Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft
File:                     s0it0HgdstIdxNM510-HoDk4ycc.mft (raw, json)
Hash identifier:          e38SNgjQjQCdup8LfH9GAImQGYK63kxQ1j7C/Fi4T/0=
Subject key identifier:   A4:35:10:7B:AB:44:F8:E8:CB:08:46:E6:C2:EB:32:F6:AE:DD:E3:E7
Authority key identifier: B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7
Certificate issuer:       /CN=A91C7C44/serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7
Certificate serial:       0277
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft
Manifest number:          0270
Signing time:             Sun 01 Mar 2026 02:37:44 +0000
Manifest this update:     Sun 01 Mar 2026 02:37:44 +0000
Manifest next update:     Sun 08 Mar 2026 02:37:44 +0000
Files and hashes:         1: s0it0HgdstIdxNM510-HoDk4ycc.crl (hash: oZCsJ9FihmLJQhkPdEE8ty9sNEQU33bmVLZdN/h+s9M=)
                          2: 945D844463E311EDAD1B0B3FC4F9AE02.roa (hash: ZpY5uVJsDRZvPgiSn1Kdljo0flynJ5D6xaJCE0zJJng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl
                          rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 631 (0x277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7C44, serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7
        Validity
            Not Before: Mar  1 02:37:44 2026 GMT
            Not After : Mar  8 02:37:44 2026 GMT
        Subject: CN=69a3a678-0b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5e:ca:a4:b7:04:bc:6a:d7:7e:40:75:9b:fc:
                    33:1c:ca:66:4b:f2:e4:8d:a2:a4:c4:f5:04:f7:e5:
                    bf:a5:08:16:9c:c7:cf:81:0c:1f:1f:90:d7:57:80:
                    ea:08:da:c3:ee:a0:f9:51:83:d8:74:3c:f0:25:91:
                    48:b3:65:be:5f:15:24:b4:0b:63:7e:b5:40:41:26:
                    23:52:97:c4:06:dd:9e:12:e0:72:83:b4:b2:e1:08:
                    6c:e1:8b:b5:2d:6b:bf:06:fc:72:25:4c:11:75:3d:
                    f5:8e:db:84:cf:8e:48:66:46:53:c4:a2:aa:82:0e:
                    ef:8c:24:9e:de:aa:e1:cb:79:ec:fd:2a:d3:e0:be:
                    78:7f:da:cc:a6:8f:43:01:ba:19:23:4d:e6:f2:a2:
                    99:c3:e4:b0:a0:c8:8e:5f:c6:55:a4:11:96:ee:be:
                    46:10:73:0d:60:d0:1d:ed:93:3b:6c:4f:2d:fd:3f:
                    80:61:d4:d3:aa:70:ca:27:0b:d4:b0:ed:fa:6b:da:
                    8c:65:85:8d:fe:bb:10:46:70:d7:c7:f9:b0:59:e4:
                    90:6f:2b:e0:22:de:da:78:1c:06:56:67:63:7c:64:
                    6e:9b:a9:a4:f4:28:16:4a:1a:ca:a2:b4:51:f1:1b:
                    6a:6d:b0:f9:11:b3:ea:e1:56:40:01:ca:8b:68:33:
                    ca:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:35:10:7B:AB:44:F8:E8:CB:08:46:E6:C2:EB:32:F6:AE:DD:E3:E7
            X509v3 Authority Key Identifier:
                keyid:B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:77:f2:55:0b:38:e4:cd:76:21:c4:69:1e:26:1b:c5:64:e1:
         f6:fd:d0:86:05:e4:6d:ea:71:e2:56:f8:22:c6:d9:c4:69:23:
         c1:c5:dc:3f:93:db:b4:f4:89:87:e0:22:60:14:1f:af:ec:26:
         57:4b:15:f5:58:7b:fa:2d:f6:91:28:2a:6d:cd:7f:ce:40:0b:
         3a:aa:e3:d8:08:b0:06:3e:98:20:bd:d4:84:fa:0d:e3:69:14:
         f3:45:ab:f6:30:a6:c2:b9:f9:dc:8a:3f:99:f8:65:c5:16:7e:
         8a:7b:ea:0a:10:71:6c:6f:6c:14:65:1e:2f:c0:15:8f:4d:57:
         57:11:cc:8f:af:ac:6b:3b:2a:70:04:e2:da:3f:1a:75:87:8b:
         7c:c9:66:70:c5:cc:97:cc:a9:25:0f:bf:f3:75:ea:5b:12:9d:
         6c:8f:06:e9:8f:ec:54:a2:6d:89:63:4a:2a:a7:05:1f:7d:55:
         71:86:f7:4d:ee:fd:ef:1f:4f:c8:7d:12:9d:93:43:c7:a0:99:
         55:34:3f:25:da:a0:61:56:a5:52:9e:01:9e:cb:a3:4a:d2:e2:
         64:38:1a:04:be:6b:dc:8d:66:68:c4:d7:fe:aa:35:46:3d:90:
         ff:d3:b5:c9:95:86:0c:44:b2:68:0c:74:06:f5:29:5a:13:2f:
         25:c0:4d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:57:05 2026 by rpki-client