Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
File:                     9iXmzAOQJv9byda9xC2NHBir8zs.mft (raw, json)
Hash identifier:          IjMe0XgGj+OEyAIaQg5hlrSe0oNmeet4YJairfc6/4w=
Subject key identifier:   5E:DF:CF:41:91:87:3C:D5:75:CC:57:99:59:B5:F0:B2:4D:60:09:54
Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B
Certificate issuer:       /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B
Certificate serial:       018D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
Manifest number:          0168
Signing time:             Sun 01 Mar 2026 06:22:44 +0000
Manifest this update:     Sun 01 Mar 2026 06:22:44 +0000
Manifest next update:     Sun 08 Mar 2026 06:22:44 +0000
Files and hashes:         1: 9iXmzAOQJv9byda9xC2NHBir8zs.crl (hash: Qhp8wJ/dsYb+i8wjSA7ujI76OD1iAUhFhXB5svKUhVw=)
                          2: E16E7E38BB8211F0B31D1B65C4F9AE02.roa (hash: YeBUDIUWZEw6KNF9ASetz2sLWKE1XOGn5uZS6H0oXrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl
                          rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:22:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397 (0x18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B88CA, serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B
        Validity
            Not Before: Mar  1 06:22:44 2026 GMT
            Not After : Mar  8 06:22:44 2026 GMT
        Subject: CN=69a3db34-e811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:0d:0b:2b:c6:f3:2c:91:32:89:03:6f:e6:
                    fb:9d:60:3c:fb:61:3e:b8:db:04:c7:7f:fe:a1:fc:
                    13:78:a3:5d:88:d9:66:54:ee:62:76:2b:09:81:0c:
                    fa:7b:da:59:7a:0a:35:46:89:fb:8d:93:78:bd:31:
                    ab:c7:17:1c:0d:60:eb:e0:49:f4:ea:8b:94:16:87:
                    6d:70:9c:c0:52:35:dc:31:f5:66:54:a9:85:af:70:
                    33:f4:6b:a1:3f:74:bd:66:72:35:8e:08:d4:bc:22:
                    af:6c:6f:cd:f8:2a:b1:be:35:e8:71:bf:b9:d1:f8:
                    ba:a3:62:8f:5e:42:2d:ea:e0:8f:bf:89:fb:00:8c:
                    3a:6f:7b:6d:a1:82:64:32:11:eb:d7:d4:79:17:ea:
                    0f:2f:f9:55:6f:7a:ba:c2:2d:a0:e8:b5:33:fa:ca:
                    d9:1c:f5:f4:a4:4d:12:e4:cb:9d:99:d0:d8:8a:52:
                    4c:13:81:bc:fc:ee:fe:f3:1f:70:2c:9c:39:d0:2c:
                    2a:64:fc:01:bb:af:3b:65:ce:fc:d7:f8:c6:3c:34:
                    85:70:77:20:4d:2e:68:5f:8b:cd:cb:6f:7c:98:4c:
                    bb:5a:46:c7:ff:02:d6:8f:8f:97:9a:a3:a0:8c:50:
                    30:84:f0:41:82:be:40:50:74:6c:dd:b2:5f:69:d8:
                    44:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DF:CF:41:91:87:3C:D5:75:CC:57:99:59:B5:F0:B2:4D:60:09:54
            X509v3 Authority Key Identifier:
                keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d0:1d:4c:55:c1:9d:de:95:02:96:c8:74:64:11:47:c2:be:
         f4:c4:ea:44:2a:81:63:28:37:e2:7f:63:25:7a:b5:f8:a7:dd:
         6c:1b:b4:a6:bc:54:dd:ab:fb:d0:fe:d2:08:ef:94:c5:f8:9a:
         5c:b7:1f:f0:4b:d3:d7:f6:15:e9:90:95:82:a3:ea:dc:d7:00:
         ad:4e:82:6a:ab:ad:f6:c9:55:76:8f:36:c7:29:7a:70:2c:47:
         68:36:19:b6:6e:b5:14:69:22:a8:83:ea:ad:44:4e:9a:c1:6c:
         ae:08:7b:b5:b5:7a:55:c8:ac:e4:b7:63:2b:68:4d:d1:c9:eb:
         c2:2c:83:2f:8d:e1:a2:ad:f2:31:80:14:ce:11:ef:5b:a9:53:
         8e:9e:ae:e7:ca:ec:e0:8d:45:17:5a:17:57:d6:8a:04:d0:00:
         a2:74:63:5a:7f:b9:0f:0c:41:71:7e:ee:da:3f:15:2f:c5:da:
         fd:65:4f:f0:64:9a:8b:3b:f5:34:7c:7e:f9:e8:51:a7:28:84:
         2f:d9:db:83:5a:b1:73:e0:18:9c:7b:ce:8e:2a:f1:2d:4e:20:
         71:0c:82:96:4b:54:2e:fe:7f:81:07:60:73:f7:a9:17:ff:f3:
         9c:3e:af:c2:90:a3:2b:e3:2b:92:47:f0:c3:26:b5:5f:d6:51:
         99:9a:54:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:01:49 2026 by rpki-client