Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
File:                     ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json)
Hash identifier:          T7JTwNTjBhIvfIeAmrozHQt+lssU0UJ0n25eWvxi0nk=
Subject key identifier:   F7:E4:56:3A:3B:78:13:32:22:7B:E5:A4:9D:2C:AA:22:65:1F:42:C1
Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7
Certificate issuer:       /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7
Certificate serial:       0279
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
Manifest number:          0269
Signing time:             Mon 02 Mar 2026 00:16:52 +0000
Manifest this update:     Mon 02 Mar 2026 00:16:51 +0000
Manifest next update:     Mon 09 Mar 2026 00:16:51 +0000
Files and hashes:         1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: fEfy+yAMQ810LFMl1I3T8WX2W0rMjmjqIoEyteivZCA=)
                          2: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: UWH1x8giA5CUDbuKn5hiEaz+aWmWPo/dG0Iot9P77PQ=)
                          3: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: Unh6vvgI1wlU5PdNLje9/sZrH6mvqXrjcdflctfvmwM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl
                          rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7
        Validity
            Not Before: Mar  2 00:16:51 2026 GMT
            Not After : Mar  9 00:16:51 2026 GMT
        Subject: CN=69a4d6f4-b2bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:dc:e5:a0:86:20:b8:1a:c9:7e:3e:8f:2c:68:
                    8a:32:2a:0c:44:7c:1e:64:4e:7a:7b:3c:f0:2b:66:
                    5f:59:00:3a:9d:90:3a:8b:01:7b:ca:66:7b:cd:e3:
                    05:e9:84:98:03:2f:8b:5d:c9:62:08:f0:cf:3c:3a:
                    92:9f:05:96:a0:a6:a2:fe:86:7e:f2:52:a4:a5:a5:
                    e7:dd:83:ff:dd:57:c1:8d:18:c7:8e:10:8d:9f:12:
                    04:15:f7:a2:b0:71:1b:7c:20:ef:07:9e:b0:fd:03:
                    40:08:e0:59:83:bd:8f:83:60:79:34:3e:40:07:c8:
                    6c:4c:d6:f5:b3:98:a3:83:cb:71:df:7d:77:0a:2e:
                    fc:e9:dc:f1:2e:a9:12:11:6f:b1:a3:3b:6e:ad:ab:
                    42:e9:61:a5:a7:5c:82:25:a5:8a:6c:d1:00:ea:79:
                    45:07:04:37:73:1b:9b:41:df:62:31:db:91:89:66:
                    0f:94:94:8d:f4:13:ea:4c:15:64:6d:a8:99:0a:e9:
                    cc:e1:18:bd:48:4d:0f:a8:17:8a:4f:1d:c3:84:b6:
                    9b:a5:59:01:c6:8b:70:fd:ec:38:fb:e2:ab:1e:4c:
                    5f:8a:15:3b:ac:8c:46:74:b2:de:26:65:7d:e8:cd:
                    8c:d6:cf:4f:41:d0:10:1e:f7:38:7c:6b:28:a6:49:
                    de:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E4:56:3A:3B:78:13:32:22:7B:E5:A4:9D:2C:AA:22:65:1F:42:C1
            X509v3 Authority Key Identifier:
                keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:8b:e1:3d:10:d2:75:b4:bd:e9:a1:75:7e:d8:62:16:93:df:
         51:58:0b:a7:c2:0a:0b:c8:59:e6:be:fd:70:25:dc:c6:d3:1e:
         74:ff:4e:1b:f1:6e:3d:be:2d:54:d6:a3:13:6a:56:c6:48:62:
         fc:95:b3:43:c7:bd:a6:c8:11:ae:00:41:7d:fe:15:04:a6:c4:
         f3:04:63:d4:75:bf:ee:41:7e:d5:49:77:aa:51:0c:6f:96:e1:
         cb:b4:ff:a5:be:99:54:a6:b1:ed:42:66:76:de:40:cd:95:06:
         d1:bb:ed:a0:45:1a:10:6a:98:ac:a3:72:f2:e3:50:3c:5a:90:
         9b:1b:25:5a:06:2a:4b:32:22:87:cf:8b:67:1b:19:17:4f:ac:
         c2:db:f3:1c:d7:da:1c:1c:48:a3:4d:49:9c:07:a6:64:1a:0f:
         fd:17:b9:25:7e:7f:cf:69:01:db:7d:88:61:04:52:a5:b0:68:
         42:0e:21:bb:62:75:04:8e:4d:04:47:4d:9c:cf:4c:a0:d2:a6:
         4e:2a:82:38:f7:78:e5:10:52:d6:1e:49:77:47:7e:dc:3b:88:
         e7:89:4a:5b:15:24:cb:37:bb:70:1b:33:ff:f5:57:45:22:a0:
         71:2b:e4:4e:e5:36:7d:15:fc:be:b9:8c:44:95:bd:4f:31:2d:
         7c:4c:72:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:44 2026 by rpki-client