Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
File:                     5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json)
Hash identifier:          RQo4L5oLm7Io+VqZNeITyBHNw9RGG1jIXPze7rykvlw=
Subject key identifier:   D8:71:DB:B2:E8:42:B0:D2:00:61:04:14:51:80:36:BD:D8:D3:67:14
Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
Certificate issuer:       /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
Certificate serial:       0960
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
Manifest number:          0935
Signing time:             Mon 02 Mar 2026 02:13:57 +0000
Manifest this update:     Mon 02 Mar 2026 02:13:55 +0000
Manifest next update:     Mon 09 Mar 2026 02:13:55 +0000
Files and hashes:         1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: fFTOYhf2dB+2wK6UllqJSYbI7/Ac75IozB7n1pcvs7Y=)
                          2: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: 32WeveE7dnAV5izIj802rGBUdP9CIosFzoeZQ6CO6QU=)
                          3: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: lMhUzM6SrZqnaSb3sq+PG5FZ88KlD5XwOD16PSgtpr8=)
                          4: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: 9iL3rgMf4vh9lsgcWbb8FKQC+wyReC1nKI6xvJ+GiO0=)
                          5: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: k0ZucBj+etuvwgMyyarMxzRHSJzy5ua857nN2Fqt8Kw=)
                          6: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: lOAwTW5XkFCPCUk/gWDqiJqpMlb51sjQCmzCQhzil4Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl
                          rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:13:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2400 (0x960)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
        Validity
            Not Before: Mar  2 02:13:55 2026 GMT
            Not After : Mar  9 02:13:55 2026 GMT
        Subject: CN=69a4f264-9ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:81:8e:a6:1a:91:37:14:3d:ca:41:12:40:c9:
                    68:2b:a5:4f:dc:18:17:93:d3:83:38:19:93:36:85:
                    ea:8e:3d:43:e2:52:ae:fb:d2:d0:5d:ab:81:0f:59:
                    7d:b2:90:5d:2d:57:70:db:4b:26:f8:c9:2c:05:71:
                    a0:37:ee:7f:49:27:9e:dc:96:92:93:59:f6:2e:7f:
                    7b:fa:70:4c:e0:fd:f8:16:35:40:42:d2:30:1b:f0:
                    c3:31:4b:2f:46:69:22:3b:fb:49:cb:64:7c:0d:c9:
                    64:f7:f0:cc:54:3b:7c:46:f6:b8:58:38:2e:8a:40:
                    f1:a2:fc:76:ee:bf:36:4c:c6:ca:46:3d:b1:49:cf:
                    c4:f6:8a:9a:47:62:69:65:f0:9d:85:92:bd:a2:14:
                    d1:f8:9f:77:d1:f0:fc:4b:dd:57:87:52:0d:03:d9:
                    9f:b5:17:d7:60:52:02:63:c9:4c:85:92:c2:45:8c:
                    f9:86:3d:48:ca:76:40:4b:90:7e:bb:73:65:6d:40:
                    05:ea:8a:bd:cd:28:d8:ed:49:e2:f9:17:c8:80:fd:
                    fd:a9:ae:4a:3d:19:17:e2:da:db:ac:1a:1b:28:10:
                    57:6c:e2:59:26:bb:9a:ba:ef:e1:e2:7a:59:b3:be:
                    8a:2d:69:b9:93:35:f6:a3:fd:26:59:86:e6:aa:20:
                    2b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:71:DB:B2:E8:42:B0:D2:00:61:04:14:51:80:36:BD:D8:D3:67:14
            X509v3 Authority Key Identifier:
                keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:37:a5:b0:05:d5:7b:77:17:4c:91:6c:ad:67:58:89:24:22:
         3c:c5:61:06:a9:2c:0f:03:c6:d0:dc:03:2e:e3:9b:ca:d9:f0:
         b1:cb:55:02:f7:10:c5:6d:47:24:70:19:e1:15:b7:34:1d:f3:
         3c:ab:35:fd:04:07:37:5a:48:38:94:8c:47:cd:15:0b:35:02:
         c7:9d:21:46:e0:a9:b9:88:81:30:b4:ec:a6:8a:d9:2d:aa:ab:
         31:eb:aa:95:e1:bf:4a:23:dd:7f:c1:6c:a6:99:0d:55:c8:50:
         42:a0:86:da:4d:71:95:f4:68:fd:a2:03:56:aa:8b:3c:07:0d:
         41:00:26:5b:92:89:c6:34:f9:e6:d2:42:f6:4e:9c:e1:ea:1e:
         b5:2b:18:2f:7b:64:58:e7:b3:a5:3b:7e:7b:9a:82:f5:5e:48:
         c5:61:c2:25:1a:81:4f:34:e9:79:c1:e5:55:63:57:3d:35:d0:
         1c:60:a9:c6:e3:81:0e:7e:bb:5c:c5:b0:8c:fc:80:41:2e:3b:
         45:47:30:23:10:e5:e5:c1:9a:4c:49:d7:4b:aa:3f:bb:e2:96:
         58:9c:5e:67:ae:93:f1:6f:41:18:46:f2:8b:2f:05:f2:02:30:
         2c:16:89:93:8b:2e:89:ce:d5:49:e7:1f:89:b4:80:5f:1e:97:
         fc:53:90:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:41 2026 by rpki-client