Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
File:                     b5wj5AN3j-Ace8lQiL_R5rMoqps.mft (raw, json)
Hash identifier:          3WElhyNr+m6FuC2GZOk95Ul43DjdVAj7UFxIJ853TZk=
Subject key identifier:   5B:B3:C0:E0:A6:1F:CD:E0:F0:06:6C:A1:A9:13:8C:5A:45:A5:C5:F1
Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
Certificate issuer:       /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Certificate serial:       01D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
Manifest number:          01C6
Signing time:             Sun 01 Mar 2026 22:38:26 +0000
Manifest this update:     Sun 01 Mar 2026 22:38:26 +0000
Manifest next update:     Sun 08 Mar 2026 22:38:26 +0000
Files and hashes:         1: b5wj5AN3j-Ace8lQiL_R5rMoqps.crl (hash: 63C2OXYGJW5yr5DVmRDAMojpWZIDSHTlbgpaNfOR+ac=)
                          2: 4F445CCE1FF311F0833FC50BC4F9AE02.roa (hash: NEyPsb5RWjdv+OoFJRvfUjkfYWeqz3AuMZCzrBRpKPw=)
                          3: 512CFEFE68BD11EE87942B4EC4F9AE02.roa (hash: eftqJaT0OiGT6+fWanJpYi7UmZemCJiu4YrLSsovmzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
                          rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
        Validity
            Not Before: Mar  1 22:38:26 2026 GMT
            Not After : Mar  8 22:38:26 2026 GMT
        Subject: CN=69a4bfe2-c436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:48:e4:64:bb:7f:67:7f:f3:82:df:46:7f:b9:
                    a8:41:db:67:0e:3c:74:c5:88:09:ec:d5:ff:c8:62:
                    fc:d6:fc:bc:4a:5e:b1:03:8a:a1:d5:3b:ef:eb:4b:
                    1d:5c:5d:6d:ab:98:9d:af:8a:56:17:0a:e1:4f:ee:
                    50:1f:d0:d7:9c:c4:77:ea:20:fb:1e:29:fa:75:3e:
                    8d:2d:fd:df:fb:4e:af:53:5b:b2:ed:da:a1:c6:d4:
                    b5:bc:1d:f2:52:da:43:26:5b:e8:85:c5:28:52:60:
                    6b:64:7b:ce:2b:7c:49:62:98:09:93:5f:48:34:a7:
                    6c:fe:4b:e9:3a:e8:fb:26:d5:33:cd:c2:c7:46:b0:
                    1c:7a:60:39:b8:2d:ef:9d:4d:40:63:e4:68:c0:73:
                    b5:aa:25:cf:ee:07:38:17:09:43:63:dd:db:9e:16:
                    48:db:fb:e4:8f:45:35:b7:b7:12:9b:f3:78:68:fb:
                    51:5f:cb:18:9d:d8:f6:26:0c:f4:1a:42:22:2d:64:
                    76:d9:3b:db:fe:f8:56:cc:48:e2:2b:e1:c3:1f:9a:
                    db:d7:73:4c:fc:f9:ff:dc:e7:7f:a0:71:c0:66:8f:
                    82:72:51:ad:22:13:e8:f1:2a:93:7b:1a:42:12:c9:
                    c8:a6:db:9e:80:bf:5c:0a:2b:99:06:51:5a:63:7a:
                    e7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B3:C0:E0:A6:1F:CD:E0:F0:06:6C:A1:A9:13:8C:5A:45:A5:C5:F1
            X509v3 Authority Key Identifier:
                keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:61:9a:a6:35:45:db:e0:e7:76:38:73:b2:3c:a4:37:13:4e:
         0f:3e:46:b9:66:d3:d8:52:9c:53:e0:75:d4:f3:f6:f6:22:7d:
         a5:bd:d8:cc:b9:bc:e2:c1:c2:6a:7f:17:c8:0c:60:09:02:e3:
         c6:7a:01:39:14:01:0c:6e:0c:6d:26:7d:f8:b8:fa:f1:a0:3f:
         ac:d5:36:c8:a8:dc:e4:32:e2:c7:c9:31:60:06:7b:79:33:87:
         4c:d3:d4:3c:4e:a7:e3:ed:8d:3f:1a:8f:d7:67:4b:f4:52:f6:
         13:04:9e:36:bf:05:03:14:46:a8:7d:cc:68:01:f6:1e:31:34:
         4c:14:ff:89:01:51:f5:8f:e4:8e:ed:a9:3e:7b:74:c2:cc:4c:
         dc:4d:a7:9d:9e:09:d6:80:c3:6d:4d:48:e9:5a:6e:c3:9f:ca:
         f2:22:a2:6b:30:d3:e3:4c:01:bd:e2:97:84:43:b3:58:fa:32:
         12:61:1c:e9:b1:5c:de:2e:48:50:15:0d:36:dd:48:f6:43:99:
         97:46:5f:7a:18:d0:1a:ee:32:a3:89:9d:43:20:ad:29:77:a9:
         75:72:94:0b:33:7b:63:1e:2c:e3:8e:63:7a:ce:12:1f:ea:b1:
         12:5b:7b:ad:6b:ee:79:0d:1d:21:42:78:36:e9:2d:ea:62:ae:
         bf:30:0c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:05:38 2026 by rpki-client