Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
File:                     -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json)
Hash identifier:          MEzDRne6Q3PM68yDWyuRddWhFXvuTN4UEoATmnmhv1s=
Subject key identifier:   0D:E3:2C:1D:69:F7:93:B3:C6:63:BB:0F:2B:BF:16:62:FD:13:D7:EF
Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38
Certificate issuer:       /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
Certificate serial:       0119
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
Manifest number:          0116
Signing time:             Sun 01 Mar 2026 06:55:04 +0000
Manifest this update:     Sun 01 Mar 2026 06:55:04 +0000
Manifest next update:     Sun 08 Mar 2026 06:55:04 +0000
Files and hashes:         1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: LoT30+XXIz3QMK5yrLER6/ptbizkXtXDidkx2SqDk8g=)
                          2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: VfxLY1OrzcWvFN2AYE0olIYJUBwCwU7OS82n259ineU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl
                          rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
        Validity
            Not Before: Mar  1 06:55:04 2026 GMT
            Not After : Mar  8 06:55:04 2026 GMT
        Subject: CN=69a3e2c8-d30e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2d:2d:28:48:d7:94:5b:0d:8a:69:cc:37:a1:
                    79:b2:f3:50:97:b9:a8:9f:1a:d6:cd:37:aa:69:3d:
                    75:d1:7e:f6:22:06:b9:b0:b0:f8:47:5e:40:07:04:
                    20:a6:59:2a:26:04:c0:c0:32:2d:81:e3:a7:7a:14:
                    ec:e1:3a:33:82:e4:30:c4:67:a8:dd:0a:76:57:e9:
                    67:ad:3f:84:4d:0e:f1:e6:f3:38:f7:38:0b:26:7e:
                    76:3c:f0:29:dd:1e:d8:60:90:ee:cd:87:b6:ca:5f:
                    9c:07:8f:9d:eb:75:dd:c0:1a:8a:63:cd:d1:d5:8f:
                    2f:e4:75:99:32:05:d5:17:01:80:19:00:77:4e:56:
                    6a:50:1f:f9:f3:f2:84:40:26:38:91:45:4c:09:31:
                    b5:19:5d:e3:2c:6c:f5:c2:d4:e6:f7:5b:a9:3f:8d:
                    bb:a4:2d:49:88:d3:c1:6c:71:13:96:64:d4:bb:7c:
                    70:64:8c:81:f5:d8:0f:47:8f:24:e8:33:db:22:b5:
                    ac:ae:f8:57:73:22:00:33:42:56:54:34:b8:da:48:
                    08:33:5a:22:77:ce:83:14:b5:8c:82:37:20:6a:97:
                    e5:a2:67:39:f2:c1:46:6c:ef:cb:ae:75:1c:4f:63:
                    d0:bc:21:06:00:eb:20:72:65:7a:a9:a8:eb:dd:5e:
                    dd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E3:2C:1D:69:F7:93:B3:C6:63:BB:0F:2B:BF:16:62:FD:13:D7:EF
            X509v3 Authority Key Identifier:
                keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:94:4b:a0:ef:7f:24:0b:60:8c:94:1f:40:16:b6:c7:7d:f2:
         48:e7:da:e8:99:a7:61:7d:df:a8:5c:80:5b:51:b4:5a:08:5a:
         cb:e4:ac:ba:f4:ab:05:12:1f:4d:32:69:54:aa:d4:15:c2:57:
         06:dd:12:d3:fc:f7:b4:a0:93:60:84:e1:7b:9e:61:dd:0f:8d:
         d6:74:22:66:41:6c:67:94:4a:25:b3:51:ea:8b:ba:96:6b:b2:
         e0:3d:59:ef:8e:3e:72:0a:60:ba:d8:e5:4e:80:1d:e1:17:ed:
         b9:1c:3e:13:cc:86:0d:91:07:11:1a:dd:d3:95:fe:ba:79:98:
         58:97:8d:da:77:43:67:23:93:b2:6c:40:c1:73:3f:f0:91:50:
         a7:22:f6:3d:63:9b:5e:51:e5:95:3b:62:3d:9e:69:ea:31:f8:
         95:5a:23:34:32:c0:72:84:08:df:43:cb:3e:0e:a3:14:69:5a:
         66:09:8c:ff:80:77:cf:a3:d9:15:0b:60:ce:86:e5:c1:a2:d1:
         f7:39:67:ad:28:41:87:cc:30:d3:7d:ad:9a:37:25:7e:82:07:
         9c:02:13:94:e8:77:b7:d7:a3:f3:78:6c:9e:c5:cc:5a:c4:a3:
         ec:05:89:ab:30:e6:08:f5:88:6e:a2:b1:8a:70:dc:62:66:f1:
         89:b9:fe:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:29 2026 by rpki-client