Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
File:                     4z23k7vv5Gy8912zTnCUJ6cu8PM.mft (raw, json)
Hash identifier:          88pBQwq4lcf7LRlrGs08ra49DKpX6cSqVp2Do++pvfU=
Subject key identifier:   1E:EF:F4:ED:93:C5:61:57:41:4C:D1:2C:5E:CA:B6:2C:30:8E:EA:0D
Authority key identifier: E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3
Certificate issuer:       /CN=A91C7F6A/serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3
Certificate serial:       0260
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
Manifest number:          0259
Signing time:             Sun 01 Mar 2026 23:35:45 +0000
Manifest this update:     Sun 01 Mar 2026 23:35:44 +0000
Manifest next update:     Sun 08 Mar 2026 23:35:44 +0000
Files and hashes:         1: 4z23k7vv5Gy8912zTnCUJ6cu8PM.crl (hash: vGHAYrOaJJusMBabRE/htn2SvHx9v+r3GnrRmmMhlu0=)
                          2: 81D5DEE47F5D11EDB4309B54C4F9AE02.roa (hash: mGLrUqchoRUjle/BuvUxiJtXqbGGvFSdYgwJHN85mfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl
                          rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7F6A, serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3
        Validity
            Not Before: Mar  1 23:35:44 2026 GMT
            Not After : Mar  8 23:35:44 2026 GMT
        Subject: CN=69a4cd51-c686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0e:ab:20:da:d9:1f:08:02:81:f0:a9:75:9c:
                    9c:20:b8:29:a8:0a:fa:5e:02:d4:2f:a2:97:47:fc:
                    2d:79:b5:ff:6b:2d:4c:cc:0b:bd:e4:8c:2b:30:6f:
                    d6:1c:20:5f:e7:d9:ae:c9:71:ec:25:2a:a2:da:31:
                    fa:5a:0f:04:fe:87:85:41:a8:61:2f:ed:ad:94:26:
                    fc:1c:0f:2d:af:b1:e6:0d:b1:33:43:5b:ee:2e:9f:
                    45:13:98:37:e9:9f:9b:86:f1:d7:08:c5:2e:bc:40:
                    02:88:9c:7c:13:20:f2:55:47:f5:d9:77:16:f6:cf:
                    83:bc:22:1d:a3:42:ff:2d:6b:e0:30:a6:df:eb:78:
                    ee:08:23:09:43:5e:6b:fc:14:7b:1e:2c:f3:42:2b:
                    b3:32:40:74:a8:a7:69:92:2c:27:77:8b:52:11:ab:
                    39:d1:e0:85:60:b9:b3:6d:0e:e2:95:2d:ec:4f:3b:
                    7f:06:53:88:83:a7:a6:fb:a8:b0:da:e2:d2:48:f7:
                    b8:af:93:68:9c:9f:75:11:8d:72:54:bb:a5:51:24:
                    58:37:cd:96:ae:aa:7e:01:c5:a7:aa:d0:4a:f2:e7:
                    1f:35:1e:d2:56:70:dc:4d:93:36:93:72:da:ac:d1:
                    f3:1c:53:fe:ce:2b:b0:cb:7e:8b:d0:9e:8a:78:cf:
                    dc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EF:F4:ED:93:C5:61:57:41:4C:D1:2C:5E:CA:B6:2C:30:8E:EA:0D
            X509v3 Authority Key Identifier:
                keyid:E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:33:f0:fd:f6:7e:c4:d9:e5:91:86:da:54:de:2f:6c:f6:b5:
         67:cd:09:13:a4:6c:ed:88:5d:e4:e7:5f:87:8b:8b:02:fc:d7:
         8b:ed:63:f4:47:36:a5:b7:f7:3a:4d:b3:b9:32:81:17:4b:92:
         f3:d3:c5:9a:61:d0:b4:e0:10:56:da:4c:ec:6f:ad:8f:1a:d3:
         ca:7e:eb:d4:2e:ba:8f:3e:f0:8c:a0:51:4f:bd:c4:cb:01:25:
         78:ab:06:9a:d0:ff:72:d4:3c:aa:a1:ac:13:ed:42:1d:e7:32:
         32:65:18:ba:5c:b1:97:54:4e:e2:f2:05:0a:37:30:cc:94:59:
         26:47:3c:bc:14:f8:f5:37:71:96:06:f4:34:b4:43:18:a4:90:
         ce:0b:23:50:46:e8:7b:21:92:ed:97:32:e4:2e:0a:5e:24:07:
         ee:d2:56:68:71:d9:ad:e8:64:86:59:9f:e9:d7:69:ae:28:31:
         e1:9c:5b:ca:6c:5d:eb:6d:a6:16:0a:ca:92:56:9b:81:14:61:
         24:8f:b1:f4:4a:cb:b3:54:ae:7e:b8:f2:e8:e8:35:7b:7b:c0:
         e7:61:08:a5:c7:98:66:2c:0b:90:81:b9:f4:02:fc:1a:65:5b:
         2e:6b:c5:ad:d2:da:43:0d:ae:01:a7:b5:2f:9c:86:6c:66:2f:
         ae:52:f4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:04 2026 by rpki-client