Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
File:                     _SqdXvq5ERsKWjAT80wsva_QH8I.mft (raw, json)
Hash identifier:          J9Put4Tj6znfdptub5Oiky6xdEHBGE1xPRa8lWkXtAI=
Subject key identifier:   71:C4:3F:8C:86:15:77:DB:07:C8:E2:40:E7:CC:77:E9:F8:43:C3:56
Authority key identifier: FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2
Certificate issuer:       /CN=A91B189B/serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
Certificate serial:       07B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
Manifest number:          07AE
Signing time:             Mon 02 Mar 2026 01:07:52 +0000
Manifest this update:     Mon 02 Mar 2026 01:07:50 +0000
Manifest next update:     Mon 09 Mar 2026 01:07:50 +0000
Files and hashes:         1: _SqdXvq5ERsKWjAT80wsva_QH8I.crl (hash: kU28Ywtcdhqd517ql3dJB2wqB0esE5SrrqvhlEagJ/o=)
                          2: DFCE0CFC387311EBA0AC593EC4F9AE02.roa (hash: thgZ084FdnfIjYuqblOzz/1teNd07/KOSxYxuCVdQEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl
                          rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1974 (0x7b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B189B, serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
        Validity
            Not Before: Mar  2 01:07:50 2026 GMT
            Not After : Mar  9 01:07:50 2026 GMT
        Subject: CN=69a4e2e8-ff8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a1:02:57:df:b8:0a:67:b4:61:f5:19:2f:f4:
                    19:3c:fa:30:5f:ba:d8:b5:ea:9b:94:e6:7e:d3:6e:
                    73:8b:db:2b:bd:f2:a4:9d:58:05:55:af:1b:b3:e2:
                    1b:b2:c4:f1:12:29:c9:48:ac:a7:b7:28:94:af:68:
                    c3:c0:36:57:9b:a3:50:83:4f:d0:07:e5:69:52:c3:
                    ab:e2:e3:6b:b4:34:52:4a:98:82:40:e1:25:8d:5c:
                    09:c7:a0:1d:7f:a8:78:5e:ab:89:ce:f5:45:48:9f:
                    54:2c:91:2e:cd:22:c0:45:ed:ca:09:2e:72:a2:87:
                    cd:31:e9:06:88:7e:bb:46:b3:06:3f:29:d9:40:d1:
                    a3:26:f0:27:27:7c:9b:fc:42:21:98:74:8e:b5:bd:
                    94:7d:aa:66:3a:3f:e6:57:37:9e:e5:3a:64:87:53:
                    8a:08:a7:c5:40:12:87:d1:6c:b0:29:e0:3c:98:a8:
                    8f:f0:61:6c:01:48:15:ca:9c:1c:cc:35:de:be:2f:
                    d8:03:0e:69:36:41:20:a1:71:fd:ce:f6:15:1d:d9:
                    da:4c:2f:f4:4e:5b:ff:c9:9a:18:a3:2e:9b:50:d7:
                    68:88:cd:8b:7b:01:c8:47:ec:d9:64:63:63:bb:2d:
                    ac:2b:a7:ac:bd:66:7d:a6:f6:6f:ce:38:71:1b:35:
                    9f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C4:3F:8C:86:15:77:DB:07:C8:E2:40:E7:CC:77:E9:F8:43:C3:56
            X509v3 Authority Key Identifier:
                keyid:FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d1:0f:96:48:a7:d6:f4:ea:34:95:d9:1c:09:8e:38:7b:08:
         c4:77:05:b6:ed:1f:48:c4:47:99:04:64:16:2e:1e:ff:42:45:
         59:80:0a:bb:42:79:1c:b6:8d:a0:eb:82:46:2b:32:e0:62:d9:
         ba:78:fe:c2:72:1c:49:d1:d9:f0:ea:81:1b:85:38:a9:fe:d8:
         5d:34:06:93:3b:17:5d:dc:46:03:35:82:62:20:04:63:9f:8b:
         81:68:b3:de:ea:d1:f4:f7:47:f4:25:18:b8:a4:f5:dc:16:45:
         10:89:a0:2a:bd:b2:8b:c6:84:61:8a:1e:7d:51:c1:be:80:84:
         c9:ad:ec:30:4a:69:a4:d8:d1:61:18:20:ce:80:23:fb:f8:55:
         8a:6b:ff:81:ac:29:24:ca:e6:e5:ad:23:8d:89:98:41:d3:f6:
         6f:6e:54:fd:57:12:08:a9:d3:be:4c:dd:41:dc:d1:e3:39:7f:
         1f:3e:97:cb:cb:22:50:be:f1:61:25:c8:4c:ef:c1:9d:8f:85:
         01:c7:f1:c8:ba:61:6a:b4:16:8a:9f:89:4c:a5:de:f6:d8:9a:
         84:4e:7d:c5:b8:e5:a9:12:c7:a2:56:63:af:13:09:a4:d1:71:
         bb:41:a2:e3:74:45:67:d0:41:b3:82:fb:05:a5:37:db:36:a1:
         60:09:c9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:15 2026 by rpki-client