Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
File:                     4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft (raw, json)
Hash identifier:          Exi2ohZyd97NSebqwr70eS1ryIkAiaUychUzn58FdGc=
Subject key identifier:   7A:69:C1:FD:54:29:1D:C2:20:0F:04:34:0F:6B:D1:A2:2C:35:7A:15
Authority key identifier: E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A
Certificate issuer:       /CN=A91D1306/serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
Certificate serial:       19A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
Manifest number:          199A
Signing time:             Sun 01 Mar 2026 23:25:00 +0000
Manifest this update:     Sun 01 Mar 2026 23:24:57 +0000
Manifest next update:     Sun 08 Mar 2026 23:24:57 +0000
Files and hashes:         1: 4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl (hash: +4ZjXqJY/crK7gt05/k6KJQc/8dOoT1l/Wl3sYeWJhA=)
                          2: 66BEBEDE83CB11E796105342C4F9AE02.roa (hash: f0Q1Azb+EY8V4HrdxVOXBmjzrSvFe4VSQb8ZAnHoPpo=)
                          3: 09C0DFCE202011F098619934C4F9AE02.roa (hash: wOYzNzzIS0paJhEaL4lnWRrHmB69EScSsL5hsvt2zxE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl
                          rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6568 (0x19a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1306, serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
        Validity
            Not Before: Mar  1 23:24:57 2026 GMT
            Not After : Mar  8 23:24:57 2026 GMT
        Subject: CN=69a4cacc-c1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:76:83:cc:7c:c8:e9:24:65:20:7a:be:96:ca:
                    96:b7:fa:f5:4c:d4:9f:2f:9c:ca:cb:cc:d6:39:06:
                    72:6d:cb:2b:6f:7e:9c:cd:0b:68:20:b5:f1:75:11:
                    5d:04:f4:16:8d:c6:3f:46:4b:8a:36:b2:3b:d1:28:
                    af:f8:d7:e8:50:47:e8:64:7c:8e:bf:07:0a:7a:27:
                    c7:0f:51:c6:c0:b1:87:75:17:cf:9b:60:17:23:d2:
                    38:93:4f:f3:3f:7a:c8:a6:58:b2:4a:8a:de:b0:03:
                    6b:31:a3:9b:9e:de:68:68:67:02:88:e4:8f:5f:6f:
                    36:49:c3:f3:92:97:47:38:63:ca:52:26:e6:23:01:
                    56:fa:8b:02:4f:de:85:a8:08:3d:00:62:af:0b:dc:
                    a6:9b:02:5e:69:5d:b7:bd:ce:50:d2:1e:8f:77:99:
                    a0:76:38:eb:42:7c:f2:52:b3:e7:89:aa:ec:81:4a:
                    5a:e1:9c:aa:14:50:10:26:e6:33:7b:9e:8a:05:35:
                    19:ee:1e:16:12:e2:40:b7:cd:c9:04:29:65:08:20:
                    9c:4c:3a:db:04:64:dd:f6:16:9b:ed:78:24:67:ed:
                    f9:5f:fd:c5:1b:b0:7f:e8:f8:11:e2:52:e5:1f:75:
                    2d:45:40:fe:85:97:df:cd:bc:8b:07:be:df:fa:98:
                    7d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:69:C1:FD:54:29:1D:C2:20:0F:04:34:0F:6B:D1:A2:2C:35:7A:15
            X509v3 Authority Key Identifier:
                keyid:E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:e8:5b:f3:a6:42:19:9f:f3:78:66:88:d2:ed:83:f5:42:f1:
         9c:b8:77:47:fc:43:8d:aa:3a:01:48:13:7f:ba:ef:d5:4c:95:
         91:67:15:fb:cf:89:ca:d1:ed:33:8b:03:06:9e:5b:cb:ba:83:
         c7:a5:02:eb:2f:5c:57:4e:ea:34:18:44:7c:6b:dc:9c:bb:09:
         ac:76:80:fb:5d:3d:92:a7:9f:10:e0:4a:9f:56:bb:7c:26:15:
         eb:8b:4d:ed:50:c1:46:38:7a:12:b7:46:eb:17:29:cd:9c:7c:
         ba:de:ae:1e:4d:fe:bd:3f:7d:f4:c2:8f:fc:99:f7:e8:d2:d0:
         ba:34:60:a7:75:89:84:01:da:dc:b7:e7:d0:96:09:89:22:d6:
         70:2e:d5:58:eb:01:3d:a4:b1:c8:51:79:43:4d:1f:6f:5f:e3:
         e2:15:01:2f:ae:8b:2d:25:d7:41:28:fe:89:0a:fa:77:4f:df:
         34:32:d3:5a:5f:87:88:4f:03:ef:bd:cd:47:6b:96:49:43:34:
         43:9c:da:67:fa:7b:cc:ca:e8:be:29:8f:0f:27:57:05:47:67:
         b0:87:6b:ee:2f:a6:6a:8c:c8:2c:da:bc:00:6a:0a:dd:45:f2:
         66:d4:bd:01:53:6c:76:d7:03:cc:ea:6d:90:02:f5:e8:47:76:
         6b:0c:21:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:55 2026 by rpki-client