Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
File:                     t6pTc4MhTWSOYzvMQg071oYWeP0.mft (raw, json)
Hash identifier:          6tqazTCzco46t3t0Jlpwc38p4/WdTF6UGP/P4NgFTLE=
Subject key identifier:   CD:3A:D6:14:8B:4A:DF:9C:7A:94:30:4A:29:68:F5:FE:10:FE:8D:81
Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD
Certificate issuer:       /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
Certificate serial:       1BC3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
Manifest number:          1B6D
Signing time:             Mon 02 Mar 2026 01:11:09 +0000
Manifest this update:     Mon 02 Mar 2026 01:11:08 +0000
Manifest next update:     Mon 09 Mar 2026 01:11:08 +0000
Files and hashes:         1: t6pTc4MhTWSOYzvMQg071oYWeP0.crl (hash: POwsrmewjO23/FEpICT2S02q41cfTXbiX1/vCSx1tEo=)
                          2: BF6CF7EE1D1811E89AF8344EC4F9AE02.roa (hash: ZaZYPfA17ML/f/J4P82QVyDEPcDzxxZaNFjB0O9tVyE=)
                          3: AF7700B2B52A11EAB9426C7DC4F9AE02.roa (hash: AD+/rm2MmNUok2HarnjytNgvmBO5YkdTWhvT8ie3l4U=)
                          4: 2504266C1D1A11E8BDAD4F54C4F9AE02.roa (hash: W8hlVsC5I0VPPg2kjR6TpTtecD0WvUvNvC2e5sJ/hIQ=)
                          5: B35788BC2E6111E7B9FA6971C4F9AE02.roa (hash: 1NxyYZi8z+4zSdOTPHU5FWVo8GDquYcWL1OwjVPiKNg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl
                          rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7107 (0x1bc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3083, serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
        Validity
            Not Before: Mar  2 01:11:08 2026 GMT
            Not After : Mar  9 01:11:08 2026 GMT
        Subject: CN=69a4e3ad-cfe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ea:e4:64:73:a4:97:39:05:dd:84:11:1e:d4:
                    48:be:80:62:0a:00:04:0e:28:55:5c:c4:3d:b5:8c:
                    fb:45:15:f5:3b:f6:08:36:ca:7f:28:5a:8f:66:81:
                    b1:be:80:f7:4c:fe:9e:5d:3d:d4:87:86:bd:b3:88:
                    27:1c:25:49:6e:85:97:73:01:b6:3f:b8:f4:99:26:
                    d2:6b:60:b4:cf:1e:82:e5:5a:fe:31:f3:af:29:c7:
                    bc:b7:1c:73:d7:0e:d0:42:34:83:7e:43:2e:0f:20:
                    2d:08:36:c0:77:2a:d7:92:91:b9:ac:c1:f0:36:bc:
                    b1:2d:eb:61:ad:00:a6:65:15:f9:59:3e:9c:6f:01:
                    90:e3:8c:ee:68:4a:56:13:02:ea:75:d6:13:2b:17:
                    d4:ec:1b:78:eb:af:46:b6:d5:e9:5a:51:dc:2d:33:
                    bf:52:4a:27:fb:2d:d3:1e:8f:0e:76:25:db:1f:b8:
                    3b:ad:06:43:31:47:1a:4c:88:f7:6c:9f:e0:c7:05:
                    39:20:66:34:66:9c:21:89:59:3f:61:d9:82:1c:e4:
                    55:9f:96:df:5a:7a:ab:a5:6d:ef:ac:0f:1d:c8:4a:
                    0d:22:15:92:c2:ee:74:7c:24:1f:e3:a3:78:2f:71:
                    e1:35:fe:ff:12:99:4c:84:aa:6c:8b:c6:5e:95:42:
                    e7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3A:D6:14:8B:4A:DF:9C:7A:94:30:4A:29:68:F5:FE:10:FE:8D:81
            X509v3 Authority Key Identifier:
                keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:51:c7:40:f6:8d:63:c6:97:b7:a2:9e:6f:8b:1a:58:4b:b3:
         aa:ce:98:c5:ad:f0:36:df:a1:7f:9b:43:e6:54:d4:1f:86:24:
         02:1f:ee:c7:b0:af:40:99:9a:fc:22:4e:fc:e1:2b:c6:28:8c:
         65:44:e8:6e:81:3e:cf:20:75:0d:5e:f1:89:b7:a3:05:c0:17:
         58:62:75:08:f9:c2:42:51:8f:2d:6e:96:ed:23:af:41:64:11:
         80:a5:b4:1e:4a:09:18:0b:9d:cc:a5:1e:18:c8:1d:ad:90:e6:
         5c:47:48:60:0d:09:1b:d4:e7:34:6a:02:76:eb:5b:b1:6a:f5:
         e7:1b:f4:77:0d:7a:b5:9f:da:ad:58:26:06:03:c3:89:08:e2:
         ca:f9:69:62:e2:d7:69:a4:5d:cd:df:54:79:22:56:d2:44:e7:
         6f:3e:64:47:00:70:70:c8:a2:cf:11:46:4f:df:d4:34:36:52:
         90:f6:2f:e4:44:0a:b8:14:e1:22:b0:35:f5:03:68:f9:f3:65:
         c5:0d:76:01:d7:04:db:30:67:c0:06:62:e4:0d:f0:d2:99:33:
         eb:82:6e:96:d2:82:24:0b:15:67:9a:6d:09:8b:66:0b:a1:45:
         06:f8:56:c9:63:eb:3b:a8:c0:db:42:3a:ac:ca:54:de:0c:27:
         df:87:e0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:17:47 2026 by rpki-client