Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
File:                     RjCksCapPQ36qOzsV5zFITguTlg.mft (raw, json)
Hash identifier:          OnwnIz1FmP7Ba+x1qZA7CGM73V+VviQPtn5Gn10WIaI=
Subject key identifier:   F1:9D:50:DD:EF:EF:69:49:95:DA:23:BD:D8:76:36:E5:12:41:F3:6F
Authority key identifier: 46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58
Certificate issuer:       /CN=A91A4DA5/serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
Manifest number:          0143
Signing time:             Mon 02 Mar 2026 14:58:18 +0000
Manifest this update:     Mon 02 Mar 2026 14:58:17 +0000
Manifest next update:     Mon 09 Mar 2026 14:58:17 +0000
Files and hashes:         1: RjCksCapPQ36qOzsV5zFITguTlg.crl (hash: aV/BLi/ycd971HmWPs+gHKiImMrLvjaCR1EVd2/qrDg=)
                          2: 074283A632A511EF84ECD41AC4F9AE02.roa (hash: Ig/wbZdh4jHG/0RZspeIPFlmWVtGZIemOVk+yYX06AU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl
                          rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4DA5, serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58
        Validity
            Not Before: Mar  2 14:58:17 2026 GMT
            Not After : Mar  9 14:58:17 2026 GMT
        Subject: CN=69a5a58a-2aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:cc:b5:56:58:c1:25:38:ab:ae:69:57:79:
                    28:50:b6:d9:fc:c7:db:60:da:2b:28:1e:82:38:5d:
                    ee:e6:da:d0:69:c7:01:a3:f4:73:8c:e9:ce:ab:b2:
                    ec:d8:49:ed:d6:72:76:38:1d:e2:2a:e6:54:c3:f4:
                    b6:9e:3c:c8:96:5c:04:55:fd:4a:f9:fb:de:3b:3c:
                    6a:7c:d2:e3:f7:1c:41:c6:47:09:a0:27:be:e8:ef:
                    e8:f3:ae:e3:06:2e:5f:55:ef:b6:ae:11:2a:4a:e8:
                    d5:64:b2:e4:93:9d:ff:ed:7b:58:dd:23:e9:8d:28:
                    0c:26:3e:1c:de:98:d3:f3:7a:87:35:ba:18:76:1b:
                    fc:fd:c9:54:57:73:fe:6a:28:94:d2:16:96:7c:d2:
                    89:83:1d:51:60:c7:ae:43:f4:35:48:b7:03:f4:79:
                    b1:bd:9d:5b:8b:58:cf:ce:c8:97:39:56:1f:9a:49:
                    69:1d:20:4b:ed:d0:fa:15:b0:f7:c8:2e:87:00:ef:
                    c3:e7:64:09:38:e1:8a:41:9d:3e:00:df:16:96:3f:
                    ba:0c:49:a9:54:ea:db:31:5c:7b:71:44:1a:40:42:
                    4f:a2:80:3b:ae:fc:5d:3e:89:6b:a9:b7:b7:e1:0d:
                    d4:43:d5:6e:fe:9e:ce:e1:2e:e1:e0:a0:e3:ff:c3:
                    d3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9D:50:DD:EF:EF:69:49:95:DA:23:BD:D8:76:36:E5:12:41:F3:6F
            X509v3 Authority Key Identifier:
                keyid:46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:98:53:6e:0c:62:d9:9b:1a:6e:72:f4:01:0c:93:c0:1e:35:
         08:81:a9:6b:54:98:cb:c6:67:bd:3c:cb:3a:21:52:5b:66:9e:
         9d:5a:bd:f0:ff:82:23:8d:e6:f6:98:7e:5d:23:89:ef:e5:fe:
         7b:ca:95:db:59:a3:e9:63:11:3d:fc:b8:b3:44:0b:08:71:7c:
         8e:b2:aa:6a:b2:6b:60:50:3a:bd:fe:61:68:5b:66:72:08:e4:
         f1:2f:54:83:a5:01:9b:46:f5:fc:d7:bb:1a:42:a1:af:49:55:
         af:03:fd:4c:c7:ef:ba:ee:1d:10:c4:3c:ca:ff:92:2c:fd:1a:
         7e:d1:d5:db:15:ed:32:3f:9c:3b:5c:db:ba:c5:b6:d5:32:86:
         44:38:7d:7d:44:84:eb:1b:28:57:86:01:d3:41:e1:65:f3:c4:
         e3:6e:e6:0f:7c:cc:3b:79:f6:68:84:0f:64:da:07:14:7d:a0:
         56:ab:20:1b:e6:09:7f:4e:25:5d:bf:a5:30:e2:7a:78:7d:c7:
         5e:dd:e1:ba:16:38:0a:45:c2:9a:89:e4:e0:b7:bf:27:4e:05:
         3d:c7:de:0e:d2:54:68:5d:e9:d4:5f:b6:22:c3:af:38:98:eb:
         e7:31:99:13:42:f0:9d:8e:4b:8a:62:30:38:1f:d9:fb:c7:99:
         c8:9f:6b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:28:28 2026 by rpki-client