Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft
File:                     _wY0PKmaZBAAxxHzLWn1nBms8EM.mft (raw, json)
Hash identifier:          vrUZkOC9+mNxH2VjLdvPwHCIQ/b7o1xVjYb9LlxsjbE=
Subject key identifier:   CC:04:46:2C:D0:A3:4B:53:C6:48:C2:11:5A:87:FB:59:12:FB:02:FF
Authority key identifier: FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43
Certificate issuer:       /CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft
Manifest number:          0119
Signing time:             Sun 01 Mar 2026 06:50:50 +0000
Manifest this update:     Sun 01 Mar 2026 06:50:50 +0000
Manifest next update:     Sun 08 Mar 2026 06:50:50 +0000
Files and hashes:         1: _wY0PKmaZBAAxxHzLWn1nBms8EM.crl (hash: A+OwR11rzjZ7VTtCY3jpCEZR7EVgkT7S7mrhCAJMS/E=)
                          2: 971BD34C68FB11EFB3A4CD61C4F9AE02.roa (hash: S//h0FvEyaMaAGxiOxnAlzaIIXmPhHgkfb3U/Ur0Y5g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl
                          rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF2D9, serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043
        Validity
            Not Before: Mar  1 06:50:50 2026 GMT
            Not After : Mar  8 06:50:50 2026 GMT
        Subject: CN=69a3e1ca-3a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a3:06:5b:06:18:0c:58:b9:0a:a6:09:a4:28:
                    a3:55:b0:12:bf:99:2a:19:f8:50:96:f8:5e:e9:bb:
                    8e:6f:42:97:c9:3f:04:5c:78:9a:cc:a1:da:05:1b:
                    91:a4:56:81:7f:3e:45:c7:75:11:4f:58:c2:57:73:
                    09:54:b2:7b:00:a8:2a:3c:e8:4d:5b:64:02:cb:a7:
                    4d:ab:af:be:61:92:af:33:e6:53:82:f9:31:56:ea:
                    80:33:90:db:bd:51:62:17:f3:41:ba:0b:18:1c:a4:
                    34:1e:26:5c:aa:21:4c:4d:37:77:ba:c1:63:b3:57:
                    e0:b9:aa:41:cc:36:a4:5b:4d:1a:87:0e:e4:52:71:
                    1d:3c:93:76:70:d1:de:8a:65:83:77:81:5d:35:8e:
                    69:c6:b3:36:91:4f:02:8f:dc:c3:6f:13:d0:1c:ca:
                    44:48:b1:e5:05:0f:79:d5:aa:1a:6d:ce:5b:7c:c4:
                    69:8a:0e:d1:a4:bb:ac:3d:c6:eb:95:0f:3e:54:f1:
                    f9:a3:2a:84:ec:03:1b:e9:d3:78:4e:f5:4b:d1:58:
                    03:6c:46:5e:41:8a:96:13:24:09:48:55:44:05:1e:
                    c0:32:7e:ae:71:2c:9f:ba:c3:48:e9:cb:ac:ac:9d:
                    ba:f8:bd:13:8a:e9:57:55:a7:99:de:6e:06:d1:fe:
                    7d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:04:46:2C:D0:A3:4B:53:C6:48:C2:11:5A:87:FB:59:12:FB:02:FF
            X509v3 Authority Key Identifier:
                keyid:FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:50:85:ff:e5:ac:56:0e:ee:72:9f:b8:ba:18:43:b0:42:bc:
         44:48:b7:d6:c1:2b:f1:01:7f:04:87:cb:fb:a2:d7:41:10:6c:
         51:81:09:77:61:20:64:22:50:da:f2:e0:21:e9:1f:45:91:0b:
         c6:46:00:63:61:dd:2c:23:9d:cd:25:c8:5a:aa:7e:96:b0:f3:
         2f:c1:0f:99:1e:9b:be:e4:1a:26:47:2b:10:c8:a5:73:f7:66:
         63:37:0e:28:56:28:bb:e4:5b:2e:46:80:a5:20:52:b3:b3:26:
         bf:5c:ab:7c:d4:0e:e3:2f:aa:af:88:8e:78:83:6b:f5:48:db:
         12:0b:39:45:e0:68:f8:a6:a7:39:b8:09:7d:ca:7c:8b:f8:36:
         54:71:31:63:32:b3:85:81:21:f9:54:4c:34:70:16:e6:ed:8f:
         76:58:3d:2f:03:2a:52:da:60:e9:eb:8d:9e:ff:b3:66:bb:05:
         7f:3a:0a:2f:60:48:47:f9:92:e5:c5:f6:2b:16:51:25:64:01:
         a3:6c:e7:50:71:bc:4c:c0:a5:96:cb:73:41:c8:d4:44:55:e5:
         1c:2d:65:8c:2f:0a:8b:be:36:89:85:fb:8b:0b:67:c0:10:54:
         b7:1b:b4:31:27:46:72:15:25:49:84:67:96:c9:d5:50:12:e6:
         11:68:67:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:57 2026 by rpki-client