Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft
File:                     RisW0yeXLqdxImoBWItSBe_qRJY.mft (raw, json)
Hash identifier:          PC6qx5ujgVOd9TToconPA3xWZ+K5giHwn/sCPred78Q=
Subject key identifier:   48:E9:6B:A1:D3:3A:5A:F8:FB:60:F6:B5:D0:CA:B5:1C:73:D1:54:84
Authority key identifier: 46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96
Certificate issuer:       /CN=A91E268B/serialNumber=462B16D327972EA771226A01588B5205EFEA4496
Certificate serial:       06F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft
Manifest number:          06E1
Signing time:             Mon 02 Mar 2026 00:27:36 +0000
Manifest this update:     Mon 02 Mar 2026 00:27:33 +0000
Manifest next update:     Mon 09 Mar 2026 00:27:33 +0000
Files and hashes:         1: RisW0yeXLqdxImoBWItSBe_qRJY.crl (hash: ZZMtX2XkcK3DUbYNUVBWJ7m6XVkPQfLeM1h5dH4BuBw=)
                          2: 3F4ECBD2744D11EDB5D08682C4F9AE02.roa (hash: vmwtzTnOhvd/7QUFb3dk5usPy+P3Fs2BEdZg8lbgpbw=)
                          3: 7549B6D2744A11EDA8F69509C4F9AE02.roa (hash: qan5IAB+eBbV0exhngVKif1luhiyW911xqjapEM2sRA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl
                          rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1780 (0x6f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E268B, serialNumber=462B16D327972EA771226A01588B5205EFEA4496
        Validity
            Not Before: Mar  2 00:27:33 2026 GMT
            Not After : Mar  9 00:27:33 2026 GMT
        Subject: CN=69a4d977-ae3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1b:c0:97:03:b2:3f:fb:e3:ea:ee:a6:e8:82:
                    b7:c8:fa:f3:d9:7a:f1:41:a4:c1:4a:a9:fc:9c:70:
                    bb:ad:c5:9f:0e:c1:93:c5:7d:cd:f4:92:ad:76:fb:
                    1c:f7:56:38:e2:35:aa:e3:f1:37:92:ee:76:3b:16:
                    55:1c:59:6e:7b:96:84:e9:87:4d:0d:c3:4f:f5:f3:
                    4a:23:dc:30:ba:aa:f8:f5:a5:bc:af:ff:06:56:0d:
                    4b:ef:cc:c6:18:b0:3d:38:55:e8:14:e5:41:21:fb:
                    30:7a:53:81:08:a8:5e:c8:79:d7:bf:78:5b:05:14:
                    5d:7e:f2:8e:14:22:2e:a0:95:ac:7a:dd:a4:f8:cd:
                    63:46:fe:8f:fe:57:01:06:82:c9:b1:25:f7:06:ed:
                    9b:37:29:98:98:00:45:f4:c6:28:6d:7e:ed:62:85:
                    94:da:fb:eb:6b:99:47:46:05:4f:c2:8b:fa:e0:cc:
                    54:9a:68:c7:a8:99:2c:45:ee:20:15:c2:89:bf:26:
                    b9:1a:70:9b:02:fd:d3:f9:4a:c6:02:5f:87:60:e2:
                    75:77:35:60:49:c9:e3:76:2e:37:09:09:38:0c:91:
                    07:3b:8a:5c:67:b2:b4:50:44:d4:8d:bc:10:67:81:
                    0e:82:d0:c2:d5:4f:f3:38:38:ee:ce:03:0c:f9:9c:
                    79:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E9:6B:A1:D3:3A:5A:F8:FB:60:F6:B5:D0:CA:B5:1C:73:D1:54:84
            X509v3 Authority Key Identifier:
                keyid:46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:49:ae:7e:85:03:a0:da:6a:ed:c4:ae:6d:aa:e9:51:88:d8:
         b0:61:54:a9:d8:7b:32:89:a7:d1:3e:d0:6f:4d:77:25:dc:26:
         2d:ab:ed:bb:b0:d0:0e:5b:51:c3:da:90:59:8e:b8:92:5e:e0:
         ec:a4:08:ee:27:30:52:7d:ee:8e:89:28:cf:ca:f1:1f:5c:a2:
         7e:a0:de:3a:5c:e9:d7:c7:72:9e:44:72:a5:c0:3a:5f:27:30:
         40:57:e9:03:84:76:22:ca:14:7e:b8:92:b5:98:a5:bd:1a:a5:
         60:76:1d:72:54:ae:15:d3:82:27:61:68:39:5c:76:7f:a8:82:
         53:c1:bd:eb:fe:2d:7c:3f:fb:67:26:65:f9:5d:51:7b:90:34:
         dc:62:e2:f0:de:30:40:58:a9:d5:f4:b3:76:b0:34:ea:00:14:
         c2:82:29:91:0b:5c:3a:93:59:a4:5e:dd:30:9e:cc:dd:be:f0:
         81:50:e6:43:35:1b:f3:8d:f2:85:d3:a1:12:d0:f9:25:89:6d:
         bb:a1:7b:fd:66:22:e6:72:ee:d8:fe:ba:07:20:43:0a:19:c3:
         19:c6:25:e6:bf:ef:29:8a:7f:6b:a5:6b:5a:22:19:a7:f4:dd:
         36:30:ff:80:71:d6:4c:0a:b3:db:17:68:b9:ea:a2:39:8e:a7:
         84:59:57:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:55 2026 by rpki-client