Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
File:                     SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft (raw, json)
Hash identifier:          alh6ycMCxOjjVap+cJWd3t3wZG6QFMqN9G555MdoqMY=
Subject key identifier:   CE:42:EE:CC:5A:D0:8C:EA:57:62:3B:7F:AA:42:0C:F5:5D:10:FE:5F
Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F
Certificate issuer:       /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
Certificate serial:       010F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
Manifest number:          010A
Signing time:             Sun 01 Mar 2026 07:04:59 +0000
Manifest this update:     Sun 01 Mar 2026 07:04:59 +0000
Manifest next update:     Sun 08 Mar 2026 07:04:59 +0000
Files and hashes:         1: SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl (hash: W8ktm85Us+EZuEFLJmJVlIZwlDQUhZn6fmUdTWsdzQA=)
                          2: 35525B92845611EFB053C341C4F9AE02.roa (hash: nap5DwScCHSxl7+vobvju05szU4kvHjXe5lhp9A3q7I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl
                          rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:04:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC4FF, serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
        Validity
            Not Before: Mar  1 07:04:59 2026 GMT
            Not After : Mar  8 07:04:59 2026 GMT
        Subject: CN=69a3e51b-127a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1c:ca:4c:fd:aa:91:e1:07:e3:fa:db:a8:0c:
                    4b:87:fe:23:34:b6:78:be:aa:c6:4a:56:a4:b3:19:
                    6b:4f:59:e4:44:0a:b1:3f:03:0b:dd:03:df:a6:d6:
                    6b:19:db:30:54:10:1e:36:28:cb:ef:20:ff:d0:ec:
                    3c:63:2c:cb:79:2f:bf:85:ed:eb:2d:bb:e2:76:a4:
                    79:f4:32:60:9c:54:45:0a:bc:27:28:53:59:25:05:
                    dc:9d:c1:c0:d1:34:a4:bb:54:1b:76:23:de:5c:1a:
                    62:fb:3f:e7:45:c1:a5:e6:1c:14:2a:38:8a:86:91:
                    c3:e1:f1:52:ad:76:12:a4:72:87:44:7f:62:58:bd:
                    5a:93:59:68:f3:1e:87:80:aa:c8:ac:9e:e7:68:13:
                    2e:2f:5e:97:15:54:75:83:e2:0b:2e:8f:81:6b:5a:
                    84:c7:39:04:05:aa:a9:b8:02:f9:eb:ea:b3:03:c8:
                    58:70:1a:b9:b4:84:a1:ae:35:0c:1a:bd:58:91:9d:
                    a1:df:42:d9:91:f5:ed:c1:57:f4:fd:98:a6:a1:56:
                    c6:2d:14:c4:69:86:dc:6d:b6:b0:23:93:61:14:ed:
                    ec:9c:22:eb:67:61:75:22:d3:31:0c:45:3c:45:eb:
                    14:a4:f1:ba:79:f9:85:d7:89:6b:9d:2c:a5:61:a0:
                    63:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:42:EE:CC:5A:D0:8C:EA:57:62:3B:7F:AA:42:0C:F5:5D:10:FE:5F
            X509v3 Authority Key Identifier:
                keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:18:1d:9f:9f:79:64:cb:95:e2:fc:55:4a:2c:69:df:c1:fb:
         a9:3b:3d:c8:bd:ef:c6:f1:2c:c4:5f:d6:78:4a:d5:be:84:7c:
         31:6d:32:78:d5:42:01:d4:b1:eb:94:9c:33:72:48:78:f9:4d:
         56:a6:1d:75:1d:e1:05:77:47:5a:af:28:55:99:55:a9:fc:ff:
         1b:c6:3a:32:71:d2:8f:ab:b4:4d:be:65:5b:3e:49:1f:73:16:
         a9:1c:24:76:01:f6:a2:63:80:b3:f1:cb:c4:cf:f9:3d:5c:25:
         a3:b4:55:51:26:6a:3a:58:9b:a3:f7:68:f0:76:06:4f:e4:45:
         7d:bf:5c:dd:14:2c:67:9c:c6:b2:04:10:aa:20:93:63:5c:6d:
         b9:7d:9f:60:ba:57:64:d8:02:bd:83:a7:4d:05:76:1c:77:94:
         aa:c8:91:3c:de:c6:85:14:5b:90:ff:4e:41:81:f6:15:56:7f:
         4e:a7:d0:63:1a:8a:77:d1:c0:28:4f:7f:f0:b9:21:5e:29:cf:
         c4:02:7c:37:fe:d1:8f:99:04:8e:9e:83:f2:9a:27:b9:3b:e4:
         35:6e:79:d6:f9:ad:e3:6a:e9:9e:66:e6:e0:06:0a:a3:c6:86:
         a2:95:23:13:84:83:ca:d3:32:c3:fb:9a:ff:6d:84:ae:e1:6c:
         e0:8c:6d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:53 2026 by rpki-client