Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
File:                     S630I4efFU256siNFgtOEW9mzak.mft (raw, json)
Hash identifier:          jvwvnao9LrTinuGSYP0Uy086goGr316S/KSQF+Frk9w=
Subject key identifier:   F0:03:3E:82:07:F1:87:8B:D2:BE:97:8E:68:AE:E7:4F:29:4C:AB:A7
Authority key identifier: 4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9
Certificate issuer:       /CN=A91B30E5/serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
Certificate serial:       025C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
Manifest number:          0256
Signing time:             Mon 02 Mar 2026 01:06:39 +0000
Manifest this update:     Mon 02 Mar 2026 01:06:37 +0000
Manifest next update:     Mon 09 Mar 2026 01:06:37 +0000
Files and hashes:         1: S630I4efFU256siNFgtOEW9mzak.crl (hash: Y4GcC6FPgewJXu8S+4K/Dp/nVx/elBdZnCKkLkjCYig=)
                          2: 0F1061D0868911EDA888A96CC4F9AE02.roa (hash: slVc2MAuomJ1lVCpaSZf3MYFxy+QIrbxktNgNNmSdu4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl
                          rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 604 (0x25c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B30E5, serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
        Validity
            Not Before: Mar  2 01:06:37 2026 GMT
            Not After : Mar  9 01:06:37 2026 GMT
        Subject: CN=69a4e29e-fcf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:05:f1:54:b4:ac:44:74:2f:44:b6:f3:42:65:
                    9c:3e:36:25:2a:b8:d2:d7:f3:8d:4f:5c:81:a8:e6:
                    69:9b:2f:e7:56:73:6d:49:ed:3e:eb:1d:db:86:4a:
                    55:8e:73:ec:74:1a:fa:20:a9:65:d5:c7:56:77:6f:
                    b3:42:75:0e:bd:bc:cd:68:e1:56:a6:b2:6a:47:9f:
                    cc:21:66:9e:96:d1:e3:c4:67:00:92:ea:cb:97:c9:
                    1e:69:4b:2c:3d:f7:7b:7f:c8:2c:ad:9a:17:2e:08:
                    f3:82:cd:99:ec:3b:63:7f:bc:b2:17:56:73:a7:a6:
                    78:6b:13:6c:9c:42:55:11:21:09:85:37:ba:fb:c5:
                    7e:56:30:b2:a6:43:2b:46:86:d9:e9:f7:a9:ff:51:
                    55:b0:ae:3e:48:76:8f:65:3d:fa:57:c3:1f:5b:d2:
                    fe:1c:2e:bd:38:07:4f:8b:b8:0b:b6:ca:19:67:b1:
                    1d:60:fb:f7:ad:0a:1c:5e:dc:0b:2e:68:85:db:7a:
                    fc:e9:23:06:99:09:d0:e7:2e:25:e1:ca:40:50:97:
                    41:4b:64:63:4d:78:eb:b8:03:d4:56:5e:e5:67:52:
                    e6:df:8c:f3:62:7d:f2:8c:29:f3:42:19:8a:6e:61:
                    8f:57:2b:47:de:f2:84:3c:61:50:1e:cb:f0:de:9e:
                    cd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:03:3E:82:07:F1:87:8B:D2:BE:97:8E:68:AE:E7:4F:29:4C:AB:A7
            X509v3 Authority Key Identifier:
                keyid:4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:c0:b6:9d:b1:e1:a6:a7:a0:07:35:d0:f7:b6:f1:ca:38:e1:
         f9:15:16:25:4a:da:6f:05:74:52:aa:cf:50:e0:6e:eb:01:d2:
         29:2b:8d:86:eb:cc:f2:52:3f:1e:48:14:87:0a:0e:9e:08:4f:
         36:b9:7f:63:c7:2c:63:f1:e9:5f:56:cf:cf:f0:3c:7d:63:a3:
         19:0c:00:92:a6:6f:90:fa:7c:fb:6d:e8:56:bb:a9:e0:68:43:
         ef:6f:fb:88:5c:b1:02:65:ed:39:16:b4:d4:e6:a6:71:71:bc:
         1f:c5:3c:50:55:5b:3a:3b:59:3a:9e:ac:fe:99:43:4c:d2:b2:
         8d:8f:69:f2:95:6f:47:b7:98:d5:42:54:f4:38:4b:dd:94:5b:
         9f:0d:73:a1:bd:f7:cd:e3:db:29:52:15:42:79:02:93:66:f1:
         6e:03:dc:2c:ec:45:6c:9c:9c:84:5c:e8:7c:d3:a1:3f:8f:61:
         81:b9:45:17:eb:93:0c:e7:9a:d3:c1:59:c5:02:f1:e8:10:d1:
         80:e6:4b:10:80:4c:21:c8:ee:8e:b9:4f:5a:5f:1b:f1:f2:bb:
         85:8f:4a:1a:b4:5e:22:82:4f:0d:22:7e:12:03:8a:ff:c5:f2:
         34:de:3b:b9:b5:79:99:cd:a8:50:d6:40:e6:49:0d:57:52:7a:
         ac:5a:64:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:43:46 2026 by rpki-client