Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
File:                     AwUYVzXgl--zaoYGU7JTq-n-EVw.mft (raw, json)
Hash identifier:          dz9v8FMSMP3opUM7Ifnt+5kmLM7mehM6pLo5tzOrugc=
Subject key identifier:   99:28:B4:E4:BA:E5:B3:6B:C2:28:BE:3E:5B:F2:00:9A:CE:E5:39:75
Authority key identifier: 03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C
Certificate issuer:       /CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
Certificate serial:       0310
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
Manifest number:          0306
Signing time:             Sun 01 Mar 2026 02:05:30 +0000
Manifest this update:     Sun 01 Mar 2026 02:05:29 +0000
Manifest next update:     Sun 08 Mar 2026 02:05:29 +0000
Files and hashes:         1: AwUYVzXgl--zaoYGU7JTq-n-EVw.crl (hash: RenZBD1Jdaztm/4jFVcVw9Pik64G9m+vUaHPsK7nxRo=)
                          2: 485DCAA8418111F093EDEF69C4F9AE02.roa (hash: 98L2p4S3Z9XBKGOrvf/7lu6oUXBZwojag9kKA7jW8zY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 784 (0x310)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE40, serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
        Validity
            Not Before: Mar  1 02:05:29 2026 GMT
            Not After : Mar  8 02:05:29 2026 GMT
        Subject: CN=69a39eea-dd0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b3:dd:8f:1d:7d:59:40:ab:d1:d6:b2:26:40:
                    5d:95:ab:3a:48:79:cf:c9:a8:06:ee:92:68:8d:ad:
                    46:16:2b:0a:cb:17:a9:f9:99:dd:a9:89:8f:e1:aa:
                    1c:83:de:9f:ae:f7:bb:41:6c:f1:93:b3:b4:f8:54:
                    b0:46:f4:1d:2f:8e:c1:1c:96:98:fd:ba:64:38:a7:
                    f8:e7:51:64:6b:61:61:35:fd:8c:79:29:23:68:40:
                    73:97:1e:69:21:0d:68:69:42:52:9b:e9:d4:2a:c1:
                    01:82:55:48:e5:d4:5e:1b:74:8f:2c:0c:b8:10:d0:
                    85:43:74:96:e8:5d:b7:a8:c3:61:27:98:85:cb:01:
                    a7:10:66:01:9a:87:72:92:06:2b:5f:d3:65:65:f9:
                    5d:48:73:18:2a:fc:23:d3:f6:d8:98:0f:43:c5:07:
                    67:ca:48:78:a9:f9:6c:42:22:bf:5f:c0:eb:3d:a2:
                    59:71:30:1f:e9:88:1e:d7:e0:e6:1c:b7:5c:f6:cf:
                    6d:ee:e2:52:d8:af:3e:20:19:4a:6f:bf:e1:83:64:
                    7a:f8:01:10:a3:3e:1b:3a:d0:16:86:10:52:b2:15:
                    1a:2d:ee:3b:fa:59:d8:4c:8c:1e:73:57:7b:3b:d6:
                    5c:4d:da:17:f6:79:4b:bb:06:db:08:34:84:77:fd:
                    f7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:28:B4:E4:BA:E5:B3:6B:C2:28:BE:3E:5B:F2:00:9A:CE:E5:39:75
            X509v3 Authority Key Identifier:
                keyid:03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:9b:55:e1:4b:8e:38:57:87:e0:cb:e7:e6:23:2b:ad:6d:b6:
         09:c0:0f:ae:b9:9e:4b:f8:c3:88:3c:91:05:7f:ed:90:98:da:
         00:6f:cb:f0:82:2e:28:a4:22:c2:79:cf:05:9c:dd:e7:ed:3c:
         12:7e:4f:e0:90:08:ac:b6:6e:30:82:64:fa:22:b3:64:b3:1b:
         7d:ae:ad:5f:44:e6:ca:3a:7c:34:c5:97:1b:16:88:1b:a2:c8:
         7f:3b:07:2a:25:0f:a1:8a:58:c9:b8:0a:6f:51:bc:27:bd:ec:
         3e:1e:62:e3:5a:ce:dd:30:20:15:07:31:3f:fd:f9:4f:df:8f:
         53:e6:66:7d:8a:30:6e:66:e4:84:fb:0b:ba:21:7f:9f:2a:03:
         07:be:c3:9a:48:23:db:c3:18:8c:ac:5d:6a:d9:03:b1:df:26:
         0f:95:25:0a:92:f1:6e:78:cb:8d:3a:50:84:16:ee:06:b3:2b:
         64:a3:7e:2c:05:d6:a0:1c:f6:94:a5:ed:9d:6a:f0:b1:df:6f:
         0a:6e:d3:87:23:d6:22:33:3c:f5:91:a7:57:43:73:a3:ca:c3:
         39:33:dc:50:46:3e:ff:08:8a:38:9a:d9:8e:1f:ee:fc:58:85:
         3f:07:98:92:cc:10:62:3f:50:b2:5f:cc:1f:4e:ce:b4:28:cd:
         1e:22:4f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:48:36 2026 by rpki-client