Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
File:                     D1kUy7lqcNoGsR7z3StjyeQHsxw.mft (raw, json)
Hash identifier:          NnKYe5gschcAuYOp34A8aDraX16e69ExEMa31napMsk=
Subject key identifier:   4C:3A:03:4D:C5:87:29:37:E5:C5:D9:B8:07:E7:25:51:C6:FF:87:C4
Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C
Certificate issuer:       /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
Manifest number:          014D
Signing time:             Sun 01 Mar 2026 06:10:47 +0000
Manifest this update:     Sun 01 Mar 2026 06:10:46 +0000
Manifest next update:     Sun 08 Mar 2026 06:10:46 +0000
Files and hashes:         1: D1kUy7lqcNoGsR7z3StjyeQHsxw.crl (hash: 1wx6qdh0h4KxjIcyj4lCtiKe5jGKUOtDLyoRDHLEZcU=)
                          2: 507C31C21D7211EFA095B25AC4F9AE02.roa (hash: c1LdcyfxBkh65MfHEWuLe4Y+neliIailfDFE8qX4bKs=)
                          3: 4FFFD8D41D7211EFA095B25AC4F9AE02.roa (hash: 7t/pdYKTKmwUGR/lE+qnEM4TrcYeXROZCsv49aYTSqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl
                          rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:10:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D03FC, serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
        Validity
            Not Before: Mar  1 06:10:46 2026 GMT
            Not After : Mar  8 06:10:46 2026 GMT
        Subject: CN=69a3d867-9466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:86:3d:76:e9:15:15:85:30:85:ff:ea:4b:a8:
                    3d:12:a0:85:10:5e:4d:06:00:09:3c:71:89:71:c3:
                    39:e7:b3:8e:58:59:06:bf:13:7c:e8:68:36:b8:ed:
                    27:03:b0:1a:64:38:00:a6:18:9a:86:cc:4e:af:1d:
                    b2:6e:97:df:90:d4:c9:b5:53:50:65:21:62:d9:ce:
                    26:e7:29:5d:d5:d6:7c:dc:40:f8:78:c2:9f:55:08:
                    d6:65:d8:f7:a8:db:7d:b4:d8:ee:2b:ce:49:44:9d:
                    93:31:76:c7:e6:99:09:77:8d:8b:0f:b5:ac:59:3a:
                    6f:a9:4f:75:7c:fc:05:d8:e9:a0:d3:b0:56:1c:65:
                    93:f7:9e:8d:9c:81:e4:31:42:93:07:d0:3b:1e:65:
                    df:6d:ad:14:2b:d2:45:3b:09:66:9a:63:e8:cb:45:
                    fa:f8:f3:15:1e:ce:91:fc:60:e9:7a:e0:8b:d8:2f:
                    8a:7a:cc:4a:37:58:ca:f9:f9:60:f5:16:67:f5:ae:
                    0b:40:20:65:3a:62:b9:0c:78:a3:f6:4f:0f:b1:72:
                    31:04:5e:a1:5a:cc:1d:93:94:ca:a4:ef:5a:8a:d2:
                    9a:bb:b4:b2:62:d6:2f:f6:9f:af:f5:01:b1:e0:6a:
                    f8:e8:20:c0:6f:e4:ec:c4:61:28:13:ae:ee:8d:70:
                    70:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3A:03:4D:C5:87:29:37:E5:C5:D9:B8:07:E7:25:51:C6:FF:87:C4
            X509v3 Authority Key Identifier:
                keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ea:a6:b7:97:5f:52:de:ad:20:48:07:ef:60:98:00:74:0f:
         c9:ff:48:b1:d6:e8:f8:2f:81:92:ec:23:3e:81:6f:03:4d:d3:
         ab:7c:a3:7f:e1:c8:87:1d:7a:48:d3:34:6d:ba:e5:3e:2f:58:
         52:e3:3a:9a:a5:0c:b0:ab:0d:c2:9c:27:41:ca:c2:1d:a7:2c:
         9e:bf:ae:10:2f:eb:1d:75:ea:b6:a6:b6:22:6b:6d:45:9a:a5:
         fe:5e:c4:c3:2c:b3:08:b3:c5:31:50:4e:1d:2d:cb:78:8e:7c:
         93:27:3d:40:f5:73:42:af:b2:35:e3:52:a2:6b:09:a4:08:86:
         ac:c1:15:21:90:41:e4:b8:7f:94:1a:ac:23:0a:23:91:fd:c7:
         87:78:b8:31:61:cb:27:a0:1d:69:4f:c6:64:09:09:e8:06:d9:
         7f:dd:e2:49:e7:a8:14:fd:85:ee:01:cd:08:dc:26:cf:7b:5f:
         3f:51:36:99:88:03:a5:8c:3d:7a:33:c6:da:1f:8d:21:6e:34:
         b7:e3:2e:20:96:9e:ed:d4:af:f2:11:a5:7d:43:cb:49:1f:21:
         0a:2f:03:9d:ef:b0:3d:aa:c6:a1:61:d9:26:4b:af:31:c3:ae:
         c3:bf:56:78:92:51:c3:3d:ff:59:24:d9:59:6b:e0:ec:bd:25:
         b5:c3:b4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:12:29 2026 by rpki-client