Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
File:                     n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft (raw, json)
Hash identifier:          6YJsdS02riPhSVFm3YYSSaaLOdTgqvhDdg0r22jNjE0=
Subject key identifier:   68:74:0F:04:BF:FB:35:EA:D7:9A:C3:58:55:7A:6F:64:3A:C4:83:12
Authority key identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5
Certificate issuer:       /CN=A91D7578/serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5
Certificate serial:       0224
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
Manifest number:          0222
Signing time:             Mon 02 Mar 2026 02:51:47 +0000
Manifest this update:     Mon 02 Mar 2026 02:51:44 +0000
Manifest next update:     Mon 09 Mar 2026 02:51:44 +0000
Files and hashes:         1: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl (hash: Elx5wwQrnBAtWcm4AXb1Y/hJPDcqCJhnOFFo1IK5t2o=)
                          2: 15F2CAD0D0AD11F08058D727C4F9AE02.roa (hash: YLMA9nTAlWfeJbokNuZSOeyCNtPrV//prQQ6jsVgAzw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl
                          rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7578, serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5
        Validity
            Not Before: Mar  2 02:51:44 2026 GMT
            Not After : Mar  9 02:51:44 2026 GMT
        Subject: CN=69a4fb43-e552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:93:cf:fc:eb:b2:96:f2:fe:72:89:52:2e:
                    83:64:a0:5f:e5:f2:71:aa:03:40:a1:74:a1:19:b3:
                    94:d0:73:36:59:3d:f1:42:9b:93:2a:66:13:c4:51:
                    f7:a0:e9:fc:12:97:17:43:a5:b9:1b:89:e4:0f:ec:
                    48:46:e1:7c:19:5b:7e:d6:62:09:16:ec:d9:a5:f6:
                    29:87:43:22:ae:0e:7a:4e:a4:c9:94:fe:c1:44:54:
                    ec:0a:32:42:9e:56:a9:df:e3:10:07:e9:69:e0:2d:
                    43:53:d4:54:80:07:70:46:c2:d0:bf:4f:30:ad:53:
                    49:49:ac:1f:76:98:f8:ee:07:ac:99:00:0a:b6:cb:
                    3e:a6:48:76:bf:a6:4d:48:72:a7:bc:04:b9:78:74:
                    78:8a:d7:ec:c5:a9:89:57:1b:32:4a:16:22:1d:60:
                    cc:b5:02:32:21:54:06:e5:89:cb:c4:0e:68:a1:79:
                    02:bb:96:09:c9:b3:5a:6d:76:56:3d:06:52:7e:ea:
                    de:39:77:0f:dd:88:e1:47:b1:ca:7e:59:eb:ef:83:
                    f2:7a:d2:3c:ea:2c:54:e2:40:c1:93:0e:4a:6e:5e:
                    54:d2:60:18:52:ea:24:b0:ca:c7:e9:e6:af:bd:a0:
                    6d:a5:12:f5:de:6e:36:77:c3:2a:6a:84:96:66:32:
                    d5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:74:0F:04:BF:FB:35:EA:D7:9A:C3:58:55:7A:6F:64:3A:C4:83:12
            X509v3 Authority Key Identifier:
                keyid:9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:76:33:f6:ce:f5:d3:fa:10:13:26:d5:33:b2:48:33:90:a8:
         29:5d:1d:b7:92:12:e5:af:3f:19:d8:b1:32:8f:ce:86:05:29:
         9b:11:be:13:b6:e5:04:13:33:db:8b:89:51:76:47:d9:fd:e6:
         57:90:bc:03:33:ba:99:26:c6:39:09:d2:a9:94:70:bc:59:6b:
         e6:c2:c9:4a:24:8d:bd:6f:b9:8d:80:a3:e9:8f:33:52:bb:70:
         6c:05:35:09:1c:6a:3d:1f:82:bf:b7:dc:15:da:87:9c:7b:95:
         77:9f:aa:97:08:f7:97:18:e3:02:5a:f2:76:0b:2b:72:a8:d3:
         5b:8c:1c:61:eb:d7:c0:59:89:f4:0d:86:10:23:b2:1c:3e:22:
         38:00:43:b7:19:7f:27:73:39:7d:ca:1d:b0:8f:fb:db:5c:22:
         28:55:80:a2:e3:fa:2a:f3:7d:c7:09:17:d9:2a:68:f9:17:c0:
         7e:c7:a8:df:ae:a0:98:4c:56:a4:fb:8d:78:52:17:f9:b0:54:
         78:89:cd:b0:f1:da:8a:bf:73:8e:0f:be:ce:1e:b6:c9:31:40:
         3d:f1:fd:02:fe:08:17:b8:8c:f5:84:b5:a5:ee:06:7c:8f:d9:
         a7:4a:2b:fd:23:21:bc:c7:4c:af:9c:5b:ee:96:6f:ee:3e:5f:
         16:d8:aa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:54 2026 by rpki-client