Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft
File:                     Rhxyji1WPw4JJFm6przkudbBi7g.mft (raw, json)
Hash identifier:          lZ0wfX2sxpduqf+IQc21mFTkzKnn1U6dRxJ3/TcJElU=
Subject key identifier:   36:7E:61:27:EE:E8:37:CC:BE:C5:05:22:36:3E:A7:24:5D:40:25:33
Authority key identifier: 46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8
Certificate issuer:       /CN=A91A9B22/serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8
Certificate serial:       0855
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft
Manifest number:          084B
Signing time:             Mon 02 Mar 2026 00:03:36 +0000
Manifest this update:     Mon 02 Mar 2026 00:03:35 +0000
Manifest next update:     Mon 09 Mar 2026 00:03:35 +0000
Files and hashes:         1: Rhxyji1WPw4JJFm6przkudbBi7g.crl (hash: 2Biu1LIPXGKEs75DsRwX8fiRjXmnJ4AOI/bIpGS99Y0=)
                          2: AF0AC0A63D0A11EB9F59D648C4F9AE02.roa (hash: KdzxhfaL6N8OpKtTXar6kXEIGG1BCxW71mfqiWDRui8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl
                          rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2133 (0x855)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9B22, serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8
        Validity
            Not Before: Mar  2 00:03:35 2026 GMT
            Not After : Mar  9 00:03:35 2026 GMT
        Subject: CN=69a4d3d8-d101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e9:da:e0:0b:43:70:f4:02:e0:c4:85:93:cc:
                    65:2b:f7:58:c7:4a:95:d9:37:5d:49:67:e8:12:f4:
                    b8:b6:c2:c9:d8:7a:a7:da:65:10:72:cc:30:13:60:
                    88:ad:20:73:57:df:93:08:2e:e1:b5:33:b0:64:82:
                    78:17:c5:c0:b7:35:51:0c:6c:0b:d9:32:0c:44:4e:
                    63:8a:6d:a7:02:f5:d1:bc:a3:c4:c8:bf:4a:b9:72:
                    9e:4c:0e:31:39:ee:28:6e:2b:99:b2:20:a0:05:33:
                    6e:34:f0:91:d3:db:8e:7b:4a:01:2c:5f:c1:6e:91:
                    b6:8f:4c:41:55:4f:5f:a6:f3:de:33:4f:38:2b:93:
                    79:3e:74:f7:13:5f:e9:74:cf:98:6a:0d:7a:c4:f8:
                    a3:97:7f:be:01:b3:18:cc:1a:3b:29:ac:3a:3c:88:
                    e7:e6:5d:fa:58:b8:a4:ac:7e:a1:b0:7a:2e:db:e4:
                    46:8e:d3:e7:d2:2a:ea:b8:c1:e8:a8:0d:f4:7e:e9:
                    62:e0:65:3f:a8:2f:52:d1:5c:5f:25:ef:16:3b:d3:
                    2c:44:63:17:d5:80:b7:3f:66:10:17:7a:2e:26:6d:
                    8d:2a:d3:2b:6f:77:2c:fb:9f:c1:f4:4d:49:ae:6d:
                    2d:01:97:58:e3:06:29:ee:45:5b:bc:9d:d5:54:7f:
                    7a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7E:61:27:EE:E8:37:CC:BE:C5:05:22:36:3E:A7:24:5D:40:25:33
            X509v3 Authority Key Identifier:
                keyid:46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:78:4e:6e:d3:03:94:54:b2:80:92:d9:bc:59:80:55:b5:ea:
         37:64:c5:21:ab:60:38:1b:47:54:7c:7c:03:1a:e0:f5:a3:a2:
         be:72:c9:df:a3:67:48:d1:be:2d:d8:25:3c:59:57:b0:3e:b8:
         22:06:18:7e:e3:39:14:6e:42:d0:3e:ce:09:cc:81:4b:db:76:
         2e:d5:a3:03:f4:ad:bb:53:43:90:0f:52:df:a9:26:b7:1b:b4:
         bd:92:9e:41:1e:aa:fa:13:5b:04:8b:98:51:38:cf:64:76:a6:
         1a:46:7b:53:c3:c5:0a:f6:fb:de:be:91:8b:81:0a:d6:10:1b:
         0f:2a:34:fd:f3:f9:18:4a:03:6d:eb:65:4f:2f:ee:81:3e:0d:
         a0:f3:99:3b:29:ea:97:3d:5a:60:56:c5:55:1f:a9:d2:13:2d:
         d6:82:ed:fb:80:10:7d:e2:f0:f4:d0:30:f9:e8:bd:9f:19:44:
         71:61:6f:98:cd:70:39:39:1f:35:9b:1c:17:9e:83:3f:2c:53:
         13:18:e6:61:b8:39:ee:68:dc:40:d9:9f:8f:32:a8:4d:22:92:
         aa:1d:d7:e4:83:67:68:fa:6a:2b:ef:c4:93:63:98:8b:15:0c:
         df:10:d4:ab:2e:6b:6f:af:72:36:3a:9e:94:bf:57:99:3c:6c:
         cb:81:6c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:12 2026 by rpki-client