Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
File:                     g1GgqJRYpHQmpXCgKQH45lQuguI.mft (raw, json)
Hash identifier:          ynsCFRM6hT3CILvPFzQYR77HfEKHMPkqDFYdhZxYKiw=
Subject key identifier:   37:2F:CC:5E:0A:CF:D2:96:62:86:4B:17:47:8B:1D:D0:64:52:F5:F3
Authority key identifier: 83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2
Certificate issuer:       /CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
Certificate serial:       04DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
Manifest number:          04C5
Signing time:             Mon 02 Mar 2026 01:30:07 +0000
Manifest this update:     Mon 02 Mar 2026 01:30:05 +0000
Manifest next update:     Mon 09 Mar 2026 01:30:05 +0000
Files and hashes:         1: g1GgqJRYpHQmpXCgKQH45lQuguI.crl (hash: YlKV+1yKtlkwsvueyqL/4WBCNgqIuWPi9ibmb4BuLvg=)
                          2: D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa (hash: hWu9qpbg14kuqFs4y0Y3TECEDMGUbIKXFHrFlEBJcKs=)
                          3: D516EA2AA1E611EDABFD7D7FC4F9AE02.roa (hash: d155T6r7zPawfippoFizBzUuXPCytQbBH2+16a7a1yQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl
                          rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1242 (0x4da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7D3D, serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
        Validity
            Not Before: Mar  2 01:30:05 2026 GMT
            Not After : Mar  9 01:30:05 2026 GMT
        Subject: CN=69a4e81f-eee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:71:bd:6e:57:48:31:69:7c:8f:29:61:94:29:
                    42:64:bd:a0:7a:15:29:1b:79:e5:9e:67:1a:db:0c:
                    0f:a1:ef:f3:3e:2d:05:3a:51:e6:8e:a5:6a:4e:45:
                    06:c5:2e:c9:16:ac:f3:ff:b4:bc:dc:ad:b9:89:a7:
                    fb:1b:06:86:40:81:c2:17:9f:90:2a:b7:ec:7b:43:
                    e3:ff:88:2c:b3:06:56:5c:b1:e3:7e:ec:94:ae:6c:
                    12:83:e7:af:9f:65:2d:ff:8a:69:b3:b1:21:b5:14:
                    47:43:50:41:43:a4:b7:da:b9:e7:64:5d:66:f2:72:
                    63:a6:64:5a:61:4f:43:54:de:e3:52:83:9b:6b:8f:
                    50:e5:90:38:c1:ab:0a:69:a2:3b:fd:6e:67:64:47:
                    9b:6f:ed:83:ce:74:f1:65:c3:4b:ce:a2:b3:a8:2b:
                    1e:85:83:96:b6:f8:63:3d:88:e0:23:47:d4:75:30:
                    cd:a9:2e:bc:66:74:5e:73:d0:b6:5a:c1:19:b7:e7:
                    86:be:f7:37:d1:94:f8:64:ce:f7:54:4b:2a:cb:80:
                    dd:c9:96:ad:15:d2:61:2a:78:78:ca:12:d2:b6:8c:
                    db:0c:c8:8a:bc:c5:1f:85:53:02:9f:44:cd:29:64:
                    dc:fc:7f:a7:18:fb:c7:70:7c:ed:ca:6e:1b:5c:a4:
                    4f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2F:CC:5E:0A:CF:D2:96:62:86:4B:17:47:8B:1D:D0:64:52:F5:F3
            X509v3 Authority Key Identifier:
                keyid:83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:31:ed:c1:59:9f:34:15:ad:06:ec:ff:59:91:9c:e4:ee:97:
         cf:04:13:66:97:16:f1:4c:53:13:3c:d0:24:60:bc:a8:aa:2f:
         60:08:13:6d:c5:21:dd:53:72:ac:b7:df:86:fa:2e:e0:6a:24:
         fb:d6:24:9a:4f:6d:78:2c:15:a8:d1:b2:c2:dd:9d:2f:07:19:
         17:ad:6a:3f:36:de:02:15:6c:c7:7e:e1:2a:b6:cc:5d:af:27:
         80:4d:e3:3b:eb:ef:02:94:2f:4d:18:99:18:de:1b:fd:d0:05:
         9d:0d:94:33:c2:ac:22:5a:86:71:e3:dd:34:5a:f4:2a:d8:c8:
         58:ad:bb:c9:05:ae:aa:e4:49:c6:f0:36:bf:72:81:62:63:8b:
         7c:62:37:15:a5:69:2c:48:45:cd:2a:32:e0:c0:0b:a4:27:a3:
         37:08:1c:47:a8:f8:73:75:19:83:d5:ad:47:24:e8:a8:41:07:
         4d:8b:1d:a7:55:8d:2f:68:f2:9b:52:57:e3:58:11:49:2e:4f:
         cc:31:16:31:df:63:0f:ef:52:c2:d2:cf:92:d7:c8:2d:f1:68:
         7a:47:76:60:bb:fe:e4:36:6b:f0:20:70:9e:bf:82:f7:13:35:
         53:71:6b:f3:19:9e:75:e5:23:00:eb:3a:df:0a:ac:d8:0e:0c:
         07:62:03:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:41 2026 by rpki-client