Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft
File:                     SzudkwWID_Zrfx5MkP-YdSiGOBE.mft (raw, json)
Hash identifier:          i/0woPyu1hpVTTSClOtPQVsi9xhfd9BVjCT/d4jFmmI=
Subject key identifier:   4D:B9:F3:E1:97:F5:35:55:9A:CA:D0:43:EC:BE:EE:4D:28:19:50:24
Authority key identifier: 4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11
Certificate issuer:       /CN=A91B4E2B/serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811
Certificate serial:       015D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft
Manifest number:          0158
Signing time:             Sun 01 Mar 2026 06:04:23 +0000
Manifest this update:     Sun 01 Mar 2026 06:04:22 +0000
Manifest next update:     Sun 08 Mar 2026 06:04:22 +0000
Files and hashes:         1: SzudkwWID_Zrfx5MkP-YdSiGOBE.crl (hash: GzMQgR5qDWuvoHRJFclT/DI59fm1WBzEkEXytyiD1F0=)
                          2: 56CBAF060CEE11EF80CB5642C4F9AE02.roa (hash: eodiFGpIfsgXUXxslrRHT6wLB6egOaD+ezHH/eHicB4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl
                          rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4E2B, serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811
        Validity
            Not Before: Mar  1 06:04:22 2026 GMT
            Not After : Mar  8 06:04:22 2026 GMT
        Subject: CN=69a3d6e7-dd70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ac:8a:77:25:78:4b:a3:58:27:22:70:3b:6e:
                    57:5a:e4:7a:d3:68:20:ee:39:a8:f5:91:ff:97:14:
                    ae:f8:2a:78:c4:e8:cb:71:ba:7c:d0:15:18:b7:f7:
                    b5:c1:1f:35:28:b6:66:d4:00:1c:2e:d2:17:9b:be:
                    39:2c:a4:97:4c:2d:66:c7:50:47:43:2e:7c:22:db:
                    17:a7:87:0f:62:33:82:2c:55:f6:81:c5:d4:28:63:
                    4a:f1:cf:d3:b7:25:36:39:6e:fa:4c:35:da:8e:2d:
                    30:7d:a8:e5:51:4c:b6:fd:aa:70:1e:02:09:e6:6d:
                    18:23:59:ea:ab:1f:e6:58:c0:9e:a6:66:ee:22:13:
                    cc:11:12:3b:e3:ed:61:ee:41:b3:b7:6b:2b:0f:e1:
                    df:3e:79:9b:05:0e:dc:a3:82:3f:24:68:37:39:aa:
                    41:79:ea:f8:e2:32:48:f7:e9:dd:58:38:ce:65:45:
                    d6:98:cd:ed:47:f8:65:e3:ad:6c:6a:05:39:35:d5:
                    c8:8c:a9:a4:9e:07:ca:5c:d9:9b:cc:86:4a:9a:7f:
                    ac:b2:c9:a4:2e:5b:f5:7d:4d:bd:8d:59:d6:7f:fe:
                    5b:a0:f1:d2:9b:9d:5e:d6:be:c7:45:db:05:9a:86:
                    35:c0:81:b7:45:bf:fd:0e:5a:60:5c:ab:48:73:ed:
                    af:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B9:F3:E1:97:F5:35:55:9A:CA:D0:43:EC:BE:EE:4D:28:19:50:24
            X509v3 Authority Key Identifier:
                keyid:4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:66:b2:3f:e6:ff:b0:c8:c9:e3:7d:55:6b:7f:36:43:3b:03:
         4e:84:ff:dc:5c:34:9e:b5:c2:a7:5c:cd:8f:e8:ab:cf:a5:44:
         07:59:f8:10:7a:e8:20:3f:58:5e:cd:ac:72:81:9f:d0:ae:b3:
         a5:4f:08:0a:6a:78:f8:82:18:e6:65:ab:80:ee:14:bc:72:42:
         63:02:24:56:8b:63:84:d4:3e:c3:67:32:89:cd:8e:bf:18:05:
         8e:ec:ab:1c:4c:32:d9:05:4e:16:24:06:13:4b:71:89:2a:3b:
         22:7c:17:13:a2:a7:6c:c3:b4:06:f5:09:af:6b:f6:0a:a0:19:
         38:71:b6:dd:83:8b:47:c2:97:a3:d5:08:a0:25:37:a3:48:9c:
         22:f2:0a:cb:14:79:d5:20:37:c0:b1:c7:4e:81:44:cd:47:68:
         31:61:77:97:02:d2:b8:f3:7a:90:2c:2d:fb:68:36:29:d5:8e:
         2c:ad:9d:3b:5c:c8:22:5d:57:bd:f7:44:08:13:ba:70:8e:94:
         40:30:cc:60:e6:0b:1e:4d:13:1d:ba:02:b7:0e:29:3f:e7:0a:
         83:39:dd:c7:f1:0a:bb:bf:b5:cc:2e:0f:b4:e0:f9:97:3c:16:
         93:c0:78:23:e8:b9:05:fd:0d:29:1e:9d:23:51:78:a6:d1:cc:
         dd:2b:1b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:27:09 2026 by rpki-client