Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
File:                     pOaGeeZ7phon9Pib0JKu5cH3ITk.mft (raw, json)
Hash identifier:          eCA/L93r1qJ23PDU8VXuiyKBCwjAF1ierCGtcX0MgA4=
Subject key identifier:   48:2C:DC:F1:F7:2B:8E:CF:51:BD:07:99:BD:05:6A:69:CA:07:DE:4A
Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39
Certificate issuer:       /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
Manifest number:          FD
Signing time:             Sun 01 Mar 2026 07:15:40 +0000
Manifest this update:     Sun 01 Mar 2026 07:15:39 +0000
Manifest next update:     Sun 08 Mar 2026 07:15:39 +0000
Files and hashes:         1: pOaGeeZ7phon9Pib0JKu5cH3ITk.crl (hash: DU1RnsArka7pYqtNu4kPc+wX06x+jCU+uuiHdmftOA0=)
                          2: FB03B42C927411EF870E655AC4F9AE02.roa (hash: 1Pw3F4k0O1ke+ThDTspVWhZWgUjv2zsb15CKjPdj4IQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl
                          rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:15:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1B48, serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
        Validity
            Not Before: Mar  1 07:15:39 2026 GMT
            Not After : Mar  8 07:15:39 2026 GMT
        Subject: CN=69a3e79c-36a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:65:b1:ad:22:54:a5:3d:8a:9a:5b:c7:3e:
                    c3:11:78:c1:16:09:73:e6:f2:03:7e:2b:5e:32:a2:
                    3e:c8:20:f1:3b:26:7a:95:f4:92:af:84:8b:16:31:
                    65:37:c8:15:4c:b1:fc:19:16:12:3f:64:7c:0e:a5:
                    26:d8:fb:c6:de:7c:8b:c5:ce:93:06:cf:26:25:fa:
                    01:3a:01:65:0e:fa:60:44:eb:fa:0a:4d:9d:10:e6:
                    bb:74:69:ae:6f:54:21:2c:68:19:8e:5a:2a:ac:3a:
                    8f:2b:e6:1c:6c:2d:da:c7:d1:da:0d:89:33:b6:89:
                    58:aa:f0:5d:4e:29:2b:85:87:f4:90:b4:98:9d:a5:
                    97:5e:07:c2:65:15:db:6c:a6:c6:df:77:17:6e:63:
                    48:2f:44:78:be:ff:c4:8c:55:ed:e6:be:b6:07:52:
                    42:73:e6:e1:c3:95:37:21:93:5c:3e:7e:5f:24:4b:
                    d3:26:fd:2a:dc:34:4c:33:83:31:93:06:67:d9:1f:
                    81:1b:e9:0c:17:8a:b5:5f:ad:13:65:6a:c7:11:be:
                    a1:49:e1:0a:55:1b:17:8e:b1:46:dc:9f:1a:58:db:
                    53:27:19:c2:4a:ce:cf:11:08:fb:7f:56:14:63:a4:
                    ba:70:c4:1c:f7:2e:aa:ee:7c:b9:c7:db:25:2a:c6:
                    5a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2C:DC:F1:F7:2B:8E:CF:51:BD:07:99:BD:05:6A:69:CA:07:DE:4A
            X509v3 Authority Key Identifier:
                keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:96:82:98:30:3c:41:88:92:1e:da:7b:ee:1f:f9:3a:6e:fc:
         e9:85:bd:c4:41:9e:39:fb:ad:85:89:06:83:a4:4d:0f:d7:09:
         56:00:56:09:dd:55:08:cd:26:a6:44:25:1b:e8:e3:42:e4:93:
         a7:36:09:63:f7:00:6c:07:55:a7:98:7a:54:c1:12:be:dd:d6:
         d0:d2:82:9b:de:c4:f9:86:87:0a:5d:ff:2b:45:a6:86:7c:42:
         f3:58:7d:e6:42:fe:53:46:1c:4c:0f:55:79:cd:95:a2:17:a5:
         1f:0b:d7:57:bf:b5:87:2b:56:07:b9:23:b2:3d:29:a6:35:cc:
         b7:0f:66:92:f1:ca:2f:20:51:38:36:99:20:f0:f0:dd:4d:ac:
         31:4f:70:08:b3:8d:25:95:fd:0a:ed:36:fb:27:e3:69:35:ef:
         38:03:3f:e2:a7:82:d4:31:1b:50:43:54:d1:fc:e8:84:f6:47:
         e0:a3:ef:60:ca:c7:5d:05:e5:3a:83:c4:1c:d7:39:b2:11:11:
         92:a9:50:ce:72:1f:36:d5:77:87:31:5c:72:f5:a5:61:70:0b:
         dc:1d:42:ef:28:8d:61:89:91:5b:f9:40:e1:3e:bc:98:a3:9c:
         54:70:d9:72:0a:08:87:87:09:53:23:f3:54:77:74:bd:78:21:
         bf:3f:fe:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:43:39 2026 by rpki-client