Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft
File:                     x5ESx8WsNlgyIdH5RnUZbCE26r4.mft (raw, json)
Hash identifier:          udCINMJK7prBUe7d/YTfYHEsXMEGfeCaxNyg5Qoztxk=
Subject key identifier:   D9:20:DD:DC:A4:B7:53:F7:76:23:23:CD:80:C5:B3:BA:42:4F:7D:EA
Authority key identifier: C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE
Certificate issuer:       /CN=A91C6BB9/serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE
Certificate serial:       07C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft
Manifest number:          07B9
Signing time:             Mon 02 Mar 2026 00:48:06 +0000
Manifest this update:     Mon 02 Mar 2026 00:48:03 +0000
Manifest next update:     Mon 09 Mar 2026 00:48:03 +0000
Files and hashes:         1: x5ESx8WsNlgyIdH5RnUZbCE26r4.crl (hash: vbIKE3ZxBeCc8Ja5AImvzRzB2w3N6gbGobkn9cJxEtU=)
                          2: 2E7B4F0CD45811EF908AFE44C4F9AE02.roa (hash: Nqf4hrafumWk1QomT3Eyu5REn5mnaQ8v2Ft+DiTAP7Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl
                          rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1991 (0x7c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6BB9, serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE
        Validity
            Not Before: Mar  2 00:48:03 2026 GMT
            Not After : Mar  9 00:48:03 2026 GMT
        Subject: CN=69a4de45-226e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:4a:8c:48:6b:5d:cf:2d:19:f5:42:95:fd:
                    96:d2:42:2b:a7:85:04:e0:45:a9:59:9f:4f:e4:2e:
                    1c:a2:3f:65:ca:1e:be:14:e4:4d:d2:87:9e:30:6e:
                    e6:1e:f0:e5:2b:82:24:ab:c6:16:12:9f:05:d8:9a:
                    90:13:01:cf:52:e1:c6:fc:f5:42:10:6b:fe:7b:08:
                    ed:3f:3a:eb:dc:54:88:8a:01:86:7a:d7:a4:d2:49:
                    1d:c8:34:53:04:72:d7:72:fc:17:5b:9b:04:f0:4f:
                    23:57:b6:87:99:e0:60:0d:8a:cd:7b:d5:6e:dd:fe:
                    66:6a:64:f9:75:32:ef:e3:cd:d2:21:8b:14:64:45:
                    53:7e:0a:30:65:5e:37:8d:0e:ec:0e:c3:65:ea:6d:
                    d7:74:64:43:38:da:fc:5b:7c:44:ab:7c:94:0c:c4:
                    58:68:cb:17:05:34:0d:46:ff:08:28:04:aa:90:dc:
                    94:f7:0b:21:7d:a2:b9:55:5a:a2:b0:76:79:96:6a:
                    f1:dc:fe:19:4d:92:04:f5:4b:59:b5:39:21:5f:78:
                    51:b5:55:52:a6:a1:d9:13:d0:4f:70:2b:e6:f3:80:
                    e5:18:00:40:98:1f:cd:10:61:c8:87:40:fb:53:4e:
                    95:44:07:32:e5:f9:2b:ca:6c:3c:43:c0:72:8c:8b:
                    e5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:20:DD:DC:A4:B7:53:F7:76:23:23:CD:80:C5:B3:BA:42:4F:7D:EA
            X509v3 Authority Key Identifier:
                keyid:C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e9:ad:00:c3:a6:79:46:5c:4d:c0:6d:97:8f:70:ec:18:91:
         57:3e:99:ec:e4:be:de:15:23:eb:46:bc:fc:9a:62:d5:6f:3e:
         6c:ea:7b:fb:92:da:a2:09:2a:fc:18:b6:8c:b2:99:01:db:c3:
         e0:8a:e2:58:3d:14:77:8d:ff:12:b5:b9:f1:94:a1:a3:47:6d:
         83:38:db:2f:c5:12:b9:2c:85:9b:97:6e:82:bb:9e:ca:c0:98:
         94:be:99:ff:4c:7c:0e:c0:55:5f:07:98:11:6c:1c:db:1a:31:
         00:12:ca:ed:6f:2d:f0:c9:a5:d8:41:0c:70:d5:ef:d2:7c:bc:
         e7:f2:d1:60:dd:84:13:f9:db:cf:ef:83:e5:b0:d4:7b:9a:f4:
         7b:39:61:85:ef:62:f3:a1:ce:15:4d:b9:7e:b4:4a:d9:58:cf:
         de:95:c1:0c:09:29:d4:19:42:77:29:b1:ce:42:da:d3:9d:83:
         a8:3d:96:60:9a:65:2c:65:08:3a:23:c2:bc:5d:9c:b9:9a:80:
         de:33:b0:97:79:03:23:73:ed:c0:f9:36:c9:8c:67:11:a3:04:
         6e:3d:e5:7b:4d:ad:6c:b2:fa:c4:91:66:2d:1b:5a:bd:2c:4d:
         48:15:45:3b:ab:96:e3:0b:31:9e:df:4e:59:76:9d:34:4b:74:
         27:12:e3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:00:05 2026 by rpki-client