Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft
File:                     awKSxgJwici6idjGWhozDUiLCiw.mft (raw, json)
Hash identifier:          N8+oRfRRnB5fROeV0iEw7AcFxLd3J0LTUNAbfZ7YJIQ=
Subject key identifier:   C9:B0:ED:C0:B8:10:40:DC:21:AB:FD:07:11:FF:48:05:67:7B:23:D9
Authority key identifier: 6B:02:92:C6:02:70:89:C8:BA:89:D8:C6:5A:1A:33:0D:48:8B:0A:2C
Certificate issuer:       /CN=A91D0B0E/serialNumber=6B0292C6027089C8BA89D8C65A1A330D488B0A2C
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft
Manifest number:          0110
Signing time:             Mon 02 Mar 2026 13:02:23 +0000
Manifest this update:     Mon 02 Mar 2026 13:02:23 +0000
Manifest next update:     Mon 09 Mar 2026 13:02:23 +0000
Files and hashes:         1: awKSxgJwici6idjGWhozDUiLCiw.crl (hash: n0mTUvBr6gg+m79JYXs4Cwtu0qLNpbStShRUe4DZ4rk=)
                          2: 17782970808311EFBB9C2A46C4F9AE02.roa (hash: 7TZMrJ7cU5AnQKT56JZoo3GclFGMSMDdP1Hrz561DNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.crl
                          rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0B0E, serialNumber=6B0292C6027089C8BA89D8C65A1A330D488B0A2C
        Validity
            Not Before: Mar  2 13:02:23 2026 GMT
            Not After : Mar  9 13:02:23 2026 GMT
        Subject: CN=69a58a5f-dcae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6b:05:82:3c:bd:7d:2e:c9:68:a4:59:a4:a1:
                    eb:0e:6c:20:99:62:f5:0b:32:2e:7d:1c:85:cb:7f:
                    e5:fe:47:3b:b6:79:94:01:92:8e:77:df:50:56:e7:
                    6d:07:27:bb:ae:29:54:5f:4b:be:73:a2:f1:e0:44:
                    ac:15:9c:12:d3:52:e6:e3:75:b8:82:6f:35:28:c5:
                    a9:db:2c:06:a7:3b:79:6e:55:c6:5b:1d:2f:13:62:
                    4b:c0:02:bc:2e:b4:87:04:85:af:d0:de:91:c7:46:
                    0f:dc:00:c3:a0:c4:50:3a:67:73:1a:7e:29:13:63:
                    34:c8:ee:48:7d:02:eb:b1:2e:68:72:15:a4:a1:e7:
                    6f:af:dd:9a:6a:a5:35:86:57:ed:0f:b3:d5:cd:9f:
                    7b:72:20:62:25:c8:ef:81:95:db:24:cc:46:dd:5f:
                    fc:10:d7:be:ef:20:39:10:f4:6d:1d:4a:c9:50:df:
                    ee:39:e1:99:20:30:ab:31:c5:b4:b0:3c:f6:a6:53:
                    50:d6:41:80:15:38:1a:46:47:3a:b4:62:dc:f2:45:
                    fe:97:7b:75:b7:38:4e:81:43:47:99:34:e1:93:77:
                    dc:34:11:a7:fd:eb:e3:6b:f8:0c:26:90:44:07:bf:
                    5c:ec:37:df:5d:1b:4e:d1:6c:1c:3b:df:e0:3a:85:
                    ae:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B0:ED:C0:B8:10:40:DC:21:AB:FD:07:11:FF:48:05:67:7B:23:D9
            X509v3 Authority Key Identifier:
                keyid:6B:02:92:C6:02:70:89:C8:BA:89:D8:C6:5A:1A:33:0D:48:8B:0A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a8:ed:82:b3:49:be:fa:ef:9d:a9:80:19:4c:d5:41:c9:2a:
         4c:44:79:53:72:48:9e:fc:24:7e:e8:8c:9a:88:be:39:ab:40:
         c7:52:fc:8f:f1:ea:16:59:e6:52:dc:04:35:d9:dd:d7:30:eb:
         8b:1d:c4:0c:b3:cc:17:11:07:be:90:f6:ee:f9:e6:1f:a7:15:
         43:d5:0d:6b:25:91:06:ea:ba:60:1f:3d:83:87:9a:3e:5f:68:
         23:19:00:57:41:31:86:86:51:a2:d3:62:3f:ce:28:c8:79:1e:
         7f:ef:b6:a6:6a:db:06:5b:5b:76:9b:85:5c:6d:f2:51:53:35:
         69:ba:1f:3a:d7:e5:6b:84:2d:81:a9:33:42:f7:e0:cd:8d:43:
         88:19:0f:a3:6e:23:15:ce:47:ce:6e:ec:5e:7f:7e:f4:cb:57:
         4d:e4:38:8b:e6:5f:55:5b:d1:bf:96:0f:34:78:36:7c:68:2e:
         f9:c0:bf:a0:f0:c4:a9:1b:a7:7c:f2:45:07:af:31:a0:60:57:
         19:de:0c:01:9b:f0:bc:37:c1:62:4d:ac:f4:14:d7:26:93:36:
         37:58:ae:e1:7a:f7:1c:7a:60:e1:30:19:e0:c2:1c:71:f9:4f:
         1b:c9:fa:42:2d:f9:99:47:6d:f3:5b:15:79:6d:23:23:07:16:
         ef:0d:86:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:33:45 2026 by rpki-client