Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft
File:                     owQJVBg5BUscPhXRmD19vYp9ZII.mft (raw, json)
Hash identifier:          aPOuInB92ZuWV0EFMKdvVz9Ym7MwPqTubuFvBAlr28g=
Subject key identifier:   61:F2:9D:56:BD:04:91:4D:80:A7:35:76:75:DB:49:93:DB:54:B9:0D
Authority key identifier: A3:04:09:54:18:39:05:4B:1C:3E:15:D1:98:3D:7D:BD:8A:7D:64:82
Certificate issuer:       /CN=A91D9E03/serialNumber=A30409541839054B1C3E15D1983D7DBD8A7D6482
Certificate serial:       042B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft
Manifest number:          0426
Signing time:             Sun 01 Mar 2026 01:07:49 +0000
Manifest this update:     Sun 01 Mar 2026 01:07:49 +0000
Manifest next update:     Sun 08 Mar 2026 01:07:49 +0000
Files and hashes:         1: owQJVBg5BUscPhXRmD19vYp9ZII.crl (hash: tulOHhPoFcH2lUXV3mHWH9hWDQElyFD8HJ+t4TMQIJU=)
                          2: 521DCED89C5911EC97E58855C4F9AE02.roa (hash: RMf1DdD1DS2nxhRAowLM9D2bY7BGy11YOR4lYZXYWbE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.crl
                          rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1067 (0x42b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9E03, serialNumber=A30409541839054B1C3E15D1983D7DBD8A7D6482
        Validity
            Not Before: Mar  1 01:07:49 2026 GMT
            Not After : Mar  8 01:07:49 2026 GMT
        Subject: CN=69a39165-947e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b3:ae:a2:60:62:46:4a:6d:28:89:fb:5c:8d:
                    7d:53:67:e1:1b:26:5f:ae:94:55:e7:64:30:bb:4e:
                    f0:41:66:c6:e2:1d:e3:57:06:5f:3e:7d:fc:6e:c2:
                    c4:ac:69:34:95:12:97:79:c3:24:03:a9:57:6a:7c:
                    78:d8:91:e3:88:09:59:00:2b:b9:a2:a1:bf:26:65:
                    6a:bb:19:cc:a7:09:3b:16:d8:ba:ab:8f:3b:98:02:
                    69:1a:a0:e1:8b:a5:77:eb:43:e8:23:67:2c:ee:f6:
                    81:2d:e4:3a:1d:00:be:b3:fc:af:5d:fa:4e:aa:8c:
                    24:52:60:5f:53:5a:22:2d:d7:cb:ea:05:f2:d0:72:
                    a2:e7:86:e7:fe:70:b2:ae:a6:39:90:61:1e:91:96:
                    19:7d:24:d2:b6:dc:4b:32:db:70:bf:5c:5f:9a:61:
                    05:f2:35:7b:1b:35:e4:a8:e9:9d:43:13:10:32:48:
                    92:d0:91:58:5c:05:1a:29:84:4b:6e:f4:64:23:df:
                    3b:45:ef:cb:5f:a8:ec:fc:ed:f6:85:a1:94:e0:69:
                    a9:4c:d3:c6:e7:ec:52:ec:71:45:e4:f7:87:64:6c:
                    d8:aa:03:f4:eb:bc:4e:e6:ad:ef:bc:56:e9:8b:1c:
                    78:43:1c:da:5e:3d:76:81:5c:96:0a:f5:69:73:62:
                    80:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F2:9D:56:BD:04:91:4D:80:A7:35:76:75:DB:49:93:DB:54:B9:0D
            X509v3 Authority Key Identifier:
                keyid:A3:04:09:54:18:39:05:4B:1C:3E:15:D1:98:3D:7D:BD:8A:7D:64:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:58:2d:75:e9:32:fc:11:b1:27:0c:7c:cf:f2:87:5a:8b:e4:
         12:ec:17:91:77:db:66:54:dd:14:77:5d:f4:c4:bc:41:4d:ff:
         78:43:b3:14:58:39:bd:67:cd:6b:75:20:63:8f:b6:1d:6c:6e:
         19:67:3d:06:13:f6:01:e1:95:27:c0:f6:8d:54:c2:f8:96:62:
         08:b4:45:b7:b5:9f:bf:2f:7f:29:8d:0d:cd:d4:3c:43:36:71:
         54:49:e4:b9:78:92:1d:c8:d2:d9:07:1f:2d:4d:d4:d1:0f:c5:
         80:8a:1f:4b:9e:ff:76:ce:3a:9f:0e:b5:04:d4:5a:bd:fe:64:
         c0:1c:91:94:e8:ca:e3:58:85:ce:5f:cf:78:ae:41:27:68:29:
         6e:be:12:ea:8c:52:79:43:fe:cc:06:6c:e0:45:4f:c4:d1:93:
         ee:3d:b5:cd:43:e3:a2:71:63:89:99:99:c6:d2:b9:93:40:e1:
         bd:3e:1f:75:38:7b:d3:db:25:2b:ff:90:13:d9:89:28:59:27:
         20:ff:dd:62:ec:c7:51:d9:3e:19:8d:00:b0:d1:aa:17:22:6f:
         13:5e:50:b9:a3:2e:69:c0:8e:99:67:83:7f:ed:a7:aa:fc:8c:
         df:a7:70:61:d3:ef:8b:f3:a2:4d:13:1c:31:37:a4:3e:7a:ae:
         4c:26:c9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:20 2026 by rpki-client