Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
File:                     k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json)
Hash identifier:          KauewjLHdQI0ZtclwXF6NdVMTY5dvwqkqm3PosFR5rI=
Subject key identifier:   94:FC:B4:9F:43:49:1A:07:6A:0D:D7:AB:70:0A:2F:14:21:C2:FF:40
Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92
Certificate issuer:       /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
Certificate serial:       14F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
Manifest number:          14D0
Signing time:             Mon 02 Mar 2026 00:58:36 +0000
Manifest this update:     Mon 02 Mar 2026 00:58:34 +0000
Manifest next update:     Mon 09 Mar 2026 00:58:34 +0000
Files and hashes:         1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: jwYh2bK2JC5qmVXLD0lzONDZdXueJzflklTdqMotO8Y=)
                          2: B7F93F86E33F11EB9832A354C4F9AE02.roa (hash: nHdgdCvKY1Y9twOWSJSJeHzjweCUK60NzNjzUvm1MXs=)
                          3: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: +whKNCKBWu/fW8ZOLuLgPSDmcXDG1KA00Y9l8DL/PP0=)
                          4: B6DA2BD8E33F11EB9832A354C4F9AE02.roa (hash: Hr7OpNKmlMWAc1DIpsosFxnOhgjPdStDv79SYsuEpFU=)
                          5: 3A6D0CE4FF3E11F08F73BB4E4C6F56BC.roa (hash: AG7+A5Yb2KDtnoNzA36Acb2KghCB+Rzmi98/tCvvjZ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl
                          rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:58:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5367 (0x14f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
        Validity
            Not Before: Mar  2 00:58:34 2026 GMT
            Not After : Mar  9 00:58:34 2026 GMT
        Subject: CN=69a4e0bb-8a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:34:a7:e8:a8:2f:85:af:a3:01:c0:15:95:47:
                    0d:39:8a:ee:9a:2f:47:de:34:00:bc:ea:17:bf:03:
                    93:4c:73:3d:d4:d1:89:51:ba:b5:61:07:17:d6:e0:
                    76:49:8f:d3:1f:56:fb:93:64:85:28:38:f4:14:5f:
                    f4:0b:31:55:25:24:88:45:98:7a:5b:fa:6b:92:96:
                    55:c9:c3:bb:35:eb:70:7b:11:1b:b3:d3:cc:19:b8:
                    10:9f:cd:23:2f:17:fa:63:b5:a4:79:8c:2e:82:30:
                    6b:b3:37:2e:08:ba:35:8c:9c:35:4f:47:2b:6a:ab:
                    dc:48:db:00:d2:d6:b3:b5:b6:03:93:9d:18:2c:7b:
                    4b:4e:44:5f:25:39:3a:c6:9e:0a:89:d0:49:95:d4:
                    68:b2:9a:a3:b0:a3:16:6e:5f:49:f3:75:6e:d0:7a:
                    65:df:cf:35:f8:0f:42:07:d0:81:16:ca:35:d1:3e:
                    54:ef:a4:ff:73:1b:70:0a:e4:a5:da:9c:71:d7:ac:
                    04:da:39:4b:d9:f6:bf:1b:0f:ff:fa:bf:34:2a:21:
                    6b:31:1e:39:bf:29:59:63:b7:b1:58:b0:74:7c:50:
                    a5:49:29:2c:6f:fd:92:e9:90:f8:33:54:fb:28:a9:
                    d9:7d:92:ca:ab:9c:16:d3:d0:06:ce:44:e8:48:51:
                    60:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FC:B4:9F:43:49:1A:07:6A:0D:D7:AB:70:0A:2F:14:21:C2:FF:40
            X509v3 Authority Key Identifier:
                keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:7f:93:93:48:c0:6c:cb:93:ac:3e:a0:91:7c:10:05:51:d1:
         b1:6e:5e:25:04:b4:73:a4:48:70:6b:13:44:9c:29:a5:a2:3f:
         60:37:97:8c:6f:5e:06:ba:8e:aa:f5:e8:4b:70:e7:46:48:a2:
         b5:81:36:f4:8c:22:b8:a5:eb:7d:1a:63:8c:82:61:54:11:1c:
         b8:41:77:20:f9:53:55:79:75:4d:42:d0:5d:77:19:a1:a4:5d:
         4f:ad:fa:23:7f:d6:ac:f1:85:6e:5f:34:ff:eb:e1:b5:f0:d9:
         64:b1:da:6d:5c:58:ab:2f:a3:ad:73:47:75:f2:0b:d5:51:7b:
         11:d5:93:cc:e6:aa:ac:5a:1a:00:63:21:04:39:e7:4c:33:81:
         07:9b:e7:ec:78:fa:1f:27:f4:fc:f0:73:b1:04:03:cb:40:da:
         24:03:b1:d4:29:55:ee:04:e4:b9:83:76:e3:3e:c8:ed:61:a8:
         cb:8d:58:e3:18:40:be:b2:40:f3:ba:76:27:26:f7:ad:36:83:
         49:ec:1e:38:4e:16:d4:86:ce:e0:f0:3f:ad:11:7d:93:a4:ca:
         20:9e:d1:f4:f4:b1:c0:09:98:43:e4:8c:e3:8e:a5:cf:c0:b9:
         d4:d4:2b:8b:5d:d7:73:fa:c8:f0:a5:00:b0:76:c8:e9:46:31:
         84:c1:bd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:28 2026 by rpki-client