Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
File:                     vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft (raw, json)
Hash identifier:          1BHTSpkpyjMqVQsJqMYcRKVqXAyNTUVcYhZCjCiklpA=
Subject key identifier:   03:36:3B:2A:5E:3D:72:69:4C:39:89:F4:6D:B1:A0:67:D8:34:8B:5F
Authority key identifier: BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D
Certificate issuer:       /CN=A91CB816/serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D
Certificate serial:       07AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
Manifest number:          079F
Signing time:             Mon 02 Mar 2026 00:16:02 +0000
Manifest this update:     Mon 02 Mar 2026 00:16:00 +0000
Manifest next update:     Mon 09 Mar 2026 00:16:00 +0000
Files and hashes:         1: vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl (hash: wmxwZdlZaKmlIMayQuTj5Sb9BB4vOejujpgbX/p7Pvg=)
                          2: 122052A03DD811EBAE99F45CC4F9AE02.roa (hash: mtoKEHPZWLoyi/r8N8V2JGeY1kwSeTuX6aCOjVwyle4=)
                          3: 7D8845C43DD911EB8DA0EE5FC4F9AE02.roa (hash: 4xgzK7PrNpZAnd72wXzvBuPzMZA+sokeDoeYoGYDtEI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1967 (0x7af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB816, serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D
        Validity
            Not Before: Mar  2 00:16:00 2026 GMT
            Not After : Mar  9 00:16:00 2026 GMT
        Subject: CN=69a4d6c1-21ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cd:70:74:e1:fd:ca:3a:58:da:b9:f6:b9:e6:
                    d7:3c:06:e1:1a:43:92:df:f1:14:df:e1:0d:f5:7b:
                    7c:74:78:ef:f2:fa:a1:49:fb:73:7e:81:55:cb:0d:
                    f5:f3:f8:a4:56:0d:22:c1:92:f7:34:e9:e9:c4:c5:
                    89:57:b0:04:06:59:a5:58:41:7e:7a:1e:ab:c6:1e:
                    04:3c:8c:7b:51:7d:90:c9:49:84:96:fb:3f:d1:a0:
                    f8:74:15:cc:df:ae:7c:bd:dc:bd:c2:a9:e0:a7:7e:
                    a6:c0:5e:a3:e3:2f:d3:e6:dc:16:42:b3:e2:3f:f0:
                    70:64:31:54:d7:98:c2:eb:73:b0:03:c2:c1:be:71:
                    95:41:43:25:20:ba:bc:a6:10:02:25:cd:19:ff:23:
                    4b:db:7e:c5:7b:47:51:ed:ee:25:66:1c:23:ef:ad:
                    e7:d2:31:59:c9:ab:06:24:d9:e8:b9:1e:55:0e:6d:
                    68:77:3c:e6:fa:6d:f9:da:5b:01:3c:ea:78:72:21:
                    ce:bc:83:6f:02:09:cb:29:78:b5:d7:36:0b:07:8e:
                    69:83:86:dd:10:9f:fb:4f:9c:82:c4:47:27:f6:2e:
                    70:d4:98:b5:0e:f4:61:b5:2c:1a:e7:c8:79:61:d6:
                    85:54:e5:fc:38:aa:ca:1a:76:e6:af:c1:e1:87:26:
                    b2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:36:3B:2A:5E:3D:72:69:4C:39:89:F4:6D:B1:A0:67:D8:34:8B:5F
            X509v3 Authority Key Identifier:
                keyid:BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:f1:2c:52:20:85:8c:d4:43:fe:2b:41:5d:f1:77:d0:fd:f1:
         d8:d6:26:fd:16:f2:88:08:54:89:d6:1e:38:8c:a1:8a:15:40:
         1a:61:ff:55:48:68:0b:97:bc:50:d1:87:43:92:a8:51:e3:d0:
         f5:07:c9:c2:c0:f9:ce:33:2b:69:c9:c5:53:f3:be:38:35:aa:
         7a:11:a1:73:b4:72:93:92:4d:c0:c8:21:d7:8d:6a:54:27:0c:
         d0:58:3a:c9:c0:c5:26:80:cd:31:98:52:e7:16:8c:d8:44:6f:
         0b:b9:02:0e:f3:0e:f1:10:f9:30:ec:47:69:fb:2f:15:31:45:
         77:9e:fa:d0:78:20:7d:5b:d7:d7:58:e0:20:5c:ef:15:b4:b7:
         da:74:b0:a2:02:55:77:81:07:66:38:4d:db:d8:52:97:2c:a5:
         5c:3b:b2:a8:66:8a:76:1a:29:c3:08:9e:bf:63:1e:b7:74:a6:
         9a:45:a1:65:8d:a2:05:f3:3c:61:3d:18:6a:36:0e:b2:4a:83:
         51:75:91:bf:e7:79:8f:2e:f5:77:37:38:dd:bd:af:16:8b:19:
         fa:ff:92:a6:10:a5:7a:c6:4b:d1:97:aa:1d:3e:1f:26:a9:86:
         b2:d6:08:4e:c0:b2:be:95:6b:fb:0e:30:2f:5f:fb:57:0c:f8:
         82:dc:ea:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:24 2026 by rpki-client