Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft
File:                     z6g6HLFaT2Y_z9bITI4K00wOBnM.mft (raw, json)
Hash identifier:          5gR34WV1OWrzV7qySMvzuXpCgO58C5XS/F57Qns9UMM=
Subject key identifier:   BD:65:13:BF:6A:6A:6E:FC:D6:BD:76:CB:58:19:D3:C2:4D:9C:BC:A5
Authority key identifier: CF:A8:3A:1C:B1:5A:4F:66:3F:CF:D6:C8:4C:8E:0A:D3:4C:0E:06:73
Certificate issuer:       /CN=A91AA5F1/serialNumber=CFA83A1CB15A4F663FCFD6C84C8E0AD34C0E0673
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft
Manifest number:          48
Signing time:             Sun 01 Mar 2026 09:43:04 +0000
Manifest this update:     Sun 01 Mar 2026 09:43:04 +0000
Manifest next update:     Sun 08 Mar 2026 09:43:04 +0000
Files and hashes:         1: z6g6HLFaT2Y_z9bITI4K00wOBnM.crl (hash: xsRiE9jSYZzcbFQZaui4Jq10ju8mZFpBKQ3ZTdsV6bk=)
                          2: C56E767CA89811F08959A364C4F9AE02.roa (hash: 3h7NekD5uJiBtHmPr+ql3V5I4Pzxe7a+UwFYXogXAM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.crl
                          rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA5F1, serialNumber=CFA83A1CB15A4F663FCFD6C84C8E0AD34C0E0673
        Validity
            Not Before: Mar  1 09:43:04 2026 GMT
            Not After : Mar  8 09:43:04 2026 GMT
        Subject: CN=69a40a28-1850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3a:d7:e0:17:f5:93:19:1a:6c:1c:e2:ef:0c:
                    7a:52:4b:85:ef:dc:f7:12:47:bb:6f:2b:d8:84:56:
                    e6:53:99:ad:9e:d5:74:27:a9:f4:a4:54:05:0c:9f:
                    c6:f1:08:b8:90:07:4a:f0:b7:22:aa:97:54:97:87:
                    c2:2f:c7:eb:5e:37:e7:3e:46:a2:24:97:8e:23:9f:
                    3b:db:58:22:ef:91:f8:ac:be:16:50:6d:50:44:be:
                    45:51:92:f2:b5:4e:f5:aa:2d:dc:02:2a:56:ae:d5:
                    3f:fe:08:ac:38:ff:38:3e:ea:2b:b7:ea:5d:2a:4d:
                    54:a7:94:6e:83:fe:24:d6:51:ed:01:2f:d5:6a:67:
                    99:11:de:fc:d4:46:0e:73:b7:c9:7d:c0:eb:98:a8:
                    03:2b:9e:96:98:4a:e7:d1:94:83:7c:d1:78:1f:f8:
                    28:ba:a9:52:27:8e:bb:ce:4a:66:52:60:ef:16:d7:
                    73:7c:76:04:df:94:73:69:6e:28:00:3d:67:39:06:
                    48:16:f6:26:57:a4:21:88:fd:52:6f:a5:e9:83:51:
                    79:da:c6:4a:5c:26:57:a1:3c:b7:52:85:f4:74:16:
                    a5:aa:e6:01:e3:d1:d1:46:91:6c:f6:5a:48:e3:c7:
                    6b:ae:d0:7b:7c:0c:0e:b3:50:72:dd:94:94:45:32:
                    38:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:65:13:BF:6A:6A:6E:FC:D6:BD:76:CB:58:19:D3:C2:4D:9C:BC:A5
            X509v3 Authority Key Identifier:
                keyid:CF:A8:3A:1C:B1:5A:4F:66:3F:CF:D6:C8:4C:8E:0A:D3:4C:0E:06:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:21:5d:be:40:75:24:31:26:61:c1:78:37:28:6f:7d:29:1c:
         9e:ff:b2:bd:18:6f:79:34:4d:a1:80:58:c8:16:c6:dd:65:33:
         69:e8:18:f5:db:45:5f:c0:9b:44:9d:c3:11:9c:41:5d:d5:eb:
         1a:e5:c9:e7:59:a1:23:62:c3:59:32:4f:cf:42:0d:31:0d:27:
         71:50:11:b9:50:b7:51:be:f8:72:15:76:ca:52:49:7b:ab:0f:
         41:1a:ad:23:92:e5:19:fe:0d:c9:80:5a:22:36:31:f8:fe:39:
         f5:75:6f:5a:d9:81:c3:bb:1d:fb:ef:87:ca:b8:b1:c0:47:06:
         57:91:bc:ae:0f:c8:0e:e6:59:a2:ea:c6:9e:74:c4:7d:c7:73:
         43:72:2d:49:5f:f9:d9:40:bc:99:e8:5f:bb:0d:a9:1e:62:b4:
         ed:4f:7c:71:de:bf:f9:07:9f:69:4b:55:3c:5a:ec:05:88:94:
         5f:96:c8:40:d3:c0:ff:d6:28:ca:6c:54:cc:04:ea:f7:89:a3:
         a3:bd:4c:55:a4:90:1d:dc:77:2e:1f:e7:79:87:ce:4d:21:e8:
         cc:06:c8:70:e0:7b:9d:0e:0b:59:65:79:ac:c5:e8:c2:2e:c4:
         09:3d:e7:9a:66:4f:c2:b9:d2:80:46:35:54:a4:63:87:1b:c3:
         6d:d7:98:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:40:07 2026 by rpki-client