A4:17:F7
Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6
Certificate issuer:       /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
Certificate serial:       0A7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
Manifest number:          0A71
Signing time:             Mon 02 Mar 2026 00:34:30 +0000
Manifest this update:     Mon 02 Mar 2026 00:34:29 +0000
Manifest next update:     Mon 09 Mar 2026 00:34:29 +0000
Files and hashes:         1: iiZW272QAzaEH_UDU2_5kY_rJcY.crl (hash: /XpGgnlZ397oiG7eGHxP5LC4kVz7K9R9M4fy99Ap4TU=)
                          2: 9244682C7BD711EAA889485EC4F9AE02.roa (hash: CU9KCOMgB/CimY7ixX135rNt1bHyh2BWO2MK74ixj8U=)
                          3: 8B802D485F2211EC88AA0F84C4F9AE02.roa (hash: 7eNnv9/n13JHxhn9eXPX/2+r30TjaibukF568rxiuT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl
                          rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2687 (0xa7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A267C, serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
        Validity
            Not Before: Mar  2 00:34:29 2026 GMT
            Not After : Mar  9 00:34:29 2026 GMT
        Subject: CN=69a4db16-89aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ec:52:79:e5:f9:c8:6e:ad:7c:d0:70:c4:84:
                    d5:b5:7c:4c:dd:4f:28:ac:f0:69:96:81:1c:dc:28:
                    fc:63:40:ea:ad:d8:e8:e7:7a:1b:27:35:c3:ed:9c:
                    e0:0b:4f:4c:75:b6:91:48:50:d5:a8:51:89:06:eb:
                    ba:61:07:57:91:d0:d8:c6:27:d4:1c:e4:ab:3b:b0:
                    29:01:12:f6:80:de:3e:35:51:b1:b6:33:c3:75:af:
                    f8:3f:d9:8b:5d:58:82:39:1c:c8:a0:76:11:69:36:
                    71:bb:0f:f4:31:5f:51:42:72:02:3c:d5:7e:13:f3:
                    80:da:33:68:66:11:05:37:f9:58:0a:f2:0f:82:a6:
                    53:a1:a9:07:f7:ee:92:ee:e8:a8:5d:c7:1a:56:a7:
                    6b:92:e3:63:7f:f2:9f:8e:a9:1d:61:b6:7e:76:2b:
                    69:0a:6f:15:cc:84:57:cb:d7:bd:86:0f:ec:df:09:
                    d2:fc:49:95:88:ce:a9:a0:c4:68:42:c8:1d:18:88:
                    59:4a:fe:41:13:c6:2b:5c:0c:0d:fd:ca:8f:f3:95:
                    70:db:5b:c7:2a:a0:b9:08:4f:f5:58:3e:f6:07:e2:
                    d1:44:f4:c6:6c:f6:e0:12:24:52:9d:ce:ac:5b:f5:
                    6d:6c:0c:d6:01:af:44:9a:9a:18:6b:52:b5:b2:da:
                    2c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0F:57:C9:2B:AB:E4:35:71:BD:33:49:88:4B:31:88:0E:A4:17:F7
            X509v3 Authority Key Identifier:
                keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:83:fd:06:da:f4:15:37:1a:95:87:75:26:12:ef:4f:08:89:
         d6:4d:f0:a3:ec:ec:b7:a4:39:e1:86:d8:17:a2:8e:3e:99:28:
         f0:fc:03:76:87:1d:9d:e8:e2:15:a5:7d:1f:59:82:a9:a1:3e:
         e0:11:b5:3d:37:63:72:10:55:df:18:cf:05:a9:af:e8:f9:e7:
         64:ab:61:20:e3:1e:91:2c:63:82:64:33:74:8e:15:9d:40:a8:
         b1:6f:ab:b0:c8:00:8c:95:65:44:ec:fe:13:4b:3c:e8:99:b1:
         93:39:10:fb:ba:5c:61:eb:fe:89:3f:3f:e5:e0:a0:22:9d:f0:
         90:b5:9b:81:83:26:57:5c:74:f5:f4:29:32:94:90:e9:37:ed:
         e4:0c:c5:88:69:ba:80:18:9e:31:af:61:ee:23:b8:55:c5:05:
         33:05:55:52:64:78:80:6b:ce:9e:8c:68:df:4b:0b:b0:31:a9:
         28:2f:6a:29:e0:25:f7:2c:f6:19:b0:8b:ca:63:5a:09:63:f5:
         e7:82:c7:ee:4a:41:ac:05:c6:52:30:6f:40:1f:eb:87:20:c7:
         50:be:74:df:d0:2e:3a:e5:8e:6c:4d:5a:99:6b:f5:63:85:6b:
         b2:fc:60:8e:8c:e3:ad:da:18:75:50:e8:39:c3:1d:f8:14:e8:
         04:0b:37:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:26:37 2026 by rpki-client