Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
File:                     pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft (raw, json)
Hash identifier:          kO6xZ062x70auxWMNKJSbf4qdQJ1y9Y5BSjeSNXL4mU=
Subject key identifier:   0C:DC:E6:63:C0:98:62:D4:D0:CD:C7:99:98:E8:49:11:1F:4E:38:B0
Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
Certificate issuer:       /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Certificate serial:       09BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
Manifest number:          139E
Signing time:             Mon 02 Mar 2026 00:06:16 +0000
Manifest this update:     Mon 02 Mar 2026 00:06:14 +0000
Manifest next update:     Mon 09 Mar 2026 00:06:14 +0000
Files and hashes:         1: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl (hash: WvSgjc36grCdn33abfP61WWqQSorFyjjzRK3Gm4OwVQ=)
                          2: 214232EC4FD311EF90027A63C4F9AE02.roa (hash: yMhZC4asbcFKaEcwYCiNsgA1feOljvXgQMxhyDbkjXs=)
                          3: F9E12AD89D0011F08C93B545C4F9AE02.roa (hash: sLhj2zyAg6egVDc0WrsXEOyJk+cLRHE/hif82VB3if4=)
                          4: 32751AAE67B811F0962F0730C4F9AE02.roa (hash: 5GgOEVTUj+luRWBl8T2htbl23XYiADuNdZgfk2fUYTQ=)
                          5: 2921D24E067C11ED882FC127C4F9AE02.roa (hash: fkiwxN+FDUMk1YJfttIFKif5qgzxiSgVetIrMWaLkc8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl
                          rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2494 (0x9be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
        Validity
            Not Before: Mar  2 00:06:14 2026 GMT
            Not After : Mar  9 00:06:14 2026 GMT
        Subject: CN=69a4d478-b80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:87:2c:47:2b:05:b8:cf:69:ee:24:66:ac:3c:
                    84:97:dc:33:d9:2d:99:b1:58:c7:36:85:8f:1d:af:
                    30:80:7a:15:fb:db:80:d4:d1:3a:1f:cb:28:d4:4c:
                    9e:7f:b6:ec:ef:cc:63:81:e9:71:4e:0d:ed:16:67:
                    ca:b7:6a:1c:2d:13:58:4a:cc:b1:76:d5:e4:04:53:
                    01:91:0b:7e:65:ad:ad:01:0b:92:be:b5:84:3b:f3:
                    7c:a5:80:22:4e:4e:a7:d7:91:04:7a:6f:e6:9b:4a:
                    cb:55:88:8b:87:6b:82:ce:c8:ae:9f:fc:a9:eb:a9:
                    26:d3:36:f9:e2:a9:7b:b4:e5:e5:d1:47:c0:0c:4e:
                    9e:38:96:b0:f3:1f:5d:de:5d:94:71:a9:8d:9f:5f:
                    71:e2:a3:f4:58:ac:ef:c5:a8:0b:07:b9:cb:99:3e:
                    8f:4d:b1:5d:49:8b:ef:17:08:ce:f7:c5:f6:dd:82:
                    67:80:3d:33:5c:2b:cb:47:56:03:e1:39:2b:ea:a2:
                    6c:18:3a:f9:84:0e:ab:7d:e9:41:02:01:9f:ba:3a:
                    7a:30:7d:1d:d7:98:73:4c:2b:70:61:2f:52:11:2f:
                    46:e4:a7:ac:db:8a:d2:fe:65:24:dc:7b:65:7b:33:
                    2c:d8:bf:ea:5e:0c:80:31:d2:c7:99:b2:a7:28:95:
                    c9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DC:E6:63:C0:98:62:D4:D0:CD:C7:99:98:E8:49:11:1F:4E:38:B0
            X509v3 Authority Key Identifier:
                keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:48:4c:9d:a5:31:78:ca:56:c5:77:b9:eb:02:78:a4:ea:5e:
         a4:3f:57:78:be:fe:b4:39:48:fc:99:a3:42:fd:f1:61:68:62:
         9a:09:82:db:ba:51:2b:9d:a6:fe:bd:c0:5d:25:44:ec:71:5e:
         44:64:ea:ae:8c:a6:5a:dc:b4:84:34:4a:ec:7c:7a:fe:46:94:
         89:7b:fa:5f:57:e8:df:e3:a3:30:d1:ea:be:6a:e3:0f:88:2e:
         da:47:f7:e0:75:a7:19:c5:36:67:45:c3:d9:3b:3f:0c:05:6c:
         46:e7:cf:31:cc:f2:d1:c2:63:c3:24:ac:5e:31:b3:91:79:f7:
         7e:f0:2f:ad:87:51:a6:30:1d:f4:de:a7:0b:e4:86:72:84:af:
         4c:a6:64:ac:42:c0:64:87:90:0f:5f:e9:04:b5:f7:d7:f5:ae:
         d8:32:54:4f:32:ce:9a:1f:aa:15:3c:6c:5f:7c:0c:4e:2a:05:
         fb:71:59:d3:40:a8:43:90:80:ca:fc:72:bc:e1:3d:f1:70:80:
         a0:8f:94:a2:9d:17:b7:21:d7:67:2e:d0:20:38:b5:e4:68:9e:
         e0:e7:33:3b:ad:09:0c:ba:41:90:fc:62:91:8b:74:4e:39:e4:
         2d:30:5a:78:de:51:4c:d2:19:e3:fd:ad:ef:20:49:b5:06:59:
         cd:e4:ff:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:28 2026 by rpki-client