Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft
File:                     cJbvn454MDQ56aHksDgYgaQy9Ns.mft (raw, json)
Hash identifier:          Uq4ARV48VO+e5NdVHxipeKEoCYJ3cfzqwOFoCYBryVg=
Subject key identifier:   8D:AB:DF:A6:FD:01:E9:CE:7C:04:DD:3E:40:C8:57:B9:4E:41:62:11
Authority key identifier: 70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB
Certificate issuer:       /CN=A91A8F8A/serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB
Certificate serial:       042C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft
Manifest number:          0425
Signing time:             Mon 02 Mar 2026 00:34:00 +0000
Manifest this update:     Mon 02 Mar 2026 00:33:59 +0000
Manifest next update:     Mon 09 Mar 2026 00:33:59 +0000
Files and hashes:         1: cJbvn454MDQ56aHksDgYgaQy9Ns.crl (hash: ORedCaWxCdDMuTcaqaaImRX/OT2F59F9Z0pGwPpFcW4=)
                          2: AFED106A9E1511ECA4B98E73C4F9AE02.roa (hash: N5pLAxbLKv/PfC6YhIk0Oi5t9BhybE4dFuDmSAT9hEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl
                          rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1068 (0x42c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8F8A, serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB
        Validity
            Not Before: Mar  2 00:33:59 2026 GMT
            Not After : Mar  9 00:33:59 2026 GMT
        Subject: CN=69a4daf8-c580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:05:5c:7e:f5:96:4a:90:7e:34:2f:fc:24:a5:
                    fe:cf:1c:a6:79:8f:83:c9:d5:ce:41:73:98:70:de:
                    16:9e:8b:4d:aa:40:5f:78:2c:ab:b6:38:dc:dd:5a:
                    08:f6:1a:c4:99:02:5e:dd:7e:41:c8:6a:49:6d:81:
                    8c:1d:1e:77:f8:3d:52:62:f9:c3:30:8c:3d:57:f3:
                    8b:78:f8:d2:e6:aa:96:01:49:50:45:18:1d:68:0c:
                    2c:4e:22:82:dc:9b:29:4c:54:92:b1:00:09:4b:fe:
                    1e:c1:2b:90:55:7b:92:bc:aa:0e:01:0f:5a:de:68:
                    22:bf:2b:9a:9b:9a:0a:f5:64:48:17:26:5e:47:f3:
                    e2:1d:1d:5c:1d:b5:55:c4:c3:b3:fb:73:f2:f0:8d:
                    9d:7a:dd:b5:80:eb:ab:56:99:60:e9:40:d3:81:1d:
                    e3:21:2c:cf:da:d8:8e:c8:cb:6b:77:19:23:c7:2d:
                    f0:fd:4e:a8:55:e6:0b:73:ae:86:35:a0:7d:a7:18:
                    da:ba:1a:36:53:82:ad:ce:ed:00:ce:62:f6:ec:fc:
                    dc:09:bc:c6:ea:08:07:54:9f:41:4d:da:ee:54:a1:
                    50:26:bb:0a:64:1d:ff:54:fa:a7:9c:a6:c6:b7:96:
                    b9:06:60:52:21:88:20:14:fb:14:c0:ea:43:14:29:
                    e2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AB:DF:A6:FD:01:E9:CE:7C:04:DD:3E:40:C8:57:B9:4E:41:62:11
            X509v3 Authority Key Identifier:
                keyid:70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:43:28:19:3f:22:7f:c6:7a:ab:ce:ea:0c:83:d2:27:cf:15:
         18:17:83:58:f8:8d:10:81:25:91:d2:0c:85:20:f2:29:6a:77:
         86:14:f4:cf:fb:b2:7f:96:2d:2f:6e:83:21:58:40:d7:17:d9:
         bc:d2:4a:16:3a:5b:ab:07:58:18:15:8b:0a:e4:2f:4e:7b:f7:
         98:7b:2b:02:bb:fc:39:fa:8d:37:a0:cc:fb:aa:c5:08:dd:09:
         c4:c8:92:5f:bc:d2:8a:ea:a9:0f:57:89:80:3e:52:01:46:d6:
         37:e3:8a:06:50:1c:63:a4:b9:0f:6d:b9:f2:ee:83:58:d9:f0:
         00:98:67:c7:67:b1:52:34:bb:3c:1e:65:1f:b6:7a:ed:98:f6:
         8d:93:48:d8:d4:c2:f5:6e:7c:4e:bb:d2:33:40:75:83:0c:14:
         35:65:5e:7a:9c:0c:05:ab:13:2b:11:f1:fe:c0:14:6b:5d:2a:
         43:a5:33:00:ca:31:84:b3:eb:b6:52:af:12:9d:5b:10:94:83:
         46:de:d5:7b:9a:f0:37:1b:a3:84:b9:03:ae:cd:62:df:ef:da:
         70:7f:90:e2:69:45:04:28:2e:3f:ff:83:78:03:8e:99:8a:a6:
         87:7a:a6:a5:7b:40:c9:ea:26:b4:91:0a:a0:72:84:b8:c5:0c:
         4b:b5:4b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:07 2026 by rpki-client