Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
File:                     saGMIGd1j-jJIZgeixH6MI5iaTs.mft (raw, json)
Hash identifier:          jKKJMkODrLIcdL+w4Y/tLOezGxLjaegrrCR8ScvfQeY=
Subject key identifier:   87:E4:8F:94:4C:0C:CE:DF:F6:2C:9A:3B:9E:B8:44:D5:F0:C6:A9:51
Authority key identifier: B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B
Certificate issuer:       /CN=A91AAAF2/serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B
Certificate serial:       085B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
Manifest number:          0852
Signing time:             Sun 01 Mar 2026 23:24:43 +0000
Manifest this update:     Sun 01 Mar 2026 23:24:42 +0000
Manifest next update:     Sun 08 Mar 2026 23:24:42 +0000
Files and hashes:         1: saGMIGd1j-jJIZgeixH6MI5iaTs.crl (hash: RQFu6Dlt6JF9I97BLtDNtyrl27v+A9OAd+fx7+Lw1iA=)
                          2: 73D3A6E0F72011EA8776EC28C4F9AE02.roa (hash: 77hSYKp5nGJ1Gv+W5zbAX2pAyRbbfZvgk88uHWf8l8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl
                          rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2139 (0x85b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAAF2, serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B
        Validity
            Not Before: Mar  1 23:24:42 2026 GMT
            Not After : Mar  8 23:24:42 2026 GMT
        Subject: CN=69a4cabb-399c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:da:4f:73:f4:9a:a5:c7:9e:94:e6:5b:14:e7:
                    ec:82:c0:6d:43:ba:85:d9:47:e8:28:5e:c7:6d:8b:
                    0d:90:98:0a:8f:7c:e2:13:0f:8c:25:6c:49:0d:e5:
                    38:bb:08:e7:1f:36:45:85:b4:bc:a5:1e:96:44:a6:
                    ec:40:5e:1a:56:8a:c7:a5:6a:e7:b5:08:cf:94:12:
                    49:71:8f:76:02:f9:21:d4:8f:01:0b:00:cf:52:c4:
                    46:4f:e8:41:de:c4:ea:eb:a7:ec:99:88:66:7c:4e:
                    57:12:5e:90:1b:2b:01:d3:06:9e:39:a0:fa:20:f3:
                    8a:6d:de:05:e9:fa:c6:b5:ab:32:6f:0d:b3:97:75:
                    3f:69:50:7c:f6:b0:59:2e:77:c1:a9:9c:e6:b6:c2:
                    2a:68:72:06:c5:fc:6f:b8:39:4b:44:4a:7b:65:2a:
                    b6:93:66:f7:22:1c:57:3d:f5:b2:0b:67:d5:15:74:
                    52:3f:7f:17:fc:2f:bd:7b:c8:99:d5:ad:51:df:df:
                    07:db:fb:3c:06:6f:2f:51:7d:de:92:d2:bb:ae:23:
                    1a:85:d1:26:ca:d8:5b:b9:5a:a4:4d:de:17:8a:9d:
                    e3:dd:ca:fd:de:09:be:6f:06:b7:b9:94:1e:c3:ce:
                    7a:d0:93:70:03:3e:c8:ed:b9:05:93:c8:91:e0:d3:
                    35:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E4:8F:94:4C:0C:CE:DF:F6:2C:9A:3B:9E:B8:44:D5:F0:C6:A9:51
            X509v3 Authority Key Identifier:
                keyid:B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f0:c2:2e:7c:ba:4d:83:df:98:75:3d:f1:bb:12:c7:47:d1:
         73:d3:9a:ab:c2:08:89:18:bb:81:29:35:d0:c7:47:4e:73:01:
         a6:43:26:45:8c:d7:c2:aa:2a:c4:5d:40:a4:eb:7c:88:45:a1:
         20:c9:20:2e:0f:7a:f8:a0:b7:ef:8f:75:61:10:11:f4:af:8b:
         08:c3:e0:b0:88:f6:ae:c3:df:f3:e6:fe:f0:91:02:53:10:14:
         f9:c9:d2:2e:be:97:3f:f4:72:18:e5:ac:25:bf:0a:c7:e3:7f:
         0c:34:f8:e2:fd:11:3a:78:e6:ed:36:59:50:f5:f4:a6:d0:84:
         80:cb:50:bb:d2:83:6e:b8:a3:9e:51:49:78:32:2f:11:e7:c7:
         f7:79:7c:94:f9:26:7a:1c:c0:f6:87:5c:cf:a3:d1:53:c6:27:
         5d:22:36:2d:4b:e2:b5:f1:e4:07:b8:a4:b9:fa:59:89:ba:a7:
         5d:cf:85:24:83:94:af:7a:bf:35:70:62:63:75:32:27:e2:80:
         68:90:87:89:89:3e:c3:69:18:a5:4a:b9:07:c7:e7:d8:4e:66:
         13:4c:d9:12:38:db:f3:3e:b8:c3:97:59:4e:69:27:84:e4:ea:
         88:26:0e:a6:bf:00:77:af:9d:44:e7:e6:bd:84:d5:5e:03:78:
         ed:19:06:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:25:41 2026 by rpki-client