Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft
File:                     4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft (raw, json)
Hash identifier:          qmrEObD194mSaSZoq7fxJTdB3wR1/WALrEyvR3PFEYc=
Subject key identifier:   28:D6:69:B4:D5:26:85:91:7C:D5:FF:0B:91:82:21:77:91:D1:B6:BB
Authority key identifier: E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6
Certificate issuer:       /CN=A91BAE1C/serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6
Certificate serial:       0405
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft
Manifest number:          0401
Signing time:             Sun 01 Mar 2026 01:16:26 +0000
Manifest this update:     Sun 01 Mar 2026 01:16:25 +0000
Manifest next update:     Sun 08 Mar 2026 01:16:25 +0000
Files and hashes:         1: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl (hash: G+QZIdWQgtNBsaU0vfyjngGQ+xidGJTgUilRnY0fAco=)
                          2: 4BD764E8AA6511EC9A354C33C4F9AE02.roa (hash: +7SXGk64WdhbzbBHPQcKc3z8KwO03i6JIK3eFusKvxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1029 (0x405)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAE1C, serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6
        Validity
            Not Before: Mar  1 01:16:25 2026 GMT
            Not After : Mar  8 01:16:25 2026 GMT
        Subject: CN=69a3936a-730e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bb:fc:36:aa:dc:2d:86:8d:ba:82:2e:03:24:
                    64:ce:6e:23:41:d0:3d:29:14:98:8a:1a:37:33:d0:
                    ef:6f:75:f0:cd:c6:f0:81:b4:2f:71:b3:27:fd:17:
                    99:e4:09:c5:6e:a7:66:25:a1:f6:59:a4:04:ea:f0:
                    e6:33:f8:12:b9:94:b4:d0:50:a6:93:35:e1:c9:2a:
                    f9:c1:ed:e8:50:57:10:76:80:93:62:01:04:89:d6:
                    0e:7c:8d:9a:95:a9:53:1b:ff:cd:d1:d8:78:dd:67:
                    22:5e:96:5d:7f:0d:4d:e5:7d:7b:51:38:73:a5:8a:
                    dc:8a:4c:69:2e:ee:74:69:cf:7b:cc:f7:1c:77:61:
                    b0:85:18:d3:e8:5a:f3:00:58:cf:69:e1:13:a6:27:
                    84:df:cf:17:f2:a5:0a:9a:c7:bf:5e:72:c9:0c:39:
                    36:ca:5f:b0:f1:e0:e6:0a:a7:4e:09:0c:1c:2d:a9:
                    cf:34:87:35:6c:a4:ee:4d:d6:76:f9:e8:49:dc:7a:
                    62:de:9f:2f:be:bb:8a:72:7f:33:9a:b4:fa:ec:e8:
                    8f:a3:a6:92:fc:aa:46:a8:6c:d1:de:06:21:86:4e:
                    26:a0:49:43:02:2b:e1:ff:91:b0:64:bb:56:8a:b1:
                    9b:e3:a1:38:9b:4c:c2:14:9c:27:80:1c:cd:e0:25:
                    a7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D6:69:B4:D5:26:85:91:7C:D5:FF:0B:91:82:21:77:91:D1:B6:BB
            X509v3 Authority Key Identifier:
                keyid:E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b4:83:ef:29:76:cb:dd:9b:73:0e:bf:a3:40:41:27:f9:c0:
         7b:67:4d:9d:0c:3d:9f:8a:f6:bc:bd:a7:70:00:f5:63:d6:6d:
         72:11:03:5b:35:33:7d:e5:7f:8e:62:5d:73:97:ad:85:bb:cc:
         a2:d4:f8:d8:7b:31:b6:2e:4b:d4:03:63:5f:91:4a:88:04:5a:
         a8:7e:5d:aa:48:ae:b7:7e:82:7a:44:b1:39:2b:61:cf:db:3b:
         02:25:dd:5c:3c:3a:e1:b2:69:55:ce:5a:6d:f9:63:c7:3a:2a:
         b1:6c:54:8f:c4:11:0d:d6:c3:56:06:b4:74:c7:ea:c2:1d:c0:
         bd:ac:45:d8:a6:89:0c:03:c8:15:6c:ed:07:db:96:30:5d:fe:
         9f:f0:b3:41:9c:3f:41:23:c8:65:77:d4:f8:9d:ee:95:5a:2b:
         0c:fb:12:1e:4c:4a:39:84:17:40:54:db:21:16:08:6c:6c:fc:
         71:53:ab:52:c0:e8:18:3f:31:41:76:22:9a:5e:0c:fe:fc:62:
         eb:28:01:d1:29:27:d6:35:ff:fe:45:b1:7b:4c:90:76:eb:f1:
         24:8c:43:94:a3:ba:d1:dc:33:04:82:9a:19:40:91:ab:8d:69:
         6a:ae:c9:0b:3f:7a:2a:de:d0:35:37:6f:e2:4f:8a:aa:90:5d:
         ea:83:db:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:36:00 2026 by rpki-client