Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
File:                     sK6GHB6-i61uZW1AH391BglAdKA.mft (raw, json)
Hash identifier:          YdYcrsblvKxbwj4nhh84m7U+vGEk8wH6AwypuShr/pM=
Subject key identifier:   73:26:DE:AA:69:4A:B2:6F:2E:C5:3C:8C:D1:9E:2C:D3:63:B7:65:7F
Authority key identifier: B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0
Certificate issuer:       /CN=A91D322A/serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0
Certificate serial:       0DB0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
Manifest number:          0DA6
Signing time:             Mon 02 Mar 2026 01:30:26 +0000
Manifest this update:     Mon 02 Mar 2026 01:30:24 +0000
Manifest next update:     Mon 09 Mar 2026 01:30:24 +0000
Files and hashes:         1: sK6GHB6-i61uZW1AH391BglAdKA.crl (hash: UpPNddEaoaF8rXKuPXmRTk80OyKBqyw5mZ6AWrOvjMA=)
                          2: 98B4FB32DB9011E996483B2BC4F9AE02.roa (hash: 5ZMmyMryQucfNp+56gWj7IUfWmQlJppiEYV0jS6pkCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl
                          rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3504 (0xdb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D322A, serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0
        Validity
            Not Before: Mar  2 01:30:24 2026 GMT
            Not After : Mar  9 01:30:24 2026 GMT
        Subject: CN=69a4e831-a597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ac:fd:23:63:7a:e8:9c:cb:ba:24:07:6f:08:
                    df:ce:17:ad:22:3a:4c:11:1d:89:61:8b:11:a3:75:
                    4c:a8:63:45:3a:ae:00:77:d5:2b:bd:e7:28:23:fa:
                    0b:8f:de:fe:ce:70:3b:81:d6:69:f3:28:39:92:d8:
                    38:cb:c6:9f:a4:ba:c8:da:45:4e:23:40:07:a7:e2:
                    3f:11:d8:53:cf:d0:fc:36:fb:b7:33:bb:d9:14:cb:
                    7a:ec:01:e2:a9:2a:6f:ec:07:c6:98:af:08:83:d5:
                    39:87:6d:9a:e6:63:fb:ad:25:e2:b2:b7:c7:fa:b7:
                    b2:6a:30:e1:9f:33:97:85:a3:38:a3:f6:57:83:98:
                    09:47:cc:77:74:e4:c5:d1:97:57:65:32:60:38:3e:
                    ba:18:67:be:07:21:58:f1:70:bf:d7:48:08:72:99:
                    ce:dc:b0:b4:37:5e:94:b1:1a:0c:a6:9c:dc:70:a3:
                    b7:8e:00:2f:e5:55:a0:51:c7:ee:03:1b:05:51:c2:
                    64:c0:92:99:04:01:27:c9:f7:bb:db:78:7f:c2:8d:
                    0f:fc:b2:eb:24:a7:00:4c:bc:c7:0e:ab:23:be:be:
                    a4:6a:82:99:dc:bd:fc:4f:90:7f:56:63:ec:d9:33:
                    67:60:f7:31:c8:31:b6:63:d3:7c:49:b7:1a:a7:a7:
                    6a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:26:DE:AA:69:4A:B2:6F:2E:C5:3C:8C:D1:9E:2C:D3:63:B7:65:7F
            X509v3 Authority Key Identifier:
                keyid:B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:2a:a5:7b:b8:ea:07:ff:7a:06:47:2f:a3:e5:8e:d0:75:96:
         c9:63:13:b7:e9:42:da:63:07:97:08:7b:bb:bf:e7:d0:5e:0f:
         c4:a7:fd:71:43:c8:78:4d:df:d8:53:05:6c:ee:75:ca:9b:ef:
         0a:44:9c:96:1d:15:82:9e:6a:af:89:fe:74:ac:72:5b:8f:99:
         da:20:d3:af:b9:c4:9e:79:79:ab:ff:d0:f0:66:d8:32:b5:d3:
         10:50:bb:02:d5:c6:7e:19:68:b2:8c:de:97:e8:99:77:fe:43:
         b7:9d:d9:db:9e:f6:07:57:13:cd:b6:32:36:10:b5:64:93:7f:
         f0:0c:e4:21:a1:2d:54:e6:31:82:65:47:fd:4d:c7:7c:a5:07:
         4c:4e:2c:16:8a:dc:e5:ce:39:ba:36:2b:89:76:90:f6:e1:60:
         69:21:d3:d8:50:ec:2c:fe:33:fb:a5:d2:3e:40:c6:16:c3:d0:
         0d:7d:d2:92:7e:72:53:27:1f:04:6a:66:ad:48:68:95:61:46:
         28:12:cd:9d:24:c3:05:3b:9e:6c:cc:64:2d:6d:6a:f6:a9:87:
         3a:f2:89:f7:02:d9:51:21:66:ca:46:96:6f:69:b4:e6:f4:e9:
         ec:11:13:19:a4:23:4b:9a:a9:bc:cf:93:9c:f6:8e:c6:6b:d1:
         4d:e3:bf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:01 2026 by rpki-client