Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
File:                     Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft (raw, json)
Hash identifier:          rPb9tFx83RF90KH6EkMjf/dfwBcO+7qDvlUaPfAjRiQ=
Subject key identifier:   58:10:D5:8C:3D:1E:E4:85:BE:FC:2A:32:54:78:C1:4A:B2:54:B1:4C
Authority key identifier: 31:C8:E4:D4:38:97:4E:DD:0E:87:A1:C7:EB:D9:09:CA:1C:1D:12:A5
Certificate issuer:       /CN=A91E585B/serialNumber=31C8E4D438974EDD0E87A1C7EBD909CA1C1D12A5
Certificate serial:       1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
Manifest number:          1B
Signing time:             Sun 01 Mar 2026 10:26:02 +0000
Manifest this update:     Sun 01 Mar 2026 10:26:02 +0000
Manifest next update:     Sun 08 Mar 2026 10:26:02 +0000
Files and hashes:         1: Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl (hash: ZB4z7n1HADIjQU24Bwcb4HTC1s+JnhMFdD7kfwzz/7g=)
                          2: F526FD64F20611F0B4D6054A4A6F56BC.roa (hash: Gbi/liXaTJ25LBNVoW8OXNj5S66g3SHNzd+jBQM9W+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl
                          rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E585B, serialNumber=31C8E4D438974EDD0E87A1C7EBD909CA1C1D12A5
        Validity
            Not Before: Mar  1 10:26:02 2026 GMT
            Not After : Mar  8 10:26:02 2026 GMT
        Subject: CN=69a4143a-8e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:38:6d:16:19:02:cb:e3:07:83:b1:ba:0e:30:
                    a7:dc:7a:d4:07:55:2f:60:1f:a7:e0:02:42:1a:8a:
                    a6:37:cc:42:1a:c0:07:3b:d8:81:ce:d6:46:de:46:
                    f1:f5:47:cc:e9:fa:de:04:dc:4e:09:e3:5d:33:1d:
                    89:b3:50:d5:7e:dc:d6:61:89:0a:5e:64:12:4b:5a:
                    56:8d:db:86:75:dc:a3:a6:7a:f8:d4:56:a1:06:2b:
                    e6:c1:9d:28:e3:e4:d3:cc:7a:3d:f2:00:ea:f6:2d:
                    a9:53:8a:73:c6:6d:50:df:31:7b:e4:ac:9c:8e:9d:
                    a7:10:fb:d6:62:44:e5:18:94:ec:cf:a8:73:44:e5:
                    bc:a5:3b:f0:ff:a2:ba:7b:3c:31:7e:ec:1e:dc:8e:
                    d8:33:58:f4:94:94:a9:34:22:74:05:ee:2d:4f:78:
                    4d:45:38:89:31:0b:32:df:bd:79:81:9d:6f:06:df:
                    ce:04:82:84:ef:4a:dd:db:50:71:6e:6c:22:f2:4f:
                    83:29:47:76:12:06:7a:3d:82:b8:51:7b:02:71:b7:
                    55:e1:a9:78:40:91:30:2f:98:c4:6e:eb:ee:59:c6:
                    f8:ca:14:0c:eb:a5:3e:12:23:33:ee:cf:12:c5:a3:
                    6b:e1:b2:15:96:49:69:10:2d:5f:ba:be:a7:34:e3:
                    3a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:10:D5:8C:3D:1E:E4:85:BE:FC:2A:32:54:78:C1:4A:B2:54:B1:4C
            X509v3 Authority Key Identifier:
                keyid:31:C8:E4:D4:38:97:4E:DD:0E:87:A1:C7:EB:D9:09:CA:1C:1D:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:1d:c2:87:8e:ce:21:01:00:30:02:e7:d0:14:53:1b:76:fd:
         a1:c5:3a:3b:fa:54:39:90:0a:37:68:54:5c:bb:61:ae:c3:32:
         d4:34:75:a0:2a:b2:94:ec:a1:cb:12:2f:c0:80:6f:82:eb:97:
         36:0a:f8:c2:04:ca:a6:42:6f:f7:21:b7:5d:32:a0:27:8a:c2:
         f4:2c:50:5f:89:09:78:a9:b6:35:3a:12:a3:6d:81:65:9f:78:
         3b:3e:a9:b2:4e:89:7e:2f:93:5c:e9:e8:1d:22:31:82:90:55:
         cf:aa:e2:f8:65:de:3c:89:45:91:3d:a6:75:16:68:1e:58:fc:
         66:ba:e3:2e:0b:20:04:90:c1:c5:b5:9d:2f:85:b9:0f:e3:d5:
         15:93:12:90:2a:89:65:83:5e:65:9d:4b:d6:63:32:7c:c0:65:
         85:62:a0:01:87:03:07:0d:d7:66:88:f2:37:5e:b8:3d:e2:a0:
         b5:3c:16:79:49:f5:f8:8c:7b:4a:fe:d2:70:01:58:b2:06:1c:
         8f:21:d7:1c:48:1e:6f:0a:60:23:b1:3d:94:7f:0f:ed:30:ce:
         1e:02:36:54:38:27:6c:e6:a1:89:b6:2f:a9:4e:54:e1:2e:eb:
         60:29:76:6e:e2:0b:9f:6c:78:51:b1:8d:fb:ec:8a:2f:f2:22:
         f2:5c:86:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:47:19 2026 by rpki-client