Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
File:                     pwfo7Wx0uvNh3UByccajTUQCIqw.mft (raw, json)
Hash identifier:          291ZphCNsDHhCnaBoWRSXUq9igp8TcNIRP7VM8nkU+k=
Subject key identifier:   4A:A3:6C:69:8B:3A:8E:65:C6:E9:52:71:23:CA:95:27:5B:E3:F1:C3
Authority key identifier: A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC
Certificate issuer:       /CN=A91D0C14/serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC
Certificate serial:       0286
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
Manifest number:          0280
Signing time:             Sun 01 Mar 2026 23:40:21 +0000
Manifest this update:     Sun 01 Mar 2026 23:40:19 +0000
Manifest next update:     Sun 08 Mar 2026 23:40:19 +0000
Files and hashes:         1: pwfo7Wx0uvNh3UByccajTUQCIqw.crl (hash: fmJKx9qezyvmstQZclaIgVje4oNz4wNlnxPzFjFTqeM=)
                          2: 111C77744E1811EDADB36913C4F9AE02.roa (hash: d1iO3gAzVwzGco48zES+x8THVQiyCm25qGNJbQLDHWQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl
                          rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 646 (0x286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0C14, serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC
        Validity
            Not Before: Mar  1 23:40:19 2026 GMT
            Not After : Mar  8 23:40:19 2026 GMT
        Subject: CN=69a4ce64-3ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e8:cf:73:6a:71:d1:39:ec:9f:f8:b3:7a:07:
                    e8:69:a9:21:86:04:50:23:e9:54:ba:c4:ba:15:50:
                    02:5a:7c:32:ff:d4:6f:ba:e1:d8:ce:88:e8:c8:c9:
                    97:09:c2:1c:55:50:7d:b6:31:b3:d1:1c:08:c6:1b:
                    fb:06:0c:c1:d9:28:48:02:9a:d6:db:d0:c9:3d:00:
                    a1:8d:e2:8b:99:22:07:e2:f7:c5:16:12:c5:c8:70:
                    6f:c3:b6:25:85:73:c3:0b:68:e1:24:7b:e9:71:93:
                    0e:45:c1:a6:36:87:82:d1:bf:37:f3:f0:10:27:22:
                    24:16:79:4f:e1:a8:5f:e9:2b:34:d9:47:be:63:3a:
                    c0:6c:e8:8e:ea:11:f0:1a:38:57:64:61:f9:16:c8:
                    34:6d:b4:5d:04:ea:b8:bc:36:88:b3:58:e2:0b:ad:
                    29:f4:b6:8f:4b:24:61:bf:bc:a9:e5:2e:f4:7d:90:
                    c4:49:2e:50:f7:e7:81:79:87:a2:34:ac:07:8d:45:
                    d3:f9:2b:21:35:8b:6b:9e:e8:1c:6e:2b:28:c9:0f:
                    e9:7b:90:93:59:88:66:1d:09:40:39:c8:51:5d:32:
                    cb:b2:5b:88:69:31:5c:a9:c9:25:db:fa:b5:4c:45:
                    b7:f4:1c:ac:e2:74:1f:1a:4e:07:de:5a:47:8e:d4:
                    8e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A3:6C:69:8B:3A:8E:65:C6:E9:52:71:23:CA:95:27:5B:E3:F1:C3
            X509v3 Authority Key Identifier:
                keyid:A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f2:68:9f:62:c9:9f:04:bb:ef:54:2c:83:b4:de:c7:02:9f:
         47:dd:52:f7:53:6e:10:8f:24:db:af:dc:f5:60:26:ef:6f:56:
         a5:46:f3:77:79:2a:4c:76:7f:2c:8b:4a:33:4a:e7:f6:21:84:
         fb:2e:b4:34:b3:df:7c:df:e3:97:69:3b:55:f8:a3:ab:1a:32:
         87:47:76:74:3f:00:b4:8d:7b:cd:b8:a0:fa:7e:80:32:15:ff:
         d8:3e:18:22:fa:88:b9:13:70:5a:c3:78:42:25:fa:36:6a:fc:
         17:2b:67:6d:af:a6:66:58:da:21:50:54:c1:85:fa:9f:2f:f0:
         fc:12:16:e3:cb:fe:12:8b:33:92:a6:78:9c:1f:5b:ee:e0:c1:
         66:0a:ad:cb:57:0d:b0:ea:a2:ce:db:e0:c5:33:31:19:94:3d:
         04:42:d8:33:f3:0a:c9:e5:c0:5f:80:94:e0:c0:31:2d:06:7e:
         28:86:b0:dc:62:76:00:e6:cf:b4:04:2c:e8:6c:82:77:5a:4f:
         25:d9:86:6e:b6:c4:dc:3a:7d:64:e0:e3:7f:0d:a2:a2:7f:97:
         eb:58:8f:ae:b2:80:77:b0:93:36:3a:c7:a9:06:bd:41:9f:59:
         7b:b4:2c:f0:6b:2b:8d:10:af:34:0c:ca:28:3e:b1:1f:05:06:
         1f:ff:db:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:14 2026 by rpki-client