Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft
File:                     akXWGoN3DJDQWMdBUx2NnGtnk1o.mft (raw, json)
Hash identifier:          1uzc51fJwI6cYYzczYDAtM1kxQ2hxbmLTfUCqq0AZZA=
Subject key identifier:   F2:2E:65:11:B2:B4:38:A5:7C:ED:C3:43:9F:A7:B8:19:3C:52:14:DA
Authority key identifier: 6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A
Certificate issuer:       /CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A
Certificate serial:       0ADB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft
Manifest number:          0ABE
Signing time:             Sun 01 Mar 2026 23:51:43 +0000
Manifest this update:     Sun 01 Mar 2026 23:51:42 +0000
Manifest next update:     Sun 08 Mar 2026 23:51:42 +0000
Files and hashes:         1: akXWGoN3DJDQWMdBUx2NnGtnk1o.crl (hash: FN614FWVfM41E1T3nVOkdFjRBnNvqNx3ZB+SeZxBET0=)
                          2: 6EE80A72F80A11F0BD0E5DB76F6F56BC.roa (hash: Jh4Ff7zuJk/wuhEY+gYNdPlenkcVzVFWzJ8Ffm4/pSY=)
                          3: 6E71C43EF80A11F0BD0E5DB76F6F56BC.roa (hash: exImyAeQnH2e+Miw5tPRziDVGs9lzMXANWdN6H9jKss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl
                          rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2779 (0xadb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1AC7, serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A
        Validity
            Not Before: Mar  1 23:51:42 2026 GMT
            Not After : Mar  8 23:51:42 2026 GMT
        Subject: CN=69a4d10f-8658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5a:d5:7c:89:ae:eb:d6:95:f0:06:9e:1c:c8:
                    4c:01:e9:2e:9b:ff:8a:7a:97:1a:50:56:82:49:55:
                    c7:61:89:2d:57:88:84:1d:13:5b:18:e4:cc:19:38:
                    09:38:2d:29:05:30:94:08:96:5d:4d:f3:a3:fc:40:
                    0e:d1:bd:ed:41:5e:d8:bd:da:3f:9d:19:de:2f:0a:
                    b1:de:d7:5a:18:54:fb:c3:d2:36:43:96:e8:e9:1d:
                    46:36:2b:3e:8e:30:af:0b:61:6f:c1:17:0f:98:dc:
                    5c:db:fa:10:72:61:3b:6c:5c:16:20:09:fd:55:69:
                    5e:e7:ad:4e:bf:10:da:31:aa:9a:40:8d:64:13:8e:
                    57:cf:0d:e1:5c:8e:42:67:64:22:12:28:53:91:95:
                    bc:7f:34:9c:d1:76:7e:7d:88:b2:87:7a:02:30:be:
                    85:56:2a:d6:22:58:3b:c9:ad:b1:07:fe:c8:31:f9:
                    bf:ab:73:42:2d:de:b7:13:8e:94:b5:61:13:95:4f:
                    87:d1:7e:c2:d5:39:24:57:32:39:20:5a:c0:cc:f2:
                    20:34:ad:3c:12:36:be:27:64:03:49:33:93:6d:7b:
                    8b:c5:67:9a:d8:39:49:e1:e1:25:6c:aa:ec:5d:ed:
                    1c:6d:91:2d:3c:46:f3:42:0f:6c:a8:51:f6:d4:e8:
                    e8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2E:65:11:B2:B4:38:A5:7C:ED:C3:43:9F:A7:B8:19:3C:52:14:DA
            X509v3 Authority Key Identifier:
                keyid:6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ef:d3:e9:d3:fb:e3:a4:99:ec:91:01:dc:15:9c:d5:54:40:
         87:12:0e:6c:17:c6:4a:0d:e5:20:41:a0:e8:84:52:db:6b:3b:
         25:41:ca:04:f5:8d:ab:26:68:7a:a8:ac:fb:5b:35:99:f9:3f:
         28:26:51:fa:14:f2:81:01:6b:f1:2c:84:1e:59:ac:cf:9a:7a:
         62:51:9d:4e:36:b6:2d:a0:96:6f:e2:ca:15:a4:46:f6:c1:3d:
         b2:20:80:da:18:2b:92:3c:13:f7:4f:39:32:9b:e9:e9:8a:ce:
         4a:db:2b:80:e2:a8:99:fc:da:3a:9b:68:77:5c:32:7d:02:ba:
         5b:28:49:db:71:ba:94:4a:dd:a9:e4:b7:4c:33:66:ae:73:87:
         f3:95:34:85:d2:d9:89:f5:a5:85:a6:58:ca:16:b8:00:3a:66:
         f5:48:a3:bb:70:fa:d6:e0:69:4e:7d:ce:65:1d:eb:79:9c:cc:
         a5:c9:d1:3a:e1:66:d3:b3:43:cf:cc:1a:82:14:b3:1c:4d:dc:
         fa:20:d5:d8:a6:ff:fc:c0:4a:3c:44:71:f7:d7:5d:fc:b5:4c:
         b7:13:2f:df:51:75:c9:3d:9f:3a:ac:65:fb:77:a4:21:63:a2:
         82:a5:72:d0:dd:bb:84:fc:45:a6:7d:6e:14:d2:2f:8d:ad:d1:
         05:18:ec:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:50 2026 by rpki-client