Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
File:                     sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft (raw, json)
Hash identifier:          rOdF86OlTPhgpC45E0Vnzc1BERqPqgfSteox0VGsrF4=
Subject key identifier:   E4:1B:67:6C:54:8C:A7:47:17:B3:15:EF:BD:B1:26:5E:7B:A8:F5:03
Authority key identifier: B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76
Certificate issuer:       /CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76
Certificate serial:       01F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
Manifest number:          01EE
Signing time:             Mon 02 Mar 2026 01:40:23 +0000
Manifest this update:     Mon 02 Mar 2026 01:40:21 +0000
Manifest next update:     Mon 09 Mar 2026 01:40:21 +0000
Files and hashes:         1: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl (hash: qDnqZmEEZiae/qhVok+d1LEjqqkse05PLH2fQiOTrZ0=)
                          2: E7B472CE2DC811EEBADF8E61C4F9AE02.roa (hash: 8y7hfK3jGDMBr1f4yhw0XCvK5AAMWqEEBB2+0ezh2M4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl
                          rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:40:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5320, serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76
        Validity
            Not Before: Mar  2 01:40:21 2026 GMT
            Not After : Mar  9 01:40:21 2026 GMT
        Subject: CN=69a4ea86-772a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8d:09:fc:83:d0:83:b0:23:48:c8:53:73:7d:
                    23:e7:c7:ae:bd:52:f3:44:a1:f2:f7:b8:14:80:29:
                    78:1c:8c:cd:de:6e:04:7c:be:39:76:fd:23:66:28:
                    2a:61:06:27:c2:eb:ff:bd:5a:db:dd:eb:01:22:a5:
                    ae:d3:90:d0:7b:0f:a0:89:4c:a2:0e:fc:01:b2:21:
                    e1:d1:53:59:d4:23:9c:24:6c:07:cb:8e:7b:b7:f3:
                    ae:bc:d9:5d:02:6e:35:a9:25:47:90:b4:b3:ca:21:
                    92:72:55:3d:92:e7:37:f7:77:94:fd:ff:11:42:ce:
                    9d:bd:26:78:f9:14:1a:78:aa:45:7b:18:9e:a9:27:
                    bb:79:0e:33:2e:e8:2b:1a:db:81:08:97:c1:e6:59:
                    79:22:94:a7:8a:b8:0a:0e:ed:26:0f:b0:9f:9f:1a:
                    63:44:8f:df:c5:12:79:55:40:bd:6c:4c:85:d7:df:
                    d1:c0:a1:f9:9e:c6:3d:59:d4:af:24:27:bc:d8:c1:
                    8e:df:8d:a4:0e:ac:51:0e:02:67:91:29:ab:1e:02:
                    01:c3:8e:fc:ff:be:8e:58:51:62:a1:3c:a1:5b:5d:
                    28:af:fb:43:0f:e7:31:e3:42:e2:00:28:0a:46:0f:
                    7c:af:55:b0:b3:c4:40:70:37:46:9a:8a:2f:f8:44:
                    8c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1B:67:6C:54:8C:A7:47:17:B3:15:EF:BD:B1:26:5E:7B:A8:F5:03
            X509v3 Authority Key Identifier:
                keyid:B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:70:a9:32:d0:30:58:b2:48:06:4d:4e:ec:de:e6:c9:05:2c:
         2a:4a:da:5d:06:fa:7b:0f:34:7f:81:d7:55:f1:b9:26:92:c1:
         59:78:8e:e7:c6:d7:19:d9:79:fd:ec:3b:a4:d3:0e:15:b6:a4:
         3a:77:fc:76:b6:24:df:f8:31:c8:47:8a:58:15:19:10:1b:5b:
         f3:63:78:9d:a7:d7:fb:79:39:a1:a0:0d:aa:59:b5:4f:89:29:
         ec:ba:d8:51:52:e4:9e:38:f4:0f:61:d3:47:86:a6:d2:e9:fe:
         d0:de:81:e8:a6:63:42:6e:4d:6d:d8:f7:78:d6:00:c9:75:a2:
         e3:4e:b2:3d:73:33:70:ff:1f:e5:67:42:9e:b4:58:7f:ef:b7:
         2d:98:e1:b3:6a:14:78:f0:e2:f5:70:a1:85:29:47:07:31:5c:
         eb:a8:92:ab:e5:9d:78:b1:33:e8:66:2f:06:7d:d5:97:ff:bb:
         50:54:a7:43:58:51:c5:32:54:9a:ba:af:f5:0c:d5:99:34:64:
         8f:a4:e3:30:76:a8:0f:82:b6:35:f4:c2:30:cb:96:27:ef:ca:
         97:98:23:4a:11:2c:f4:e8:b8:2b:1c:2f:15:fc:72:4d:ed:7e:
         36:77:4d:cb:09:30:59:1f:10:5d:b4:4c:8e:42:a6:a2:22:f1:
         be:1a:c0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:26 2026 by rpki-client