Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
File:                     XMqY-HjJJALi8QTiuL2rgZCx-qI.mft (raw, json)
Hash identifier:          Bd+0pJa6bNnJoiCgd2MX/FTwSkl2YjVFQMGlkrToN68=
Subject key identifier:   58:13:31:BE:74:F5:A5:FD:27:F9:E3:73:EE:9B:B2:25:DF:18:74:BD
Authority key identifier: 5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2
Certificate issuer:       /CN=A91BCFC5/serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2
Certificate serial:       3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
Manifest number:          37
Signing time:             Sun 01 Mar 2026 09:58:21 +0000
Manifest this update:     Sun 01 Mar 2026 09:58:20 +0000
Manifest next update:     Sun 08 Mar 2026 09:58:20 +0000
Files and hashes:         1: XMqY-HjJJALi8QTiuL2rgZCx-qI.crl (hash: q/A9/KporDrGffZ2+5aBRtywg052y3bQOX/9xzgdSdY=)
                          2: 20928024C9BA11F09F21BD27C4F9AE02.roa (hash: wK4ZUFHP7svDczy0YCkmOX/r2Vqw7guLhrYQg+0Ja2I=)
                          3: 7407D8E2C5AC11F0AF286222C4F9AE02.roa (hash: vM2NU/PkWzUmY2ujZBzsjC1mzDOV/eoIUaPwXnbjazI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl
                          rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCFC5, serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2
        Validity
            Not Before: Mar  1 09:58:20 2026 GMT
            Not After : Mar  8 09:58:20 2026 GMT
        Subject: CN=69a40dbc-83ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ac:aa:42:40:d1:f0:07:52:f2:b9:f8:b4:7f:
                    ee:93:11:ea:23:71:15:53:62:50:bc:ad:ab:2e:de:
                    20:e2:f1:d0:d9:59:e9:29:e1:d7:4e:02:2f:97:97:
                    64:57:8a:82:15:1e:bd:d5:1a:94:0c:bf:bd:5c:11:
                    ec:5d:c3:c6:69:9e:8e:db:a2:d3:ed:39:26:7c:e8:
                    7e:0c:cd:3a:1b:45:f1:ea:93:63:17:37:bc:11:0b:
                    7d:41:38:c7:6b:ba:1c:15:8e:28:73:e3:66:6e:6d:
                    88:2e:b9:46:86:7f:fa:26:e4:27:a0:81:a2:b3:9c:
                    2d:21:b9:fe:46:58:28:6f:32:17:92:0c:60:c6:57:
                    62:65:87:74:6a:b8:3f:b1:f1:7a:ce:7b:ae:75:10:
                    da:d1:be:5a:8b:1a:bf:8d:a5:8b:21:5e:92:21:57:
                    f6:1b:b9:62:63:a7:42:08:e8:0a:e6:2d:83:5d:48:
                    8e:89:a5:53:62:50:59:3b:b9:ba:34:33:ee:c1:48:
                    ee:6f:f6:c8:30:d4:e0:42:e2:94:e6:53:54:7f:94:
                    8c:3b:d3:4d:6c:ed:94:a1:e8:6f:cd:b8:3a:4c:79:
                    e3:6e:ed:b4:0e:64:1d:10:10:4c:14:1b:1e:d4:de:
                    22:3a:f1:69:ef:ec:6d:4c:3f:ff:75:8a:27:d2:15:
                    18:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:13:31:BE:74:F5:A5:FD:27:F9:E3:73:EE:9B:B2:25:DF:18:74:BD
            X509v3 Authority Key Identifier:
                keyid:5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:05:22:ec:1f:d5:d8:b8:4e:b4:ae:4d:54:ee:63:77:2d:92:
         0c:f7:eb:b2:be:c1:96:0c:6b:4b:1a:64:39:50:e7:3d:37:e1:
         4a:8b:e8:54:35:f8:4f:82:0a:ed:1b:8e:46:77:c7:14:26:0b:
         07:ab:2c:6e:9e:2b:a0:26:4b:cc:1b:1c:b2:d3:f5:be:ea:ac:
         d2:dc:60:e7:40:86:0b:ed:f1:90:c6:f5:82:72:c0:25:84:27:
         7c:07:72:75:18:a0:8f:7d:f2:ce:e1:b3:c3:a8:f8:99:fa:cb:
         dc:c3:0f:7a:73:2a:57:3e:30:86:bd:f5:60:25:68:f7:3c:19:
         b1:87:2c:32:2c:d9:70:7f:67:4e:38:1d:5e:b1:82:90:2c:f0:
         40:08:29:47:48:2d:27:2b:7e:e4:ab:2d:91:2c:2f:38:bb:c6:
         96:c9:d4:94:01:1d:51:b5:b5:b6:e2:c8:12:ff:91:ba:db:cc:
         bd:68:cc:55:b4:3c:c1:31:53:78:0f:5e:e4:e3:de:e2:a3:7e:
         a3:9e:fd:a2:39:2b:f7:ff:4e:6b:bb:ee:7e:01:fa:73:28:7e:
         53:0b:05:7d:08:0c:2c:58:bd:8f:6a:1d:5e:68:0f:28:35:be:
         7b:e6:07:5b:b5:45:46:be:91:af:ff:73:be:94:36:88:5f:40:
         90:95:66:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:40:00 2026 by rpki-client