Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft
File:                     _IC0m1BzMv1MnJLdXiei38qAZNo.mft (raw, json)
Hash identifier:          umdSTBodymS0cVv9mQDERQPsysiAPgRUXWbu8UIkdEo=
Subject key identifier:   0C:01:33:F3:6E:68:2B:3A:24:D3:E9:95:D3:7D:87:41:1D:67:4A:6C
Authority key identifier: FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA
Certificate issuer:       /CN=A91E13D0/serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA
Certificate serial:       05B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft
Manifest number:          05AB
Signing time:             Mon 02 Mar 2026 02:31:12 +0000
Manifest this update:     Mon 02 Mar 2026 02:31:09 +0000
Manifest next update:     Mon 09 Mar 2026 02:31:09 +0000
Files and hashes:         1: _IC0m1BzMv1MnJLdXiei38qAZNo.crl (hash: p1mVI0m5Yrwl2YKzisy1zvpO82APN3xnO2RlIyz3K+c=)
                          2: E86C4B1E04AE11EC92C8D079C4F9AE02.roa (hash: wf2a4w67T5LlxEVDGfGnefxaFfP9ax9DaJiTme9ygjQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl
                          rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:31:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1460 (0x5b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E13D0, serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA
        Validity
            Not Before: Mar  2 02:31:09 2026 GMT
            Not After : Mar  9 02:31:09 2026 GMT
        Subject: CN=69a4f670-e675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:59:88:01:59:ce:9f:93:06:48:64:64:bb:3b:
                    6b:6c:c8:d2:c2:0c:a5:d5:07:e9:12:6d:c1:51:ce:
                    48:61:88:5c:fa:d1:2f:40:af:e2:d7:b3:3e:ef:79:
                    95:5f:7c:ee:ab:22:47:35:5d:7e:e8:d6:d1:ad:1d:
                    97:9c:75:19:35:8b:37:e9:3c:9c:35:4d:57:e0:fa:
                    93:84:71:c1:84:57:3e:d6:36:99:89:75:b1:1a:90:
                    b2:d6:08:8b:5b:82:d0:31:ce:ba:55:f0:fa:db:52:
                    14:da:65:47:15:64:91:51:5d:d5:34:c8:0c:eb:60:
                    83:63:9e:7a:f2:ee:c9:9d:d2:af:3f:41:1c:89:7d:
                    97:74:a7:7b:df:7e:5c:5f:41:41:97:c2:a9:e6:43:
                    ab:47:05:82:c2:f9:4f:8f:e5:d1:4b:c1:d9:b1:15:
                    b8:9d:69:30:b9:3f:2a:de:7f:cf:13:e0:44:d8:b2:
                    96:43:01:37:23:28:20:ae:d7:05:a6:3d:a6:9d:ae:
                    a5:15:df:8d:83:4d:08:7e:37:b5:43:b2:d9:9b:7d:
                    25:ea:60:57:ad:17:50:ac:be:85:5b:dc:61:3f:13:
                    d2:35:95:dc:ea:01:4a:75:7e:ea:75:96:96:a1:52:
                    eb:80:89:30:a5:56:3c:6b:b8:db:1c:70:9f:44:3a:
                    89:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:01:33:F3:6E:68:2B:3A:24:D3:E9:95:D3:7D:87:41:1D:67:4A:6C
            X509v3 Authority Key Identifier:
                keyid:FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:1e:6b:66:68:ad:b8:cd:49:54:aa:47:6f:53:df:e4:43:0d:
         b2:b1:47:32:00:02:70:2a:58:28:34:c8:11:48:95:4b:00:d3:
         8e:9e:dc:6b:e5:71:90:d8:67:c1:03:f9:8b:2f:2a:c7:5e:98:
         d4:14:83:de:e6:0a:fb:04:7f:39:78:04:f2:c6:b8:ce:d9:bc:
         69:6b:c0:e4:d7:87:69:38:2f:23:f1:28:34:ac:7c:30:c8:c3:
         dd:3d:5b:0a:f6:7e:62:33:81:40:22:fc:1d:29:26:e2:e5:e2:
         18:77:2e:fd:fc:31:33:b4:7e:44:45:7c:77:03:fa:4b:e2:62:
         8a:c6:17:93:93:22:07:fd:18:42:48:0f:40:6a:5e:40:d9:4a:
         14:8d:b0:09:e9:6c:d4:f4:4f:80:c6:bf:6f:85:22:d5:ca:11:
         6f:3d:f9:69:b3:4e:ff:d5:2e:31:39:7b:7f:36:a7:ff:aa:e1:
         45:1c:18:8d:96:e7:7f:63:f2:69:10:3b:90:21:4a:40:17:cf:
         40:1d:da:6b:79:72:24:5f:b9:48:74:83:24:32:67:4d:ec:44:
         11:f5:63:42:4e:4b:f3:ff:98:03:c4:79:eb:78:68:06:1f:d0:
         9f:e2:a5:d5:13:b6:49:bf:09:69:18:a0:4c:57:9b:8f:6e:2b:
         5f:6c:87:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:05 2026 by rpki-client