Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
File:                     W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft (raw, json)
Hash identifier:          yD0Zd5XAVM/5jP/WIRMTHCXbPdz5jdqNi0yrewzZwzM=
Subject key identifier:   42:57:C2:83:FA:DB:D1:41:06:C5:14:77:1D:42:0E:C0:DE:8E:BA:84
Authority key identifier: 5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C
Certificate issuer:       /CN=A91D1E29/serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C
Certificate serial:       0961
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
Manifest number:          0958
Signing time:             Mon 02 Mar 2026 02:56:51 +0000
Manifest this update:     Mon 02 Mar 2026 02:56:50 +0000
Manifest next update:     Mon 09 Mar 2026 02:56:50 +0000
Files and hashes:         1: W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl (hash: jQrsky+zunGhQ8kd1C5WndnOeRO2zgwfdFxDcxy6S9Q=)
                          2: 108B7DAAB2A711EAABBE8663C4F9AE02.roa (hash: jJBBqp0n1dcla2CfO5nioVw0ckuTS67twgXm6uBPlv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl
                          rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2401 (0x961)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1E29, serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C
        Validity
            Not Before: Mar  2 02:56:50 2026 GMT
            Not After : Mar  9 02:56:50 2026 GMT
        Subject: CN=69a4fc73-e7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:87:89:6a:6d:51:b5:bd:84:0f:0a:79:1b:2c:
                    12:e0:84:df:2f:cf:77:fc:a2:25:8e:15:1f:2f:9f:
                    12:f9:26:a3:32:ef:f8:1f:c0:a0:52:e8:6c:c5:f0:
                    9b:7b:a3:fc:94:5f:22:ef:5a:8a:e5:30:2f:da:8b:
                    8c:ca:c8:d6:f1:b8:65:c4:19:a3:57:df:bc:4d:4e:
                    07:54:a0:71:1b:f8:ba:f3:2a:5d:c1:3e:e9:2c:c5:
                    b5:3d:f2:e4:c7:f7:95:d0:80:67:72:87:b4:2a:45:
                    38:e1:16:28:87:b8:d2:f3:0b:fb:5d:8d:8b:ea:4f:
                    0d:cf:9e:62:a5:bc:82:b2:1a:78:97:06:49:e7:66:
                    1f:83:8b:fa:97:c5:a0:ca:4b:56:cb:56:ac:ad:72:
                    02:83:42:46:ef:5d:4a:ea:02:37:43:85:25:26:dc:
                    dc:6b:45:a0:99:c9:c2:33:0d:a4:26:d4:2b:dc:2f:
                    19:d0:88:86:23:20:36:a3:e1:f4:9a:b9:76:84:9b:
                    ae:fe:3e:0a:fd:ea:77:08:e9:23:02:a8:66:32:73:
                    cb:b9:cd:4d:17:24:c7:f6:2c:10:8e:ac:14:ac:ae:
                    08:eb:1b:d0:31:65:43:96:65:3e:3d:af:74:eb:3d:
                    65:3a:f2:c3:e9:4a:c8:95:b8:0f:47:8b:63:01:60:
                    19:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:57:C2:83:FA:DB:D1:41:06:C5:14:77:1D:42:0E:C0:DE:8E:BA:84
            X509v3 Authority Key Identifier:
                keyid:5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:62:d5:22:95:69:c0:96:13:9a:b6:e1:4d:6c:3f:2c:b2:25:
         62:d0:97:3a:96:d9:2b:40:e3:31:79:1c:03:1f:8c:bb:8b:06:
         37:68:57:7c:c6:9a:ee:13:a5:00:03:45:9f:bc:1a:96:79:72:
         e6:a2:aa:e8:48:67:1d:d9:63:cf:9a:5a:51:69:78:ca:9b:46:
         c5:94:dc:54:a5:aa:90:9a:58:ea:2e:ed:ce:18:f3:e2:37:44:
         9f:25:f3:54:9e:95:7b:b8:cc:b7:c2:76:50:49:a4:76:b5:01:
         d1:1c:f4:22:c5:a7:64:00:01:5d:1e:90:b1:ae:58:32:3d:dc:
         1c:42:99:35:47:54:c9:d2:12:40:f7:a4:8f:42:ed:df:b3:df:
         69:82:ec:cf:32:6f:a7:6e:e0:a4:4a:c7:9c:27:5b:ce:c1:83:
         06:09:98:e6:3d:f9:66:b8:b4:73:85:1f:fe:1b:e4:36:d3:d1:
         de:63:28:6c:89:97:7e:52:b8:d4:68:63:24:6d:b0:24:d1:e4:
         a2:38:60:f4:01:cc:03:5d:09:3d:91:1a:39:5e:ac:3b:11:21:
         b8:7b:24:46:3f:02:7f:60:ae:24:bb:ab:cc:a5:d0:ba:57:9c:
         87:9b:2b:07:fe:ec:a5:5a:e6:fa:85:2e:1f:fc:56:fc:ee:0e:
         6a:89:ba:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:37 2026 by rpki-client