Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
File:                     M1EvnGdsMJ4181WPA7muZBm_dBU.mft (raw, json)
Hash identifier:          yY/EcdEgfhIQtYfOEOGL7brkfuDuDLnUK0UaoGgQSGU=
Subject key identifier:   99:59:58:2F:43:AA:8C:2C:D0:F7:E4:0E:09:0B:C2:69:75:C0:DC:81
Authority key identifier: 33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15
Certificate issuer:       /CN=A91CB763/serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
Certificate serial:       0219
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
Manifest number:          0214
Signing time:             Sun 01 Mar 2026 23:59:44 +0000
Manifest this update:     Sun 01 Mar 2026 23:59:43 +0000
Manifest next update:     Sun 08 Mar 2026 23:59:43 +0000
Files and hashes:         1: M1EvnGdsMJ4181WPA7muZBm_dBU.crl (hash: BYvHZsu+dEx+eWoJV2kDssz2wmL+Y+TmTHv6bOpjAN0=)
                          2: 1FB8AA58E9AB11ED8B614C43C4F9AE02.roa (hash: RqxDx9bCRY+0s397irGG8bkIt+cY6kmLOparLyvTxmk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl
                          rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB763, serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
        Validity
            Not Before: Mar  1 23:59:43 2026 GMT
            Not After : Mar  8 23:59:43 2026 GMT
        Subject: CN=69a4d2f0-b1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1a:ac:16:eb:df:7c:40:65:be:6a:8c:d8:2b:
                    23:d0:c5:69:68:f0:a2:69:f6:6b:2a:04:96:52:e0:
                    f9:b4:10:b6:ee:9c:8c:5d:e0:ea:13:00:3b:2a:13:
                    ca:9b:10:04:85:03:35:da:fa:ee:9b:a8:56:ec:ad:
                    4c:a7:11:7b:6a:53:f3:cd:cc:ff:1e:53:5b:33:19:
                    e2:f9:55:7b:2c:fa:a6:86:9a:93:bc:51:5a:8a:1d:
                    dd:2e:34:ed:fb:a3:9b:e0:c7:b2:c3:c9:8c:c2:b1:
                    da:ec:c2:f0:7a:34:72:be:5a:22:e4:18:f5:f0:da:
                    a3:2e:45:f1:6c:aa:b1:35:4e:1a:3e:a1:98:04:61:
                    78:3b:ec:b6:a7:6d:8d:69:fc:83:0a:0d:b5:0a:0c:
                    b5:24:c1:a2:fb:36:13:f0:53:f0:05:32:84:75:1a:
                    16:31:31:23:3b:fd:f0:18:b9:b2:6a:ca:3e:ac:1e:
                    44:95:c9:d7:8d:a1:0f:a6:47:ad:78:c2:e5:e6:a9:
                    c8:a2:09:ce:97:de:df:07:cf:4f:27:e0:10:5d:35:
                    fb:89:da:48:b6:5b:57:71:9a:0e:18:be:3b:22:32:
                    70:66:4d:de:fa:ec:bc:0d:2f:84:be:1c:50:b0:93:
                    a7:d4:37:d9:16:5d:4d:ad:38:2b:3f:c5:71:a4:22:
                    91:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:59:58:2F:43:AA:8C:2C:D0:F7:E4:0E:09:0B:C2:69:75:C0:DC:81
            X509v3 Authority Key Identifier:
                keyid:33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:ce:f3:9f:72:15:7c:1a:bb:28:97:24:20:12:e8:b7:68:7e:
         3b:2a:8e:c5:df:32:11:61:9a:14:f9:5f:e4:d5:7c:c4:eb:83:
         21:ff:62:44:e1:85:b9:9f:f0:7d:4c:83:33:58:d1:7e:9e:5c:
         8c:49:06:3b:0b:22:48:1c:90:e3:33:72:15:cf:74:66:b6:bb:
         45:c0:ea:05:e7:37:51:43:85:4e:27:d0:f0:27:86:8b:44:dc:
         12:24:93:83:a9:75:03:8a:f0:bf:d8:e1:7b:a5:31:7b:45:2c:
         6b:cc:cf:72:db:26:64:16:e0:f3:f2:c2:69:2a:fc:a9:2e:1d:
         fd:80:e1:d1:1c:3c:65:f9:42:6e:f1:f7:2a:67:51:bf:fa:4d:
         bc:69:cc:4c:c7:64:df:dd:e9:0c:56:14:1d:9b:a8:e7:a8:5c:
         87:c0:6c:53:bf:ea:56:97:1f:fb:d1:85:ad:b6:01:f1:f6:e4:
         dd:bc:f1:d9:dd:2b:f4:d6:b0:1d:7a:85:bf:3e:1f:ea:35:a4:
         39:53:ef:ad:84:c7:6d:c0:9d:9f:ba:cd:6b:3a:52:d3:a5:bc:
         67:91:3a:40:ed:f0:df:3a:04:f2:e4:e7:44:5a:d1:78:78:6b:
         7d:b0:b8:80:5e:84:b1:31:52:dd:2c:74:18:ca:4f:61:76:03:
         1d:5c:f6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:39:43 2026 by rpki-client