Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
File:                     iJGVOO7eyDINXq9rHzKymCOreBA.mft (raw, json)
Hash identifier:          lto4ENaK23+3+IZnXCADh87Od+H3x/hQ5kFkPbjXvSs=
Subject key identifier:   AE:4D:B3:CA:8B:E4:39:A1:3B:24:12:ED:5A:9C:50:8B:0E:99:9A:CA
Authority key identifier: 88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10
Certificate issuer:       /CN=A91B4460/serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
Manifest number:          AA
Signing time:             Sun 01 Mar 2026 23:49:55 +0000
Manifest this update:     Sun 01 Mar 2026 23:49:53 +0000
Manifest next update:     Sun 08 Mar 2026 23:49:53 +0000
Files and hashes:         1: iJGVOO7eyDINXq9rHzKymCOreBA.crl (hash: 62GKmDB2MEbJ+RlpaZqmIMtmUV4ZTzk7nj6CMx5O0gA=)
                          2: 7A85F9D2148711F0AF960528C4F9AE02.roa (hash: SY3BwzCftGVZ3723+P2mum60QxTDJL2Satr/FIkLJnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl
                          rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4460, serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810
        Validity
            Not Before: Mar  1 23:49:53 2026 GMT
            Not After : Mar  8 23:49:53 2026 GMT
        Subject: CN=69a4d0a2-a4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:78:d9:fe:0e:5c:14:02:95:08:3f:da:09:eb:
                    6c:1b:1d:80:f0:55:7b:cf:8c:5d:c5:d9:bc:6f:df:
                    7a:9f:a1:ba:b5:f5:88:60:e9:df:4f:61:c6:4c:c2:
                    5e:48:6b:18:42:b8:30:e8:3a:0c:8f:cd:a9:0d:62:
                    eb:6d:b1:b4:32:ae:d8:35:28:6e:ec:77:ca:56:8f:
                    54:c1:7a:14:20:86:9a:2e:e8:a5:7c:a4:4f:e4:43:
                    5c:53:ef:00:fa:dc:f0:37:6e:da:5f:55:f4:f6:5b:
                    2f:e5:43:a5:d3:b7:0e:11:04:88:e5:b1:90:fa:f1:
                    08:36:c7:81:20:ff:f7:3f:21:30:9b:18:5b:46:10:
                    3f:5a:58:c1:0b:fe:d7:a1:81:b1:60:a8:19:78:80:
                    f7:f0:f8:ff:d4:12:d5:fc:ab:7a:92:ed:fd:0f:0e:
                    c5:b1:e3:d3:a8:a2:4e:a1:2d:5c:fa:a6:c9:5e:0d:
                    39:32:cd:55:b8:13:51:a1:58:ca:71:7b:9b:a2:a2:
                    67:b3:15:df:3e:aa:75:f1:5c:24:68:f1:31:78:e1:
                    2e:5e:1b:43:c9:db:1d:3a:50:00:a7:c4:19:53:12:
                    04:2c:68:8b:de:fa:1c:6b:3a:01:09:ef:d2:c9:f1:
                    48:d5:37:92:cc:9d:97:57:d8:37:82:67:f8:1b:ad:
                    3e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4D:B3:CA:8B:E4:39:A1:3B:24:12:ED:5A:9C:50:8B:0E:99:9A:CA
            X509v3 Authority Key Identifier:
                keyid:88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:95:22:86:f8:05:0a:f8:08:86:b7:3c:bd:09:23:4b:dd:34:
         dd:68:36:31:c4:21:ad:32:3d:db:e8:6f:14:90:92:86:f8:22:
         d0:69:bd:4f:55:5c:60:d9:6d:a3:9a:3e:32:48:7d:db:af:00:
         d7:0c:a3:dc:1c:d6:72:9a:f3:70:88:b2:b4:91:2d:76:a3:24:
         26:8f:d6:7f:ae:24:bc:02:32:1a:85:ad:ae:e4:7d:a2:f7:52:
         d3:a9:b6:42:3f:8e:32:85:78:9c:af:f0:5d:d7:0d:5c:1c:8e:
         66:fd:c2:44:0f:3d:71:5d:7a:68:b3:2c:7d:ca:65:99:5e:52:
         dc:9c:0b:5e:d7:a4:8b:90:b3:2a:09:b3:99:f3:08:4c:d4:f5:
         b6:1a:8d:41:15:ed:11:5d:4c:0c:54:33:1f:96:72:54:92:f7:
         32:68:a7:ea:a8:31:4c:90:43:15:7d:1a:85:a1:fd:bd:90:a5:
         6c:3d:90:5c:7c:a9:20:27:b8:78:07:b3:a8:fc:ac:f6:b2:76:
         ce:79:53:d0:07:e2:dc:84:9b:e3:54:05:13:fe:db:56:4e:e7:
         84:c9:8e:ea:fc:4d:1f:bf:ab:6e:b2:d8:c8:57:20:3f:5f:7e:
         4d:7d:f2:98:20:29:e9:18:0a:78:f8:43:70:62:d3:b2:6b:1c:
         e3:1a:39:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:39:39 2026 by rpki-client