Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft
File:                     4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft (raw, json)
Hash identifier:          A4U5ZLN+zR0tGMFYJ/4gRCtxDPLJRmtiLQxYrOHQoG4=
Subject key identifier:   46:FB:16:8E:CF:B8:19:26:F4:B3:45:7B:E7:B0:3E:33:83:41:57:19
Authority key identifier: E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24
Certificate issuer:       /CN=A91E0CA1/serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624
Certificate serial:       0B4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft
Manifest number:          0B45
Signing time:             Mon 02 Mar 2026 02:14:28 +0000
Manifest this update:     Mon 02 Mar 2026 02:14:26 +0000
Manifest next update:     Mon 09 Mar 2026 02:14:26 +0000
Files and hashes:         1: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl (hash: HNPhpJuCZVdPbnXM57jKqyCZNCcSY8Hizply3E7vLCQ=)
                          2: 29B9D5B8524111EABEF0A119C4F9AE02.roa (hash: RExF8CfPyMc1mjC/DYZwNJORmf6sh9d0s+P6jynoX8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2893 (0xb4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0CA1, serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624
        Validity
            Not Before: Mar  2 02:14:26 2026 GMT
            Not After : Mar  9 02:14:26 2026 GMT
        Subject: CN=69a4f283-22bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:62:45:ee:64:e7:e2:aa:25:4e:20:0d:7c:b6:
                    a1:b9:02:73:4d:ec:9f:14:00:c3:05:b3:e9:47:da:
                    cb:b3:b8:cf:8a:b8:9f:f3:bc:ff:0e:db:70:76:8c:
                    3a:dd:ff:58:60:5e:f3:f1:14:66:30:9d:ed:af:85:
                    a3:2a:2f:5a:fa:85:50:66:cc:92:1e:da:27:cc:36:
                    78:5d:7c:3c:1e:5a:77:8d:15:d6:93:d2:9f:64:84:
                    f3:bd:6c:52:7e:ef:d1:3d:5a:bf:c4:d4:f4:bd:53:
                    ae:86:47:21:c6:f1:41:08:f8:a2:92:5a:3b:0b:8d:
                    1b:95:e2:00:ab:a7:6b:7a:9e:7e:dd:10:16:a7:ee:
                    74:dc:84:fa:c8:cd:84:8b:6f:cd:e4:9d:da:49:f4:
                    40:32:e6:04:66:18:46:57:a4:e4:ba:ba:66:12:51:
                    f1:2a:ae:3c:e7:79:76:2e:0f:62:60:22:5f:5e:68:
                    d2:3c:dc:28:71:51:cb:a6:75:86:df:6a:2f:74:af:
                    d5:9a:53:dd:8f:6d:47:45:dd:52:90:43:7e:bb:d7:
                    fc:7c:55:ea:a2:ba:d0:5b:dc:f8:4f:c2:4d:3a:b2:
                    ba:47:32:ea:6e:90:67:bf:19:1d:5e:d6:44:fa:79:
                    03:78:df:d7:ca:a9:37:3b:01:ce:4b:25:e9:95:99:
                    1e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FB:16:8E:CF:B8:19:26:F4:B3:45:7B:E7:B0:3E:33:83:41:57:19
            X509v3 Authority Key Identifier:
                keyid:E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ac:b7:83:3b:eb:34:01:2f:39:ba:53:4f:2f:1b:46:e1:1f:
         51:b3:fc:41:b8:eb:1b:a8:30:a8:9f:17:98:cb:4b:72:ab:18:
         64:f6:28:51:ea:33:a7:a3:ae:83:7a:cb:29:ad:f0:84:3b:db:
         45:ed:7f:5e:74:f6:3e:e9:08:52:3b:5e:0e:5e:e8:6b:e5:76:
         5f:cb:1f:51:6d:f4:00:7c:97:83:a3:00:7b:8e:0c:dc:be:59:
         b0:d2:a1:e3:33:45:b5:17:be:ef:f9:ca:7f:d8:3b:8b:8a:50:
         fb:44:c3:71:61:c7:3d:9e:60:dd:e6:4f:f6:27:f6:4f:11:63:
         3c:bc:dd:27:1e:6a:fd:7d:5a:1d:00:a7:a8:85:c0:d8:40:3f:
         eb:5c:ce:ff:53:fd:1b:c8:8b:d3:d1:8c:88:67:6e:cd:4e:0c:
         39:f3:d3:d5:2b:e9:3e:59:f4:34:bb:f1:f5:a5:b4:18:8b:3f:
         9b:28:d1:1b:09:04:0b:b1:1c:4a:02:bc:8f:a1:7b:05:46:eb:
         ce:1f:f9:8d:bb:4b:e7:ca:00:04:4b:b0:de:9e:e3:9a:8c:3a:
         e5:77:f0:06:6e:96:2e:af:b7:7a:13:65:27:07:33:bc:20:3f:
         08:68:b6:b0:b3:83:88:74:51:e3:c0:eb:43:a1:1c:a3:83:81:
         69:f7:92:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:34 2026 by rpki-client