Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
File:                     f7FuQPo8p3_OJMTJpGRWg8OeihE.mft (raw, json)
Hash identifier:          l6PX9s5JoVODYUyZNK6YF2C8vAWJEYHE0gFE0t4TNEg=
Subject key identifier:   55:2A:72:B2:6E:22:40:30:08:91:74:7B:2B:10:69:D0:B3:10:21:FE
Authority key identifier: 7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11
Certificate issuer:       /CN=A91AF83D/serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11
Certificate serial:       0230
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
Manifest number:          022A
Signing time:             Sun 01 Mar 2026 22:48:37 +0000
Manifest this update:     Sun 01 Mar 2026 22:48:35 +0000
Manifest next update:     Sun 08 Mar 2026 22:48:35 +0000
Files and hashes:         1: f7FuQPo8p3_OJMTJpGRWg8OeihE.crl (hash: lB0HBwtGXdfHnchAzExZMIIE8+yErJ2QgYW/KEXnqfU=)
                          2: AB3814CEC85411EDAE5D9322C4F9AE02.roa (hash: UmgIXHzfkXMqKWVff6849jzy9LFm+7q1hZgvaLwPQ/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl
                          rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560 (0x230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF83D, serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11
        Validity
            Not Before: Mar  1 22:48:35 2026 GMT
            Not After : Mar  8 22:48:35 2026 GMT
        Subject: CN=69a4c244-c6b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:15:c9:e6:0c:7a:3c:b8:a6:99:d8:42:a6:65:
                    be:8b:f0:06:9b:80:94:7f:d9:10:ef:49:36:65:92:
                    77:68:46:fd:45:9f:11:6a:88:ab:a0:d9:69:14:70:
                    ac:06:0a:4c:fa:b9:a2:fc:be:27:a3:de:13:05:e3:
                    2b:68:45:dd:86:74:21:a7:0e:74:df:87:3f:41:b3:
                    eb:52:84:48:60:42:81:1f:ba:41:d6:09:b8:02:31:
                    dd:0d:7b:57:48:b2:5b:46:ca:8e:b6:30:d9:a0:71:
                    7b:b4:a3:1b:09:bb:1a:ab:64:b7:00:46:6f:bf:c3:
                    d5:53:91:bc:b1:a3:e4:3c:c6:6f:90:3a:9e:1f:1e:
                    2f:e1:a9:bc:e6:43:f2:49:e5:ad:9c:f5:03:5d:7a:
                    bc:b5:8e:01:78:5a:bf:45:f8:56:8c:80:bd:b2:db:
                    10:41:19:aa:7f:32:b0:55:b3:e4:4e:78:b5:75:03:
                    aa:6b:41:d5:8e:87:7b:a0:ed:83:db:06:a1:11:b5:
                    ed:f4:60:7f:3a:05:51:cc:8d:05:9a:18:68:66:47:
                    d6:1b:87:d8:21:f7:c3:29:3d:7b:f8:55:45:0b:73:
                    e2:48:f6:2c:f0:c8:12:c9:10:b6:e1:dc:aa:cf:61:
                    bc:a9:dc:bb:f2:88:27:84:36:e4:24:73:36:55:8c:
                    fd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2A:72:B2:6E:22:40:30:08:91:74:7B:2B:10:69:D0:B3:10:21:FE
            X509v3 Authority Key Identifier:
                keyid:7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:2b:e8:b6:3f:c6:b9:2d:38:56:c0:a3:c6:f5:2e:81:df:f2:
         79:fe:55:ea:a1:f9:61:20:30:71:57:0e:9f:6f:38:86:8f:a7:
         46:ce:32:ed:cc:d4:5f:f0:bc:19:b9:b5:59:17:a3:24:8b:7e:
         21:a7:d7:92:ad:47:de:68:5c:d1:51:1e:96:82:5d:c9:fb:9d:
         bb:a6:6b:86:28:81:e6:dd:fc:b5:44:b9:c5:48:3e:0f:e3:ab:
         41:93:38:fc:e0:3e:8e:f2:c0:f4:16:69:00:81:fd:d2:e6:40:
         4a:52:29:00:d0:06:b7:16:4a:6f:27:08:56:13:a9:bd:8a:e4:
         cb:87:3a:cb:41:88:d3:eb:bb:9a:e2:dc:8d:5e:48:d6:73:d0:
         63:70:a1:a5:2a:1b:7f:ab:4c:5b:19:40:6f:5d:dc:36:af:18:
         54:eb:18:74:1f:f7:54:ed:49:58:83:4b:95:00:02:93:4e:e6:
         78:32:3e:a8:f5:db:f8:c5:7a:47:e5:51:63:ff:a1:a9:5d:75:
         ee:32:cb:91:56:f8:66:95:08:d8:24:b2:f0:6d:76:93:7b:bf:
         92:ac:bb:8b:6b:20:b0:68:bd:ca:9f:2d:74:24:e6:30:32:12:
         0a:d5:c3:cc:1c:58:5a:00:a3:ba:f8:77:79:53:93:1e:e9:57:
         c9:b5:52:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:21 2026 by rpki-client