Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft
File:                     vZ1mh32GbnyQQVa-CMtDcargAb0.mft (raw, json)
Hash identifier:          Xm6dBX7oDo/D6rDuV8Hm9j7dRvTreAFlSM7WQfFLDaQ=
Subject key identifier:   E3:D9:D7:73:A5:D5:C2:43:A8:F5:14:1F:E0:93:21:FD:43:C8:4C:5F
Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD
Certificate issuer:       /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD
Certificate serial:       01F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft
Manifest number:          01E1
Signing time:             Sun 01 Mar 2026 04:27:33 +0000
Manifest this update:     Sun 01 Mar 2026 04:27:33 +0000
Manifest next update:     Sun 08 Mar 2026 04:27:33 +0000
Files and hashes:         1: vZ1mh32GbnyQQVa-CMtDcargAb0.crl (hash: ilONjEtoB5OiwwdUWyalyA2ZLIp8GxVck1Aitj0CqzQ=)
                          2: AC9A49A6B79811EF9C8DF330C4F9AE02.roa (hash: 6w/eNGnMRBFxF3lxYXbCN76SObHIvEqHFHmSQNDP46c=)
                          3: 975A513293B011EF9203EA6BC4F9AE02.roa (hash: 76T6waaCBWZUDZYyDyVRZsP5QTsxmG4f8kyM/bGetlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl
                          rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5E8B, serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD
        Validity
            Not Before: Mar  1 04:27:33 2026 GMT
            Not After : Mar  8 04:27:33 2026 GMT
        Subject: CN=69a3c035-72bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:00:23:11:0b:2c:cc:6d:4a:d9:8e:46:ab:b5:
                    88:b8:67:36:38:1b:7f:25:e4:74:37:83:48:04:88:
                    fe:29:ad:bd:7a:08:ed:58:4d:fa:34:ac:3e:22:a5:
                    72:72:bb:85:f9:c4:d1:7f:9f:d5:95:1c:08:f4:a3:
                    c6:08:29:5c:15:cd:6c:51:e3:61:f7:88:49:28:ae:
                    15:20:6e:c0:a8:7c:2f:7a:00:ab:3d:59:f9:2f:e8:
                    be:e1:29:ce:af:92:56:64:75:e7:75:58:ec:31:52:
                    83:99:42:b1:04:c0:4a:ff:8e:3c:99:4f:43:45:ea:
                    ea:24:f8:6e:5c:e8:36:e0:49:95:fd:95:34:c4:16:
                    b8:e6:16:38:49:c4:4a:d5:cc:58:e4:3c:75:e0:ed:
                    93:16:71:6c:5a:a1:60:9c:dc:ab:76:57:af:70:88:
                    1a:2d:e8:ef:8e:7e:08:e8:ec:d5:8f:b0:4c:75:66:
                    b3:a4:c7:52:e1:a1:73:7c:ea:f0:ae:be:1c:75:50:
                    c8:5d:08:b7:60:5e:4c:40:3e:59:fb:8d:ba:04:bc:
                    78:e0:7a:0f:2b:7a:75:52:e7:6b:cf:ca:e1:9d:21:
                    97:0b:e9:0f:63:0f:ee:d4:73:c0:f8:db:9f:b6:c7:
                    62:c1:70:c6:ec:be:f3:b5:04:7e:27:8a:02:53:30:
                    f4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D9:D7:73:A5:D5:C2:43:A8:F5:14:1F:E0:93:21:FD:43:C8:4C:5F
            X509v3 Authority Key Identifier:
                keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ec:0d:be:0d:9b:fe:a2:ff:1c:82:ea:90:4e:c3:86:1a:8c:
         ef:7c:bc:a8:25:79:81:cd:8f:60:7f:8c:19:4d:30:35:08:2f:
         3e:99:0c:03:e3:71:d5:f3:53:c4:3d:ca:7c:f9:b1:ad:63:fa:
         f3:39:f5:5c:ce:b6:14:de:e3:55:f8:fb:5b:99:1e:a9:b9:49:
         1a:07:5b:3c:97:ba:0e:2b:f1:7a:4c:87:81:56:80:e1:8d:47:
         8d:13:1e:44:a6:17:09:3e:40:ea:db:ab:c7:38:35:9d:0f:2b:
         4f:12:2b:c2:01:55:90:78:08:c1:da:73:a1:1e:5d:e2:b2:9d:
         5e:91:77:53:a2:02:b1:dd:b0:b0:ac:ad:e7:ff:45:68:6c:61:
         ee:3d:4e:0e:43:25:93:76:5e:af:bc:e0:cf:27:ca:de:2b:cd:
         3a:0b:75:a1:59:9b:f2:51:ac:fd:e2:18:56:e5:8f:93:d6:a4:
         1a:6a:50:62:fd:83:b5:9a:d7:6b:fc:75:44:e8:d5:e3:6b:de:
         17:29:30:15:c3:9c:69:90:3f:55:8a:37:12:19:0b:6a:f2:45:
         7b:bc:57:f7:86:ed:52:70:df:e0:66:61:19:c6:2e:b8:df:15:
         3e:db:e6:48:6f:f8:70:6b:77:67:6f:75:b1:48:e4:67:1f:e0:
         6e:c0:ba:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:36:12 2026 by rpki-client