Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
File:                     F4AJbMkKtq6vCNeasYxUx7d6U6A.mft (raw, json)
Hash identifier:          wzDqbRezYHyn590f72eWMbkCMLsYiOv25LFDc+dEIOw=
Subject key identifier:   03:D6:96:F0:E6:B9:35:61:64:35:E4:3D:FD:4A:13:54:67:67:19:93
Authority key identifier: 17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0
Certificate issuer:       /CN=A91A4543/serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
Manifest number:          94
Signing time:             Sun 01 Mar 2026 23:52:03 +0000
Manifest this update:     Sun 01 Mar 2026 23:52:01 +0000
Manifest next update:     Sun 08 Mar 2026 23:52:01 +0000
Files and hashes:         1: F4AJbMkKtq6vCNeasYxUx7d6U6A.crl (hash: omhiwulkADwv7RkDVkP7sPPCie6mko3Vbc0YygISrTg=)
                          2: 458F65E8572511F0BE0E492AC4F9AE02.roa (hash: Rx4vAlWyTLV0daFrUy6DuCo/+UjTzyGK5tVT0zVpxsA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl
                          rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:51:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4543, serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
        Validity
            Not Before: Mar  1 23:52:01 2026 GMT
            Not After : Mar  8 23:52:01 2026 GMT
        Subject: CN=69a4d123-795d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:ad:cf:86:ca:83:f4:e0:d8:fa:50:67:b3:
                    dc:a4:55:fb:a7:03:26:c6:4a:dd:26:da:42:93:ec:
                    72:da:24:7b:29:71:79:d0:85:82:30:53:45:9c:84:
                    00:6d:71:81:b9:97:32:08:b5:79:67:76:df:2c:56:
                    a3:b5:3b:d7:f9:24:1c:a5:42:f7:e0:54:74:2d:ff:
                    4b:0b:cf:ec:fb:1d:57:03:d1:53:62:37:c4:ce:fb:
                    25:eb:16:46:bf:23:a5:c8:b5:12:41:4c:63:d0:4e:
                    a2:2d:02:0e:1f:08:31:08:b9:ec:13:fb:06:25:55:
                    12:d0:17:cf:78:83:41:a5:b4:aa:9f:ee:b4:2d:14:
                    2c:38:46:7b:ef:fc:55:36:8b:00:99:33:47:da:ef:
                    e8:ef:0a:77:6c:55:52:ab:a2:26:ef:59:a5:ec:e2:
                    93:37:82:e1:04:8b:58:99:8c:28:84:9a:0d:56:e0:
                    7f:bd:bf:c7:c8:49:c4:86:9f:a1:05:fd:39:c2:c8:
                    d7:f7:14:55:56:e6:5e:a4:c3:23:25:c7:72:43:cf:
                    55:d6:e7:92:ec:39:3c:3f:d7:cc:ef:17:f2:5a:e7:
                    91:ae:10:5b:8e:b1:d2:30:36:d1:46:1b:39:81:fd:
                    db:71:33:7a:7b:45:16:bb:95:38:69:06:1a:7e:38:
                    31:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D6:96:F0:E6:B9:35:61:64:35:E4:3D:FD:4A:13:54:67:67:19:93
            X509v3 Authority Key Identifier:
                keyid:17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:dc:ab:e8:64:ba:45:60:08:88:64:15:b0:5e:c5:32:9c:8e:
         94:47:88:bb:83:96:e8:c8:ff:c5:74:94:ab:4a:92:81:02:f5:
         68:21:8b:33:2a:29:12:7d:9e:36:fd:74:6b:ef:e0:35:bd:f3:
         4a:54:72:ad:e2:15:5c:76:65:dd:98:05:6f:5b:e0:53:7a:76:
         ad:0a:cf:cf:cb:ed:e5:4c:82:75:a3:05:22:31:f8:10:04:b3:
         bd:dd:c2:f2:48:6e:5f:c3:d1:ba:b3:dd:c6:9b:2e:d0:1f:e4:
         c2:74:e5:c0:51:44:1d:97:0f:b9:25:8f:87:25:f4:db:d1:80:
         6e:09:44:4a:8e:6a:70:d4:ed:cc:95:8b:a4:a6:96:44:58:af:
         24:8e:a8:56:be:e4:e7:66:6e:4f:ee:cb:fa:30:77:0a:f3:09:
         29:1f:0d:ea:e9:75:10:88:96:c5:d7:1e:6e:95:a9:ac:a6:8b:
         a9:b9:94:aa:4a:d1:69:4d:ab:55:49:6f:a1:ae:fc:5c:48:07:
         87:d5:59:2c:24:25:16:48:d2:72:20:e4:77:2b:35:e6:4e:98:
         69:77:49:f5:5d:e9:13:f8:f9:2f:08:85:b6:c9:87:7e:e4:12:
         18:e5:e2:1c:ce:a5:5e:7e:c1:ec:b7:15:40:4a:14:1c:ca:21:
         6d:49:40:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:50 2026 by rpki-client