Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
File:                     4-snntAeg57yRYBuBFH8FVAJJqI.mft (raw, json)
Hash identifier:          BSIb0iVMN3iePvmeZ3WrNkdixsZ+I9ITtwGx8UCJ84M=
Subject key identifier:   0B:DF:1C:CF:80:60:86:F7:C6:50:B4:8B:A3:7F:90:6B:AE:91:19:3D
Authority key identifier: E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2
Certificate issuer:       /CN=A91B2C53/serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2
Certificate serial:       0846
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
Manifest number:          0839
Signing time:             Mon 02 Mar 2026 02:05:23 +0000
Manifest this update:     Mon 02 Mar 2026 02:05:22 +0000
Manifest next update:     Mon 09 Mar 2026 02:05:22 +0000
Files and hashes:         1: 4-snntAeg57yRYBuBFH8FVAJJqI.crl (hash: FQL3V2no3Cq9m2fOZOZYZPXnQgGze1MYi6i037jCICM=)
                          2: EBD94A14049A11EBB73A8663C4F9AE02.roa (hash: ni9ao10d4UmmhoPNh6i+p9dI8Um3irz51op9fJ5uVas=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl
                          rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2118 (0x846)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2C53, serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2
        Validity
            Not Before: Mar  2 02:05:22 2026 GMT
            Not After : Mar  9 02:05:22 2026 GMT
        Subject: CN=69a4f063-2810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:75:15:65:c4:de:b2:7b:e5:69:12:4b:a6:b1:
                    f2:89:48:07:67:57:70:96:c6:0f:05:f0:70:45:aa:
                    e6:72:8c:58:49:7d:d2:c8:82:3f:86:a0:5f:c1:77:
                    e2:cc:cb:d8:06:e5:20:1a:94:73:ca:57:3d:28:44:
                    7b:3f:18:a1:06:93:6e:c9:99:49:15:fb:87:c4:9a:
                    6a:b4:b7:da:7a:1c:c0:33:03:23:be:9d:3e:47:8e:
                    1a:ab:dc:b5:ab:f3:39:6e:68:77:f2:3b:ca:27:24:
                    ec:80:77:04:dd:e6:77:21:23:11:7b:c2:ac:5c:84:
                    f8:d6:33:88:94:9c:16:33:fb:60:15:ba:8f:29:50:
                    8e:d6:ea:47:54:bb:e5:f3:be:91:ba:79:02:5d:74:
                    c2:b8:41:3b:25:1f:2e:b7:cd:b6:09:73:f0:30:1f:
                    d6:ca:a3:54:d6:ea:6f:1d:2a:1d:31:38:7c:b6:1e:
                    91:d5:1f:ab:03:3b:ba:b1:22:d9:2d:10:2f:43:27:
                    be:b9:58:75:14:28:a0:b8:05:12:f0:87:db:2f:85:
                    71:c3:65:ea:ab:dd:c6:4d:48:ea:3e:e8:f6:fa:63:
                    c9:a7:ac:e4:bb:9f:f8:b8:6f:b6:e7:a3:b2:1f:0b:
                    b1:c3:16:6f:d1:10:96:23:0b:07:bf:93:7e:74:f5:
                    c3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DF:1C:CF:80:60:86:F7:C6:50:B4:8B:A3:7F:90:6B:AE:91:19:3D
            X509v3 Authority Key Identifier:
                keyid:E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:0c:22:9a:7c:c4:50:6b:af:d5:69:1b:60:71:2a:4f:b1:9f:
         cc:e8:a5:ad:9a:d9:f8:70:b4:77:01:e3:21:e9:17:3e:27:12:
         5e:f0:1c:1f:f5:f2:65:87:e8:05:c5:e9:c5:3f:f1:b8:11:14:
         9c:a3:a2:8c:8d:a4:f8:32:09:8c:9f:7b:ff:94:a5:0c:ba:98:
         9a:cd:91:78:0d:09:22:d7:1d:05:c9:a3:1b:60:6b:fd:64:87:
         e9:0f:86:fe:d2:b4:d3:11:07:c8:4e:15:f5:bb:3c:c8:e8:a3:
         95:f0:9b:6c:ee:bc:cf:79:74:7b:fd:27:b1:cc:50:61:89:77:
         30:61:d0:d0:eb:13:96:92:bf:ed:ac:4e:8a:b6:04:92:8d:66:
         0f:67:17:29:7a:cc:94:bd:35:00:11:22:20:5a:8d:45:2b:43:
         45:69:59:4e:b8:5c:db:93:e6:51:31:8b:7f:32:63:b7:3e:eb:
         03:1d:9c:b6:2e:5b:78:e5:a9:6a:ec:08:28:5e:13:01:86:6c:
         eb:55:98:7c:99:d5:40:ec:f1:8c:1d:4e:87:99:0f:49:8a:be:
         7e:6d:31:f9:63:d7:6b:a2:34:4c:b1:bd:d7:73:13:8d:45:dd:
         1f:23:1d:81:de:b8:49:50:4a:b7:9f:c9:b5:62:e9:e3:51:b7:
         09:99:e5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:22:00 2026 by rpki-client