Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft
File:                     asoRKbI4x6HxeRt1zUmta9at-nc.mft (raw, json)
Hash identifier:          XwjhkiPFdk5Io61rskcuT2+L8wHasKWuufK6DP+zgzo=
Subject key identifier:   85:57:A2:94:2E:EF:3C:4E:67:4A:06:F9:BC:C1:31:A0:1D:2B:D1:86
Authority key identifier: 6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77
Certificate issuer:       /CN=A91A6F56/serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft
Manifest number:          72
Signing time:             Mon 02 Mar 2026 01:27:15 +0000
Manifest this update:     Mon 02 Mar 2026 01:27:12 +0000
Manifest next update:     Mon 09 Mar 2026 01:27:12 +0000
Files and hashes:         1: asoRKbI4x6HxeRt1zUmta9at-nc.crl (hash: CggURZ8rLHuOrK7f+4M+cCIr1zxjUURhD7IV7FEpaxQ=)
                          2: 234A6D0E6E8911F0AEEA0B14C4F9AE02.roa (hash: n5o+gpjxSM1mfGq/OK/47I4GgkJ3B65F/QWpVAxrvm0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.crl
                          rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6F56, serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77
        Validity
            Not Before: Mar  2 01:27:12 2026 GMT
            Not After : Mar  9 01:27:12 2026 GMT
        Subject: CN=69a4e772-fd58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:aa:e3:95:68:a6:80:2a:a8:2c:c5:d7:cb:1e:
                    23:e4:1c:31:51:d3:ae:87:8b:f5:66:0e:ce:d4:b5:
                    13:c7:07:e0:05:98:47:fb:03:45:0a:3a:4b:69:08:
                    75:53:fc:26:88:ef:f8:62:b9:a1:ae:a3:51:8c:6a:
                    12:4c:f4:80:f4:6e:4d:a8:f4:5c:d4:e4:3f:10:26:
                    16:44:72:72:4b:20:78:ad:1f:11:19:9a:44:58:5a:
                    cd:a8:1f:55:ae:d0:9a:51:11:4c:cb:a7:2f:90:86:
                    56:13:2a:2b:db:48:63:fb:d2:69:b9:34:da:e0:1e:
                    f4:f5:ca:6b:0a:d2:6b:4a:8d:c9:b6:fa:b8:00:9d:
                    10:ac:55:a4:e4:51:4e:cf:f1:ce:11:dd:6b:32:37:
                    42:07:f7:a8:69:55:e7:f9:a1:ad:a1:ab:33:cc:a4:
                    66:b2:64:d5:e1:e5:bb:59:b6:7c:cb:7d:15:7b:9f:
                    d4:ee:ca:15:07:d8:c2:b1:e3:fc:f5:d8:ea:b8:93:
                    e5:db:0a:dc:1b:08:22:4a:6e:34:7f:36:4c:6c:25:
                    d9:4e:74:cd:c8:bd:b5:e8:2a:1a:90:6b:75:3f:95:
                    2a:44:10:11:61:87:7e:99:6e:4d:61:68:ea:3d:4e:
                    42:bb:9f:f5:b6:42:94:f3:1d:db:00:77:54:44:8c:
                    80:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:57:A2:94:2E:EF:3C:4E:67:4A:06:F9:BC:C1:31:A0:1D:2B:D1:86
            X509v3 Authority Key Identifier:
                keyid:6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:36:9f:ed:fa:c3:19:84:ca:4c:00:81:17:c8:fe:60:97:41:
         68:33:fa:16:ea:8d:de:5e:5f:06:29:b3:18:77:5d:65:8e:75:
         5f:8a:94:2d:b9:97:c4:5f:19:fc:37:43:db:50:06:90:e8:7e:
         59:4d:a7:47:06:c9:da:b9:7f:b8:a4:7d:07:47:ae:ec:d5:73:
         10:67:7e:91:2b:3f:57:b2:eb:c3:fa:fc:f9:aa:c5:e8:03:94:
         b1:34:28:b0:97:7b:3c:09:da:d6:87:47:40:9a:92:45:34:c8:
         53:c7:a0:6e:81:45:09:96:cd:bc:e5:12:54:8f:95:4d:f9:89:
         dc:79:93:d7:4f:ac:5e:78:5d:38:1d:f9:be:10:f2:78:95:33:
         be:99:e6:60:87:a1:2b:49:8e:95:fd:f9:7e:d5:6e:1e:62:0c:
         c2:71:16:78:8b:05:6c:80:56:46:22:78:f2:7d:c7:83:f6:c3:
         5d:96:2e:8c:c4:93:37:11:c0:5e:34:43:1d:21:26:cc:03:ff:
         cc:5e:77:12:c6:88:bf:2e:ba:09:ef:8f:aa:ef:de:49:94:8f:
         a7:9a:84:92:3c:a3:2d:e6:d0:12:3c:fc:ff:9c:70:42:1f:d4:
         34:99:85:f6:d3:01:44:d2:42:9c:10:e4:f4:11:88:77:14:46:
         72:af:a0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:51:06 2026 by rpki-client