Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
File:                     SUICsDHp9CdkMVegbvqkwHDH8-0.mft (raw, json)
Hash identifier:          FLN3HGv3O2dqIS4XaDswRrk17+rrqxngogdzRyFHDVA=
Subject key identifier:   2B:78:A0:B2:26:CF:B2:7B:3B:32:4F:C5:CD:B7:E2:59:B3:68:40:01
Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED
Certificate issuer:       /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
Certificate serial:       0572
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
Manifest number:          054D
Signing time:             Sun 01 Mar 2026 00:07:33 +0000
Manifest this update:     Sun 01 Mar 2026 00:07:32 +0000
Manifest next update:     Sun 08 Mar 2026 00:07:32 +0000
Files and hashes:         1: SUICsDHp9CdkMVegbvqkwHDH8-0.crl (hash: 2p8tBIBl74u9ckksn3y/hUAYgMY/maZhTz0HwYndygM=)
                          2: 25E05BFAE59911F08BE09E95496F56BC.roa (hash: 2U1GEFtQb6N5UWQCPZfAqkeRTmL/nMptsXy7c4HqcW0=)
                          3: 6E6FEF28DC1311F0BA8FDA195F6F56BC.roa (hash: mo1wOSg3aRPO3RbCWNG9vySpJfn0iy8HAMqJ5Ud1CP8=)
                          4: 9F890910DA3C11F088DF33818DD3641D.roa (hash: xzSi1UuzNWpD6HyPJQ8fyYnG2jejbsfTjsT5VO2sPn0=)
                          5: C32D1F4A13A011F09B8EF66AC4F9AE02.roa (hash: uvWCOvomLN/7hlVYLp/jcmXt9zO2kyVBg9I1lGQNm1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl
                          rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1394 (0x572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
        Validity
            Not Before: Mar  1 00:07:32 2026 GMT
            Not After : Mar  8 00:07:32 2026 GMT
        Subject: CN=69a38345-2fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ac:63:ab:d5:d7:38:9e:39:70:74:c6:16:1b:
                    cc:23:3e:04:7b:c3:28:d2:b6:2c:5c:50:ed:49:ab:
                    34:be:c0:56:0a:ae:0e:20:c9:6a:c4:7c:96:85:e4:
                    41:a2:9e:b6:af:a7:b4:ca:ee:55:3e:3e:f4:3b:71:
                    74:44:94:2f:aa:67:b9:17:8f:37:d4:d7:e0:2b:f7:
                    33:17:9c:f0:47:52:16:45:15:a5:0a:c2:1b:05:60:
                    d7:6c:f6:8c:91:bf:2f:a9:03:38:35:d2:7c:46:49:
                    71:d4:53:dc:4c:cc:e2:69:7f:42:c1:57:b8:fe:55:
                    77:c4:68:44:af:6a:c8:43:c9:1c:28:b5:e7:6c:0d:
                    37:83:dd:91:a8:f5:d3:d4:dd:fc:cc:13:64:9d:80:
                    49:5f:fe:63:00:c1:a3:9d:bf:26:7a:22:7b:ae:52:
                    7c:b3:ed:ea:ce:16:92:7a:27:2c:f0:ae:24:df:ca:
                    8d:09:08:fa:bb:3f:4c:68:31:75:03:09:73:0b:fd:
                    cd:11:ae:19:ff:81:da:03:14:1b:8a:74:db:24:07:
                    3d:93:46:b6:ed:02:f1:5b:e5:45:01:5e:6e:f5:ef:
                    6a:12:a5:2c:01:24:18:e1:20:a8:2b:a8:30:f2:06:
                    d3:d6:c0:86:bb:9c:76:6c:f1:52:8b:58:d4:74:c1:
                    6a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:78:A0:B2:26:CF:B2:7B:3B:32:4F:C5:CD:B7:E2:59:B3:68:40:01
            X509v3 Authority Key Identifier:
                keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d0:2a:10:06:8b:11:89:d0:f7:9f:f9:ef:0d:81:1c:37:2a:
         95:bb:fd:3a:ec:a9:f7:59:f4:00:ff:18:68:70:65:b7:bc:f2:
         ee:1e:9e:3c:00:14:38:f6:82:29:21:ab:a3:23:a2:15:6b:89:
         79:db:d8:5f:5a:48:05:e1:06:4b:e4:6d:85:89:94:1c:36:19:
         2b:b0:d3:91:d5:b3:08:3d:8a:ca:06:33:b0:76:63:52:6c:59:
         d9:b1:30:37:91:1c:be:31:40:94:35:a9:45:16:c5:16:27:0b:
         9d:84:95:71:4c:5e:f7:e6:3b:8c:d4:66:de:28:9c:14:b7:93:
         bf:e3:3f:90:81:4a:c8:bf:d7:e1:50:42:3e:0f:24:e3:52:bc:
         1c:58:5c:bd:98:88:38:ff:d7:37:21:68:75:ab:86:09:5a:69:
         d2:66:95:1a:16:f3:0f:80:53:a4:02:6d:26:cf:cb:4c:de:00:
         ef:d9:b1:df:ff:1a:71:02:d3:82:4a:a5:eb:a6:58:6b:f7:7e:
         15:12:e0:d5:a1:17:54:7d:d8:cf:9f:08:47:f5:49:a4:b0:2a:
         6a:69:57:23:a1:2a:27:f7:46:3f:bc:76:3c:18:43:a7:43:e4:
         ef:5a:3f:69:77:0f:71:a9:10:b7:09:fd:06:da:ed:93:b9:98:
         65:9e:61:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:39 2026 by rpki-client