Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
File:                     fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft (raw, json)
Hash identifier:          Impj3bYnaWaDf1kBHhNpsKTsD2HRL8S97Tvptd+jVuU=
Subject key identifier:   3E:3C:C8:D2:A7:98:66:25:F7:97:DE:33:06:B9:7B:F6:0B:21:91:4D
Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA
Certificate issuer:       /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
Certificate serial:       0234
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
Manifest number:          0230
Signing time:             Sun 01 Mar 2026 03:22:06 +0000
Manifest this update:     Sun 01 Mar 2026 03:22:05 +0000
Manifest next update:     Sun 08 Mar 2026 03:22:05 +0000
Files and hashes:         1: fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl (hash: AMX5ElaUolxLE3xoA8fCclxzXBIR16YAkCiNsySNPIs=)
                          2: 99B10EC4BD3511ED837DED0DC4F9AE02.roa (hash: VjsdP0zlKHnuUM/QDxE6pyiIHcCSV1/bdfYwggvcPkg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl
                          rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB92D, serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
        Validity
            Not Before: Mar  1 03:22:05 2026 GMT
            Not After : Mar  8 03:22:05 2026 GMT
        Subject: CN=69a3b0dd-8c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:5a:59:2a:4b:6c:82:c8:ba:f1:24:30:0c:
                    84:f6:1c:ff:ff:ed:f2:f0:20:0b:0a:de:ae:7d:6b:
                    30:21:e2:c5:ea:14:e7:4a:61:34:ac:8b:da:9d:88:
                    df:42:1c:d6:7d:f2:3e:ca:0e:92:ac:10:33:fb:16:
                    aa:6d:e1:37:75:e1:2e:c6:55:f0:f6:9c:8e:ae:8f:
                    fa:10:83:dc:74:9a:26:87:0a:b2:b7:8a:4f:01:71:
                    ee:c8:61:74:cd:6b:c2:18:02:67:10:5e:88:b9:1b:
                    d1:09:71:de:cf:24:31:b9:04:32:22:67:27:f7:0c:
                    e0:e3:72:a0:c6:b3:05:66:76:fa:20:b1:e3:b1:35:
                    0a:f7:ab:72:c2:75:ff:1d:16:32:e9:af:1c:99:17:
                    55:d2:71:b3:ef:cf:ed:31:8c:aa:17:74:85:d3:44:
                    f3:aa:8c:64:c0:69:cc:39:02:da:30:c5:ff:15:17:
                    8e:96:4f:2d:2f:b0:45:e4:43:85:43:bd:d9:5c:47:
                    e4:aa:9d:3e:2b:24:f4:22:a6:81:29:7a:fa:c8:ee:
                    89:63:d6:9e:94:2b:60:7d:17:84:b5:6b:6c:5f:48:
                    55:b4:57:bf:f8:c6:45:67:3e:4d:b1:3c:27:88:f7:
                    13:d8:d1:a9:4e:7d:6b:f4:16:c1:e8:a7:bf:35:e8:
                    fe:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3C:C8:D2:A7:98:66:25:F7:97:DE:33:06:B9:7B:F6:0B:21:91:4D
            X509v3 Authority Key Identifier:
                keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:3b:1b:5f:d1:11:1d:df:2e:27:3b:59:9f:55:9d:d4:e8:82:
         ef:bb:64:56:6d:4f:6c:29:85:42:83:af:c0:70:ce:eb:84:22:
         32:78:82:ed:2c:ce:e2:59:dd:af:be:dc:64:a2:ec:c0:29:0c:
         46:d6:94:96:34:b7:d4:f6:81:ec:1b:12:02:60:c1:2d:0b:20:
         14:e2:3b:32:aa:4e:96:fc:66:b5:ca:69:62:50:3f:32:bb:40:
         c8:3d:20:de:13:e1:88:e2:d8:9c:f1:fe:c5:79:e4:cc:b1:54:
         06:7a:45:bf:3c:78:d9:b3:b4:ca:10:f1:58:89:89:64:f2:2a:
         4d:c9:70:fb:8c:9b:a2:f7:0d:f9:4f:47:68:96:36:02:13:2c:
         b5:20:dd:dc:cd:eb:36:9e:be:4c:6d:66:4b:29:b1:e1:83:bf:
         c3:1a:d3:5f:da:e1:ee:4b:56:ba:c0:27:fc:04:dc:1d:1a:0e:
         74:48:76:84:3c:58:a3:d2:b0:74:9e:86:d4:d2:a9:f2:92:6d:
         b5:62:7a:6b:26:22:22:65:63:56:dc:fc:6f:9b:56:fe:db:a2:
         d3:6a:92:78:02:18:f2:39:be:9c:41:26:a6:6b:45:57:6d:a5:
         9e:cc:75:19:be:e4:af:41:37:4c:75:73:d7:91:79:c8:b1:48:
         58:b1:99:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:07:01 2026 by rpki-client