Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
File:                     0JnuqfXNtv5MbvmOjYzzNkudYmE.mft (raw, json)
Hash identifier:          22MV3PBk/xVL9uUzrJg75/ePQQVnGD5NeCxXxQgms+M=
Subject key identifier:   1E:CB:B1:DC:57:B2:18:F7:80:55:93:CB:C4:9D:AE:C5:D7:7B:8B:EE
Authority key identifier: D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61
Certificate issuer:       /CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261
Certificate serial:       0133
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
Manifest number:          0131
Signing time:             Sun 01 Mar 2026 06:30:17 +0000
Manifest this update:     Sun 01 Mar 2026 06:30:16 +0000
Manifest next update:     Sun 08 Mar 2026 06:30:16 +0000
Files and hashes:         1: 0JnuqfXNtv5MbvmOjYzzNkudYmE.crl (hash: HyffPO2oF6Off96fWKnZNtHOUtr+WXZXMIVc708FBmI=)
                          2: 63CE609A48CB11EF94C2AA83C4F9AE02.roa (hash: Gd34BZHumVDMQlkFxhkn9zZUBjwQGIsnWxDTTynzeE8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl
                          rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0D88, serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261
        Validity
            Not Before: Mar  1 06:30:16 2026 GMT
            Not After : Mar  8 06:30:16 2026 GMT
        Subject: CN=69a3dcf9-7375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b5:54:a9:71:0e:a9:49:36:61:33:1a:3f:03:
                    cb:80:40:cf:fa:f1:f9:b5:d2:3e:5c:e8:64:8a:4f:
                    49:8b:9f:11:8c:9a:b4:19:b3:51:41:f0:e5:cc:17:
                    14:64:2c:99:2e:61:43:07:79:0e:36:08:13:5d:61:
                    a3:fe:97:10:c8:a1:81:e3:9e:74:28:e4:e6:93:37:
                    71:19:74:ab:2a:a2:2a:51:fa:f5:63:df:a8:f3:c8:
                    bc:d3:5a:be:39:c7:5e:0b:2f:af:67:f4:89:6c:5d:
                    93:f3:73:71:7d:e8:8c:87:76:b4:fe:49:e9:42:c7:
                    d0:7d:fa:25:34:a7:56:d5:b0:6c:7d:f0:3a:41:9a:
                    1e:d0:df:de:a9:cf:c4:d1:03:c1:12:31:00:22:f8:
                    94:42:95:bb:f3:c1:13:04:f7:2e:7d:b9:71:a8:7e:
                    ca:42:f6:03:9d:d5:fa:02:09:c8:5c:c2:fc:6a:62:
                    22:ef:5a:23:62:c4:24:e0:27:12:3f:20:98:fe:dc:
                    45:53:e8:c7:ae:78:64:db:38:61:19:67:82:03:e5:
                    b7:a3:5d:be:ab:b0:2e:e0:67:8b:d6:97:d4:f2:16:
                    6e:9e:4b:af:c4:50:78:48:23:1b:90:a2:91:45:13:
                    ba:d3:7e:b6:66:67:df:be:57:0c:19:bc:ca:b2:0c:
                    e7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CB:B1:DC:57:B2:18:F7:80:55:93:CB:C4:9D:AE:C5:D7:7B:8B:EE
            X509v3 Authority Key Identifier:
                keyid:D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:7e:04:38:49:d0:62:4e:0c:9b:cc:38:77:ed:a6:0b:ec:5d:
         95:a5:88:6a:99:98:e7:ce:fe:f6:7d:50:09:5d:d7:a0:2f:eb:
         a1:27:75:75:f0:a7:66:9e:34:71:7f:43:16:5e:18:f0:26:f1:
         1a:77:a6:ae:df:92:a5:7a:99:4d:75:72:af:1b:60:d5:3a:fe:
         ee:37:0f:fd:a5:97:c1:08:9a:6e:8c:1c:c8:8c:79:c3:ed:2e:
         e8:66:be:02:97:57:d2:5f:ce:19:2e:42:6b:46:64:c1:86:72:
         75:74:16:7e:de:35:72:5b:c2:1c:4d:95:16:2c:cf:ea:65:30:
         c9:3b:48:89:c9:17:cb:df:2e:fe:56:37:de:b7:a8:3c:36:8a:
         45:6e:01:f8:e2:3a:57:01:d3:3f:cd:7c:f1:cc:33:20:01:7c:
         6d:af:77:88:c2:09:e6:10:93:75:4f:8c:eb:5e:1d:17:01:ed:
         a8:4c:b7:52:0f:fe:61:92:7c:aa:94:75:59:6a:6b:68:69:41:
         b6:45:ba:d9:27:03:d0:b6:75:5b:ce:4e:b8:84:6c:ff:d4:16:
         1d:4d:65:33:35:f5:5a:d4:60:45:fc:52:db:5a:16:ab:4b:92:
         22:03:b4:b8:fc:18:86:fd:26:6c:de:39:34:6a:08:95:5d:50:
         34:d0:ea:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:10 2026 by rpki-client