Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft
File:                     51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft (raw, json)
Hash identifier:          OhgUykEqDGIBhJlHLWjT2nTSoBwd9xVxYdkaxHz7EUA=
Subject key identifier:   4E:8D:EF:2B:56:A1:70:2A:3E:06:C3:4B:56:32:D8:D3:C0:26:F4:A4
Authority key identifier: E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D
Certificate issuer:       /CN=A91AB063/serialNumber=E7584F959A081A4DD94809353051D235939C391D
Certificate serial:       1C18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft
Manifest number:          1C09
Signing time:             Sun 01 Mar 2026 23:46:26 +0000
Manifest this update:     Sun 01 Mar 2026 23:46:25 +0000
Manifest next update:     Sun 08 Mar 2026 23:46:25 +0000
Files and hashes:         1: 51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl (hash: oZSLgQBc+K8fMoG8Hm3iQA8P031uRuIxeiHkJhsUCYw=)
                          2: B6FD84CE54F611E79DF7E643C4F9AE02.roa (hash: 9ImJtWj6yuZgtcmv1bgeujWxq+BLLmLeGu5HgVdDTSg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl
                          rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7192 (0x1c18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB063, serialNumber=E7584F959A081A4DD94809353051D235939C391D
        Validity
            Not Before: Mar  1 23:46:25 2026 GMT
            Not After : Mar  8 23:46:25 2026 GMT
        Subject: CN=69a4cfd2-1620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:19:ed:68:f0:f3:80:71:b6:50:25:6b:71:
                    36:de:63:eb:08:7d:42:2d:b5:e7:7a:8e:72:8e:6c:
                    fb:4d:ca:2a:ca:ab:0a:4c:df:ef:62:7f:4f:a8:5d:
                    65:41:03:59:a4:a7:00:25:99:60:f5:f5:a5:4a:68:
                    9d:41:96:3a:b6:d9:92:09:e4:54:1d:0b:ca:06:0c:
                    8e:87:b1:6b:b0:62:ba:f6:f7:59:7f:01:9d:be:07:
                    db:9c:39:af:66:bf:b9:c7:1c:3b:36:27:46:bb:fd:
                    5b:f9:11:59:4b:b0:b2:7d:dd:96:89:6f:d6:a5:92:
                    c1:8d:5c:01:7c:c2:8e:2d:f7:72:5a:7b:07:bd:27:
                    19:e4:70:e0:2a:ee:2b:06:44:9d:d6:f6:4f:01:01:
                    8f:d8:30:d4:bb:cb:05:4a:fc:38:60:a0:c8:bb:d2:
                    b2:5d:52:4c:9a:92:09:d8:e4:a9:d1:af:d8:a6:83:
                    23:50:26:82:4f:8a:a9:2a:0a:d6:9b:b8:63:28:43:
                    0a:24:65:95:d8:c1:48:da:a4:b1:f4:f2:a6:ca:c0:
                    e0:9d:82:e8:ad:55:48:73:07:72:4f:64:9e:62:c5:
                    c8:9d:58:1f:e1:7a:75:f5:52:69:63:3b:b3:43:94:
                    ca:1e:4f:87:15:2b:3d:3c:5e:40:a2:64:b0:72:ca:
                    36:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8D:EF:2B:56:A1:70:2A:3E:06:C3:4B:56:32:D8:D3:C0:26:F4:A4
            X509v3 Authority Key Identifier:
                keyid:E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:80:c1:9c:81:b6:9a:96:ab:e9:c7:15:7f:ef:cc:03:92:49:
         a7:c1:d0:57:14:d1:28:4c:60:c2:1d:9a:65:68:e2:e8:74:7e:
         c9:b8:52:10:97:35:d2:6c:4a:96:83:df:00:2a:e8:7b:87:79:
         44:45:f8:82:dd:9c:4d:e6:16:26:e8:a7:4a:f8:d4:d8:df:9a:
         c1:f6:13:6c:6c:ae:41:83:c5:1a:d4:05:2b:5b:1d:df:90:b7:
         8a:e2:b4:b0:5d:53:51:b1:c9:eb:a2:89:4b:58:37:a0:ad:9c:
         0c:43:1b:7f:80:e6:af:33:b5:c6:8a:39:ee:7d:f4:13:51:24:
         9f:ae:86:02:cc:71:19:2b:51:60:a1:38:48:a7:75:87:89:ea:
         b3:37:90:68:fd:fb:e0:88:94:25:30:76:61:3c:4a:f3:55:ce:
         86:6b:7a:0f:7f:f9:23:45:ad:02:64:5b:26:07:e9:12:e6:40:
         ea:60:fb:b3:7e:9e:0d:0d:bf:3c:61:b4:07:b0:1e:42:5e:89:
         6a:d2:e3:c8:0e:eb:37:e8:f1:f6:d5:5d:a1:80:41:eb:1e:af:
         08:ab:19:a2:20:6e:fe:60:d5:16:dd:10:d7:68:4d:e3:ea:86:
         91:05:71:a7:a3:40:04:79:eb:de:ff:4d:aa:5f:5b:8e:a2:60:
         20:51:d7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:38:23 2026 by rpki-client