Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
File:                     5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft (raw, json)
Hash identifier:          u/fxupJpJRx0uhue1DNcSgabiASwwoxKOxb8OBe1RP0=
Subject key identifier:   0E:05:A3:D3:02:56:29:A8:62:F0:AA:88:D2:D3:0D:A8:49:46:7E:F9
Authority key identifier: E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80
Certificate issuer:       /CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
Manifest number:          0102
Signing time:             Sun 01 Mar 2026 07:15:02 +0000
Manifest this update:     Sun 01 Mar 2026 07:15:01 +0000
Manifest next update:     Sun 08 Mar 2026 07:15:01 +0000
Files and hashes:         1: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl (hash: 0WV6ojKLfjvUdmJWdpcG6MaYwYsMoePW0g7XPujXHso=)
                          2: 388A91E0985A11EFA6912B0EC4F9AE02.roa (hash: 3MkuT1/23NVs421qauJYsqrzBUKeSt8MV3gjlXwFUu0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl
                          rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E554A, serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680
        Validity
            Not Before: Mar  1 07:15:01 2026 GMT
            Not After : Mar  8 07:15:01 2026 GMT
        Subject: CN=69a3e776-d4d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:da:0c:64:67:fc:24:a7:5d:04:77:f3:83:9b:
                    68:ed:59:9e:15:f8:71:7c:a8:0d:c4:bc:cb:91:7a:
                    e6:14:f9:e2:3a:2f:4e:a4:af:77:5f:25:c3:5d:99:
                    ea:a1:64:92:96:c8:1c:7b:45:4b:35:fe:99:ab:c1:
                    4b:e6:db:d3:f8:50:a4:2d:f5:4b:77:a8:8d:da:4a:
                    cf:70:af:13:8b:fa:34:3f:1f:cc:af:28:72:2d:db:
                    22:cf:bd:8a:e4:83:ef:89:47:b1:f7:b6:b4:ce:77:
                    77:63:ad:46:4b:8f:c9:ce:cb:be:a4:b4:2a:ee:df:
                    de:c0:91:d7:20:75:1d:a9:d3:66:fa:3e:1d:a1:02:
                    b8:73:7d:28:1e:92:07:f5:f0:66:66:f9:49:bb:50:
                    d5:c7:ad:b5:f2:4b:d8:b6:13:0b:5c:cd:6f:b7:5a:
                    c7:fa:c3:3a:06:38:29:84:91:d4:fe:16:77:5c:54:
                    b5:be:3a:2d:77:bd:a2:72:50:24:14:aa:9c:98:f2:
                    a7:7c:57:bb:7a:c5:75:03:21:9d:f1:2a:c7:d7:03:
                    38:7c:0a:cb:27:b2:9f:93:be:cb:79:e2:4b:6f:2b:
                    49:21:75:aa:6c:f1:78:ae:04:80:68:e0:6f:02:09:
                    65:81:00:ea:ed:25:49:d3:83:71:71:6d:56:1e:69:
                    56:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:05:A3:D3:02:56:29:A8:62:F0:AA:88:D2:D3:0D:A8:49:46:7E:F9
            X509v3 Authority Key Identifier:
                keyid:E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a9:b7:83:b4:4e:45:4d:90:c2:b8:a2:56:6c:4a:b0:3d:1b:
         e5:1e:ed:2a:d1:af:7a:dc:01:5a:35:c0:2c:7f:b3:2b:53:a3:
         26:57:99:55:4e:0a:23:51:b2:61:a7:a0:5a:b5:f9:22:d6:75:
         c8:1c:ed:46:4c:b8:1d:80:c1:a5:3c:e0:cb:31:d1:d4:a0:c1:
         c3:75:66:a0:18:a3:9b:bc:3e:2b:09:67:11:13:4a:73:a3:44:
         01:b4:84:d9:b0:72:95:18:12:e3:c6:ca:6a:25:3b:2d:b5:a1:
         11:66:1b:90:09:c8:74:54:58:4f:45:df:16:aa:04:0f:fd:d6:
         64:ce:fb:a2:1a:15:0e:94:45:63:2d:2f:36:1b:cc:a7:83:cf:
         6e:0a:ba:3d:79:b3:7d:f4:50:9a:03:12:cf:0b:69:20:a9:f9:
         61:03:19:f5:d0:af:79:85:cc:6e:37:fb:67:3e:cd:17:b8:57:
         67:eb:83:c0:eb:34:37:85:c3:d7:40:ed:0f:0e:6e:02:de:30:
         c0:07:5d:55:67:e8:c5:b9:0d:40:fa:07:7d:de:33:e4:9b:12:
         16:87:cf:cc:54:88:6a:92:10:30:1d:93:92:d2:13:4f:39:ec:
         50:01:bc:e5:8b:88:96:36:a4:e3:3a:7d:a4:a0:e5:64:28:5e:
         1c:11:b8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:16 2026 by rpki-client