Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
File:                     rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft (raw, json)
Hash identifier:          EjX0dKU1iYQvO+sIDNLivRgK2Lm8kpu0d5MyDhmccXA=
Subject key identifier:   4F:85:22:63:36:E7:1B:50:15:7C:36:34:57:62:5A:4C:20:B5:65:A1
Authority key identifier: AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F
Certificate issuer:       /CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F
Certificate serial:       048B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
Manifest number:          047A
Signing time:             Mon 02 Mar 2026 02:33:55 +0000
Manifest this update:     Mon 02 Mar 2026 02:33:54 +0000
Manifest next update:     Mon 09 Mar 2026 02:33:54 +0000
Files and hashes:         1: rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl (hash: NljipbV2KW8RHagJjIN45TcQ735Qfxo2H2JHrJJPPVc=)
                          2: E37002DA5EEC11F08928266FC4F9AE02.roa (hash: ijlJetLy94OW4TGbwfTgPEwoKHnzIfkCASqOInMqy6g=)
                          3: 2E82E686569E11F08015BC34C4F9AE02.roa (hash: pQLB13dU2QzauBeiMOPgmHw5yrFL2yIYipDKCHZetK0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl
                          rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:33:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1163 (0x48b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A83B4, serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F
        Validity
            Not Before: Mar  2 02:33:54 2026 GMT
            Not After : Mar  9 02:33:54 2026 GMT
        Subject: CN=69a4f713-d39e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a7:07:f1:0f:28:4f:10:da:9a:07:5c:57:10:
                    a6:ca:0a:f3:cb:82:9b:36:65:79:f4:ca:fd:88:8e:
                    0a:89:bf:3d:a6:7a:a2:cc:40:28:35:08:75:a9:2d:
                    ce:83:66:f0:88:93:1b:1d:22:b2:4e:36:c0:4a:37:
                    a3:34:0d:d3:cc:d0:9f:e1:bb:8c:dc:be:d1:fa:a7:
                    89:19:a8:98:58:fa:b2:56:28:82:44:05:c1:17:81:
                    77:71:c7:08:f7:d2:a8:94:55:d4:49:c5:28:9f:28:
                    a1:41:48:73:04:a8:a2:93:5e:21:07:97:34:07:6a:
                    cf:c7:09:8f:a6:77:51:0c:3c:62:3c:c9:61:3a:ac:
                    f9:22:e5:13:a7:01:24:ef:95:4b:c6:3d:7b:3b:49:
                    02:9b:89:db:07:2b:53:cb:fa:73:4b:00:7a:a5:7f:
                    c8:e2:e2:80:d3:81:37:f6:9c:b5:23:70:fc:74:e8:
                    ca:a2:00:89:e8:44:c1:3d:89:cd:df:5f:d6:61:66:
                    5a:31:14:71:4c:b2:0e:35:92:d6:39:29:7b:71:44:
                    5b:7c:fb:d7:d7:de:5a:54:f3:4d:b6:9a:8b:84:77:
                    55:43:3a:36:ad:db:78:91:37:c3:7b:92:4b:f4:fa:
                    d2:d4:09:98:78:ea:35:f3:06:4c:a8:68:6d:66:01:
                    ce:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:85:22:63:36:E7:1B:50:15:7C:36:34:57:62:5A:4C:20:B5:65:A1
            X509v3 Authority Key Identifier:
                keyid:AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1f:4e:58:9b:ad:0d:3f:7e:91:94:c4:82:51:90:e8:ad:dd:
         4e:a0:46:c1:82:7b:79:7c:60:47:90:0e:d0:f3:57:6c:a4:3f:
         fb:28:97:68:73:38:e1:63:e4:0e:fc:f5:a6:d8:58:a0:1b:06:
         9a:65:11:13:46:40:13:6d:55:e4:e2:11:f6:d3:df:31:a2:c5:
         89:49:53:36:a4:4f:64:dd:ed:35:94:6d:82:f2:c4:15:00:5d:
         bb:0b:ab:7f:30:7b:f2:4f:05:34:4a:f9:36:f3:dd:31:4d:f7:
         ba:99:79:1b:2e:b5:d0:fd:c6:4d:17:83:a4:d0:64:d6:b5:a7:
         01:c7:a6:f7:23:37:6a:ae:31:ed:2f:ea:9e:eb:af:77:d3:17:
         bd:40:b4:c7:65:91:0f:a7:86:b5:19:39:7b:de:44:21:7b:7c:
         a8:93:87:ba:b7:9b:c2:f9:5d:08:ee:72:57:8a:db:b7:58:38:
         1d:de:a3:0b:a1:2c:3a:b3:a7:09:9f:0f:f7:0d:0f:53:10:aa:
         7a:d4:5d:65:6b:b9:d4:49:29:91:6e:e3:d4:8c:c4:01:09:e6:
         d2:84:c2:67:93:a6:e5:0e:8e:c5:42:66:2d:8f:4b:90:36:34:
         d1:de:3e:2e:cf:59:70:08:f1:5b:e8:35:76:f9:fd:39:df:74:
         32:4d:81:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:19 2026 by rpki-client