Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
File:                     iV-zzi-cLke5FLsqa2bHfVOXpAo.mft (raw, json)
Hash identifier:          8fAUopl/TQojrUxBBUAmiJQj3eh/QkPQtaYBJuhn5Rc=
Subject key identifier:   DB:E6:B5:18:1C:DC:20:DF:FC:93:F8:C0:3B:6C:AD:62:52:66:99:BD
Authority key identifier: 89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A
Certificate issuer:       /CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A
Certificate serial:       027E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
Manifest number:          0278
Signing time:             Sun 01 Mar 2026 02:30:31 +0000
Manifest this update:     Sun 01 Mar 2026 02:30:31 +0000
Manifest next update:     Sun 08 Mar 2026 02:30:31 +0000
Files and hashes:         1: iV-zzi-cLke5FLsqa2bHfVOXpAo.crl (hash: o+Itr7HRp+omH1TBDFWKQnxfoyppBesRWUmnl/amES8=)
                          2: 38DEC3C04ED611ED84336740C4F9AE02.roa (hash: MDsONJ4hpkxo4XypcmXy3n39INmGozN6I7wK4cJeqNQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl
                          rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 638 (0x27e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6419, serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A
        Validity
            Not Before: Mar  1 02:30:31 2026 GMT
            Not After : Mar  8 02:30:31 2026 GMT
        Subject: CN=69a3a4c7-e31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:01:75:09:49:82:a9:80:ba:8a:34:ea:4a:84:
                    ae:12:10:07:18:7d:21:d3:52:7d:25:d4:9c:17:96:
                    2d:54:45:8e:50:91:b6:52:cd:50:e2:30:95:16:f5:
                    5e:fb:8f:f2:d1:43:73:0f:5d:90:79:de:f3:92:05:
                    47:86:39:2d:e8:9c:86:60:c0:89:7b:f6:4c:92:1a:
                    9d:ae:32:f9:ed:29:51:e9:d7:a0:65:31:21:1f:20:
                    bf:e1:58:74:05:11:91:52:1c:f9:24:98:13:16:c6:
                    16:75:f6:d8:c3:99:a8:69:ce:91:07:1f:09:15:41:
                    59:e0:cc:05:d6:9d:b8:65:77:b8:7d:39:70:93:2a:
                    f9:0f:75:b3:53:1b:90:51:51:50:48:78:cb:b3:00:
                    49:08:d4:df:0d:a6:74:b4:79:4d:4f:3c:e2:3e:d9:
                    7d:94:37:91:72:27:7f:28:38:fc:40:10:29:77:d5:
                    57:91:20:ae:be:f2:6c:1a:87:8e:54:97:41:ca:9e:
                    f6:58:d5:a9:c4:42:d2:56:65:a9:4b:19:75:9a:20:
                    94:fd:d2:7e:c3:05:de:17:39:fe:d9:36:68:f0:7c:
                    98:6c:08:7c:0b:94:fe:e6:78:ec:37:b2:c7:9e:a9:
                    c7:f5:cf:ba:69:28:03:0d:3c:12:0e:a7:19:24:9e:
                    14:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E6:B5:18:1C:DC:20:DF:FC:93:F8:C0:3B:6C:AD:62:52:66:99:BD
            X509v3 Authority Key Identifier:
                keyid:89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:d8:a9:5a:88:23:78:e1:68:5b:57:35:51:20:d8:7d:85:a0:
         a6:26:cb:94:2f:34:68:44:3a:4c:dd:4d:31:51:17:57:f8:bf:
         89:15:10:0e:1f:7e:31:40:cd:65:3c:45:5f:a3:f0:c4:2d:eb:
         de:e3:c1:95:96:e7:5a:da:df:cc:d8:10:74:37:5d:35:bb:90:
         85:c1:e3:15:74:7e:59:49:56:4a:8b:10:4a:e7:22:33:5b:4e:
         b6:ef:8a:bb:56:36:69:2e:21:74:65:75:a9:1e:8d:47:af:57:
         80:46:fc:b0:c5:c9:31:3a:21:72:22:c8:02:56:71:81:80:d6:
         b8:26:2c:94:10:e7:b8:6f:16:3a:5c:52:0f:ee:45:22:fb:d1:
         5c:22:d6:0c:8d:f3:2c:b8:9e:ce:94:38:ac:c4:cb:cc:8a:60:
         5b:bb:c5:3c:84:97:18:c0:f6:4a:df:4e:0b:96:17:50:50:78:
         db:26:fd:a8:f4:2e:de:b1:14:40:bd:09:57:77:70:e3:9e:ea:
         11:9e:d2:d3:34:aa:78:04:80:d6:98:2a:ae:fb:62:1d:42:3d:
         dc:09:a9:1e:84:58:69:19:a2:6b:12:28:48:36:c3:ee:0b:77:
         0a:b5:a6:46:1d:2c:60:ee:a7:bb:fb:7a:cf:ec:64:9a:64:20:
         78:90:5a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:41:27 2026 by rpki-client