Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
File:                     i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json)
Hash identifier:          W0OJYzNLWWu7fCpjL8r91/kkgVDKUQKcaU0JxjT9rJ8=
Subject key identifier:   83:3A:4D:57:21:8C:E1:C0:1E:0D:8C:69:31:F1:D0:0C:05:40:F3:0D
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Certificate issuer:       /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial:       080B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
Manifest number:          0767
Signing time:             Sun 01 Mar 2026 23:49:32 +0000
Manifest this update:     Sun 01 Mar 2026 23:49:30 +0000
Manifest next update:     Sun 08 Mar 2026 23:49:30 +0000
Files and hashes:         1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: iPKeWzEXjEzPs9hZYoal6ztZRnpEg/u3a2WIKFzxXHw=)
                          2: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: 23FlzfUUG2o+yV463/MzqJtyKQ1WBczJHj5IsGh6xFI=)
                          3: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: Q6rfj53pf8UB4FBvHHs00agRED73Fq/tWE6oYVaqkaw=)
                          4: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: bkBhWlpijpoPZQCX/fri8xyFsJ4YVWckTUwmgGDvtWw=)
                          5: 317095E0A28911ECBC355360C4F9AE02.roa (hash: p5Bfc2KULpN6fd8fZjcqVOrgbkc+6q4BS7c/x1evEL0=)
                          6: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: n0M+4sPO2I1QxTqzwDfkxMGQeXxQFFjm9haxwLReuy4=)
                          7: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: y2QzsDAAMtUIeIRXNVIyp+738veR++Jv2+SSsvzATjs=)
                          8: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: 8XTO+z2V3mKRowJtJ3/VVnjJvJ5dBkEOKZePDCXGrW0=)
                          9: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: +RLs5CzvZXqI61CAHfurXr4hcnlLMlz6cCq54j5zw2Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
                          rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2059 (0x80b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
        Validity
            Not Before: Mar  1 23:49:30 2026 GMT
            Not After : Mar  8 23:49:30 2026 GMT
        Subject: CN=69a4d08c-5f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f1:e1:37:2b:bd:20:6e:fa:1b:57:b2:0e:cb:
                    ac:e9:07:75:de:f6:9a:c5:55:2e:87:c0:7d:21:9d:
                    10:13:e6:bc:cb:91:7a:4f:a8:8c:04:4e:fc:8f:e7:
                    8c:2d:80:a8:03:ea:5a:4e:8a:b5:59:81:85:52:59:
                    13:99:fd:93:bb:26:04:97:c8:9c:de:46:78:3f:b4:
                    80:86:48:24:9d:19:76:b4:d1:ec:7c:fc:19:1d:7a:
                    0e:2d:a7:89:8d:da:cb:7f:fc:ea:f9:6f:1e:29:27:
                    4b:fb:aa:df:8d:50:6a:7a:7a:d7:9e:f6:b1:c8:2a:
                    eb:a6:83:1b:43:e2:6c:ca:68:21:94:63:09:1e:69:
                    78:86:94:a8:33:9c:07:e5:1e:f9:e4:a9:da:67:cf:
                    8e:4e:10:89:c7:6b:4d:f6:86:d6:54:93:1f:71:61:
                    a7:02:5b:db:94:21:12:0d:a3:26:f6:bf:31:0c:24:
                    86:3b:45:5f:c3:9e:b6:4d:71:1d:39:1a:37:92:66:
                    d7:0b:a6:56:05:01:24:88:d6:cb:72:c2:73:44:a9:
                    7e:8c:e8:ea:b1:da:eb:0b:cf:c4:ab:08:97:5f:da:
                    58:ce:c4:8f:f1:a7:16:99:02:f3:1e:8e:9e:00:e3:
                    f7:61:58:26:bf:0e:f2:6b:45:37:c3:db:b9:6b:30:
                    8d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3A:4D:57:21:8C:E1:C0:1E:0D:8C:69:31:F1:D0:0C:05:40:F3:0D
            X509v3 Authority Key Identifier:
                keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:18:5f:11:ce:70:04:7b:a4:e6:8b:40:69:d9:69:a0:b5:2b:
         69:4e:56:30:64:0a:29:a4:08:19:ec:96:ed:0d:06:ef:c9:47:
         46:cb:f0:50:d5:fa:e1:f5:8d:d2:3c:49:99:80:35:eb:4f:30:
         ef:cc:d1:88:24:24:98:c1:bf:97:b5:6b:03:a3:99:a3:56:fb:
         40:00:ec:08:e3:98:87:04:5b:8e:29:1b:47:f5:e7:44:d6:bd:
         98:bc:f6:4d:d7:64:3e:21:2b:58:64:6f:b9:9e:6c:d8:4c:65:
         23:52:c9:01:ac:c7:e3:f0:ec:19:4c:54:5f:82:84:b6:3c:47:
         e9:da:1c:59:48:51:6b:2a:4f:b9:a4:f4:e8:0b:c4:9d:e6:0f:
         c9:13:8d:58:7c:ce:2f:0c:5a:8e:fe:6e:81:47:09:41:62:fa:
         bc:a9:69:9e:f2:d8:92:fd:d5:7b:33:f4:ad:41:77:9c:22:c4:
         1b:54:d1:a4:b3:74:e6:dd:6b:9c:f0:83:0e:44:1f:e8:15:01:
         3e:8f:81:ab:f5:31:ed:12:3e:35:cf:25:31:e4:dc:0d:e4:64:
         ab:31:62:3a:90:f7:5d:93:65:84:1d:2b:3b:64:05:1f:01:34:
         7c:6f:b1:77:b2:78:e3:9c:02:8a:8f:9d:07:2b:00:5b:a6:27:
         ca:61:55:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:43 2026 by rpki-client