Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft
File:                     2zxJsbLapmnoFyU5XfcR6D-K09E.mft (raw, json)
Hash identifier:          Ejphccd26hsmCyBfZwRjVXGuwIMxSEp5/xJ68UwCSGY=
Subject key identifier:   06:C1:11:2E:50:CC:FF:B8:9F:E4:0C:BA:C7:08:62:2C:32:B7:69:B4
Authority key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1
Certificate issuer:       /CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1
Certificate serial:       0458
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft
Manifest number:          044C
Signing time:             Mon 02 Mar 2026 02:32:31 +0000
Manifest this update:     Mon 02 Mar 2026 02:32:29 +0000
Manifest next update:     Mon 09 Mar 2026 02:32:29 +0000
Files and hashes:         1: 2zxJsbLapmnoFyU5XfcR6D-K09E.crl (hash: 1p0S5VbrZ/pb+B35ccTk2JLAIx4HtUPyzC6rWuiACqM=)
                          2: 48ECA4C48EE411EC9936A210C4F9AE02.roa (hash: Qk6UgrNlEArmTO1RmyrfsNa0aJyJurOhCrFKUSX8MPs=)
                          3: 93CBDF448EE111EC9D298C83C4F9AE02.roa (hash: t4RKrujkT/4i2xBpLkewaVM7tHYA1/rkxo1ttRbmyIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl
                          rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1112 (0x458)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1833, serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1
        Validity
            Not Before: Mar  2 02:32:29 2026 GMT
            Not After : Mar  9 02:32:29 2026 GMT
        Subject: CN=69a4f6bf-f675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5c:a7:da:ef:b9:4d:cf:79:5d:53:d8:af:97:
                    d5:0e:f4:9f:8f:16:e8:b7:1f:22:e0:ed:0e:49:12:
                    a3:3a:2f:90:5a:ae:1d:2f:e5:7f:18:e3:14:63:9c:
                    17:2b:22:51:54:34:59:8e:00:48:dd:76:23:3a:06:
                    f1:05:89:20:cb:78:4e:85:4f:0f:dd:4d:74:56:ce:
                    df:95:0f:e1:92:31:2e:8f:10:5d:a7:91:39:fe:e6:
                    25:c3:e2:e8:a9:d0:2d:25:19:65:eb:c6:33:f6:9d:
                    23:8e:6f:4c:76:c9:88:d2:76:fb:35:b7:ba:7a:8a:
                    7b:11:c3:e4:c6:47:e1:0a:3d:29:83:1f:ef:6d:89:
                    76:bf:64:05:40:4f:85:32:43:39:ec:74:2e:c0:b5:
                    b0:c4:e3:f6:60:79:58:5d:28:d1:be:fc:e5:29:6a:
                    69:2d:c8:11:d0:17:cf:a7:b4:14:51:a3:80:6b:c5:
                    b8:d0:f7:4f:56:b1:57:25:41:ab:14:f1:cc:a9:f6:
                    a6:b4:4b:92:d7:04:50:7f:fd:98:af:49:d7:1f:6f:
                    b6:91:82:76:04:c1:a3:1d:6a:90:52:05:03:64:5a:
                    5e:f7:cc:ec:85:d1:d6:18:02:a3:e9:fe:98:6d:1b:
                    5e:58:54:a2:bc:c8:c0:d5:a7:85:3f:cd:5c:dd:02:
                    13:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C1:11:2E:50:CC:FF:B8:9F:E4:0C:BA:C7:08:62:2C:32:B7:69:B4
            X509v3 Authority Key Identifier:
                keyid:DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:5a:70:19:67:25:43:4a:23:f5:de:61:49:60:c2:67:c3:2c:
         fa:b3:ca:00:09:76:f9:b9:6d:ec:d0:c5:0a:a4:cd:4c:a6:af:
         e7:f5:59:66:e7:92:9f:15:d8:c6:d7:2a:e2:05:de:3a:c4:80:
         70:d3:3e:9c:98:c2:0f:47:20:66:e8:22:4e:64:6b:67:4d:db:
         08:30:85:a7:fc:e2:dd:32:fe:d4:15:15:b9:f9:73:8e:db:0b:
         4c:61:2a:88:0f:67:17:52:6f:c2:bb:ca:f6:b8:86:e9:92:14:
         db:e3:3f:a4:02:c4:a7:92:1b:88:c8:41:83:8c:aa:8e:24:04:
         a2:cf:d4:00:66:c6:4d:5b:98:55:87:b8:37:d1:52:6e:8f:39:
         2e:fc:31:ca:30:b2:21:e5:38:bd:65:f5:cb:2f:4d:49:55:eb:
         aa:0e:1d:ba:aa:b3:06:63:e9:63:57:4b:89:9f:02:ba:97:16:
         1e:55:52:f9:ec:b4:cf:37:a7:c4:5b:81:f7:b7:02:7f:2f:bf:
         d6:97:ce:ef:3b:e6:32:be:25:73:57:98:08:07:9c:f8:c0:9e:
         32:c2:55:df:8b:fe:91:25:97:bb:38:f1:86:69:fd:8b:6c:c2:
         3b:73:77:a6:81:e9:fd:01:a6:aa:86:61:39:85:85:fe:ca:62:
         15:a6:74:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:54 2026 by rpki-client