Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
File:                     Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft (raw, json)
Hash identifier:          T/hveJOhzOlllZt/FaIXMCgz5wJ9hInYsnwqdNdtaww=
Subject key identifier:   24:49:6E:88:E1:5A:64:6C:3B:2D:D1:F5:2B:1D:E9:4C:4B:49:D7:31
Authority key identifier: 0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7
Certificate issuer:       /CN=A91D462A/serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
Manifest number:          012E
Signing time:             Sun 01 Mar 2026 22:29:59 +0000
Manifest this update:     Sun 01 Mar 2026 22:29:57 +0000
Manifest next update:     Sun 08 Mar 2026 22:29:57 +0000
Files and hashes:         1: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl (hash: ekM0pF/FG1Hz1Wu/CaCCLhutnkNJkeGPQSeqhWMZTtY=)
                          2: D5BFBE9E591811EF80AA9F21C4F9AE02.roa (hash: lJ8a2BmLR6pDdgSaGE66enyNc/gqE+gsClVSBRvWGto=)
                          3: 626CA672591911EFAF1F1D23C4F9AE02.roa (hash: 9ayUJbTwLRPcJporlzoTUwIv2h9R8DWkz2gQBFVIj/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl
                          rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D462A, serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7
        Validity
            Not Before: Mar  1 22:29:57 2026 GMT
            Not After : Mar  8 22:29:57 2026 GMT
        Subject: CN=69a4bde6-1e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f8:8a:f0:eb:d0:c0:db:3a:f5:77:9c:1c:3f:
                    5f:9b:62:54:77:07:ce:5a:e8:66:28:e1:4f:98:46:
                    04:80:4c:3f:0a:a2:c4:47:3d:e1:ff:72:36:1f:00:
                    a7:bb:64:05:5f:8b:f0:ea:77:14:2a:ed:64:b3:ed:
                    3f:79:04:97:d8:7b:7b:55:42:f8:e4:d1:85:ea:e0:
                    a2:b8:e7:ce:7c:79:cb:d8:9f:2c:32:9d:b6:2b:2e:
                    b1:5d:33:c9:15:7a:65:3f:2f:0e:e8:65:82:dc:62:
                    b0:f6:c3:fe:43:0c:4a:67:06:81:da:a6:35:94:32:
                    b6:c8:7d:ae:0b:6e:f3:5c:54:35:ae:c8:29:00:a4:
                    e7:3e:2b:69:01:d7:cc:2b:de:2a:1a:aa:b0:c8:20:
                    7c:b5:ac:3a:1c:d1:7a:47:38:02:48:c8:68:ec:2b:
                    b3:8e:22:8d:94:52:11:bb:84:66:50:d1:1c:e5:ad:
                    ff:3a:8d:e4:2a:41:18:4c:ec:78:bf:b4:d2:c7:36:
                    3c:42:df:cd:f8:3d:de:9d:20:e1:73:60:2a:c0:38:
                    df:ff:58:5f:1a:5a:62:06:ae:da:60:a7:d4:70:61:
                    61:28:c7:39:93:10:0c:a3:92:e6:07:5d:19:84:4d:
                    36:10:a9:89:49:63:b9:fb:dc:64:42:15:55:30:16:
                    90:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:49:6E:88:E1:5A:64:6C:3B:2D:D1:F5:2B:1D:E9:4C:4B:49:D7:31
            X509v3 Authority Key Identifier:
                keyid:0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:81:5b:6b:dd:15:3c:0e:e1:da:ca:2f:45:a2:25:95:5b:9a:
         9b:7c:48:64:d6:43:51:d3:e6:59:f6:b2:0c:c0:e9:4a:66:ec:
         57:6f:2b:65:63:99:fc:b2:41:94:f6:20:63:58:b4:df:bb:5b:
         dd:10:e1:c2:8f:80:80:bb:93:7d:fe:8d:4a:31:d3:09:2b:08:
         d1:44:a9:53:76:a0:ff:b0:55:00:b0:a1:bb:c7:dc:d6:73:52:
         90:01:9d:31:56:1d:64:4f:3d:f6:d1:de:41:bb:c1:f6:23:16:
         29:75:e2:e7:50:dc:5a:75:4e:94:77:32:50:46:64:74:2e:51:
         73:07:52:61:39:2d:5d:a8:26:d7:83:8a:34:8a:74:ea:8e:f9:
         6a:79:d4:20:cd:0e:0c:01:58:b5:2d:49:6d:83:c3:ce:53:76:
         0a:20:5b:aa:51:87:ff:66:15:94:a6:35:bd:85:1b:80:d1:56:
         ff:84:b6:3d:30:14:00:c0:25:75:7e:28:21:9d:b2:cc:eb:0d:
         06:8b:cc:79:23:b5:6a:26:c9:51:43:8a:76:a7:d0:d1:b7:7c:
         dc:d0:5b:00:98:ef:92:33:a1:49:e9:88:99:04:3a:fb:4c:9f:
         38:22:a3:a2:88:d6:ac:be:89:7a:35:c3:22:e2:fe:6a:f8:3b:
         50:68:45:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:36 2026 by rpki-client