Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft
File:                     4JI7Cl99XGi66s5BQV9CpSDXSyo.mft (raw, json)
Hash identifier:          mvfG0nKz2VS3zZGr7TuE/gNvjJaTgDqZaeaH4j2jkas=
Subject key identifier:   E6:DC:C5:D9:DD:4D:78:08:6B:FF:11:8D:9C:57:65:FC:78:DC:60:0A
Authority key identifier: E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A
Certificate issuer:       /CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A
Certificate serial:       0BA3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft
Manifest number:          0B9A
Signing time:             Mon 02 Mar 2026 02:21:34 +0000
Manifest this update:     Mon 02 Mar 2026 02:21:31 +0000
Manifest next update:     Mon 09 Mar 2026 02:21:31 +0000
Files and hashes:         1: 4JI7Cl99XGi66s5BQV9CpSDXSyo.crl (hash: QE/AjIGRkvLrZzvb5qjWRQBQMb1tO0RztAUVrGnBTck=)
                          2: 4CC0341641A311EABAADCE0AC4F9AE02.roa (hash: jcGn5LQyZREYBtaXQtgXl8b0IO9nxBQToRNbngc8p1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl
                          rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:21:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2979 (0xba3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9E49, serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A
        Validity
            Not Before: Mar  2 02:21:31 2026 GMT
            Not After : Mar  9 02:21:31 2026 GMT
        Subject: CN=69a4f42e-80e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:44:ef:96:8b:be:ee:92:03:fb:64:e0:c6:15:
                    d0:4b:42:75:21:b5:10:8f:44:8a:81:eb:09:b1:93:
                    cb:5b:a6:be:d1:47:c1:0f:bf:9a:9e:52:a1:11:40:
                    d2:e2:2a:7e:b9:24:20:1a:6b:b9:5d:77:22:b6:14:
                    46:5f:c8:46:1f:bc:5b:dd:95:3e:75:23:9b:24:33:
                    c0:ad:b8:51:8b:5f:47:aa:da:ce:36:0a:b1:a2:c6:
                    73:82:d8:63:17:8d:2f:d2:4e:e7:ab:65:f3:24:5c:
                    3c:5c:e7:7a:1e:de:82:e8:62:9e:4d:ab:6e:16:a5:
                    cb:9c:bd:df:dc:f0:55:bb:c3:ea:9b:fd:b1:84:9a:
                    d1:3a:34:80:69:43:c1:28:b7:7b:83:c3:7d:8b:25:
                    77:82:ab:fe:5c:05:58:3b:83:a9:c4:ee:19:44:51:
                    d7:74:a5:4b:1b:96:3e:fa:09:a8:a3:5b:ed:b0:d9:
                    c6:0d:e7:e3:c9:e4:59:54:0a:ef:0b:7a:2c:f4:95:
                    48:1d:28:5f:32:1c:2b:b4:43:f2:ba:b4:3c:2e:3b:
                    87:84:68:c7:2b:79:f8:c4:d9:fb:b8:54:a7:cb:6a:
                    ac:6f:44:ea:a5:bf:6e:5f:e5:05:27:7b:94:e8:f3:
                    f2:b2:0a:11:e4:50:7d:12:0e:85:ac:93:bd:bc:e2:
                    2f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DC:C5:D9:DD:4D:78:08:6B:FF:11:8D:9C:57:65:FC:78:DC:60:0A
            X509v3 Authority Key Identifier:
                keyid:E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:8d:b1:8f:55:de:30:5a:ba:6a:fc:ae:f2:d9:8c:c1:e6:7f:
         54:52:60:3a:96:39:55:cd:6b:61:82:3e:eb:e0:38:b2:16:10:
         10:0c:dc:d5:88:0b:e1:0c:aa:92:c9:65:d9:f9:48:c5:1b:8f:
         aa:91:97:79:d0:bb:ff:a5:cd:7b:61:fa:25:f1:17:be:6c:20:
         57:00:70:1d:e3:eb:0a:56:f2:e1:39:18:5f:04:e8:ea:0f:79:
         8e:a8:90:60:12:a7:19:12:6b:e4:38:05:bf:92:28:ee:f8:8b:
         c8:3f:16:46:ac:71:73:ee:82:28:d3:a5:31:a9:49:99:90:6b:
         c1:87:01:09:7f:cf:bf:4a:7a:9f:21:63:55:e6:47:82:c9:5f:
         bd:20:fb:d8:ec:6d:51:1e:24:16:16:60:ea:97:82:b4:7d:38:
         71:95:ca:b0:ac:c8:06:94:58:71:6b:23:67:97:8c:af:da:f2:
         fb:84:76:f3:6e:88:db:2c:cc:da:ed:ec:3b:38:93:21:fd:ff:
         c1:63:df:1e:9c:ae:e4:50:a6:5c:98:ee:eb:08:2c:0b:59:e1:
         d5:36:8b:12:43:32:d5:66:94:9b:53:c4:97:ed:98:92:94:d2:
         c1:15:02:cc:3b:4a:de:87:81:e3:08:4c:53:95:e6:72:27:ea:
         83:a7:a9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:15 2026 by rpki-client