Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
File:                     U4JkLr15mg-ChtBlSCntdoQw-eQ.mft (raw, json)
Hash identifier:          X5DDy0lGKtnqiBT0dbuQBq6x0/xFwGvuUWVcR+4NWgE=
Subject key identifier:   0D:C2:8F:D8:12:D0:F8:C3:D3:24:D1:AF:51:8A:0C:07:E9:EC:68:88
Authority key identifier: 53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4
Certificate issuer:       /CN=A91E6856/serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4
Certificate serial:       0EE2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
Manifest number:          0EDC
Signing time:             Sat 28 Feb 2026 17:46:03 +0000
Manifest this update:     Sat 28 Feb 2026 17:46:03 +0000
Manifest next update:     Sat 07 Mar 2026 17:46:03 +0000
Files and hashes:         1: U4JkLr15mg-ChtBlSCntdoQw-eQ.crl (hash: 6hYy03Ciff0H+maSd+bL9yVCE0WoqS294lAKwQB6P6s=)
                          2: 350711FA881211EE9710F928C4F9AE02.roa (hash: qIQKdkJiQ6vR/a23UDA9XAzbB7yWjWrazranQiTao60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3810 (0xee2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6856, serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4
        Validity
            Not Before: Feb 28 17:46:03 2026 GMT
            Not After : Mar  7 17:46:03 2026 GMT
        Subject: CN=69a329db-3f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ff:50:62:5d:d3:77:a3:22:32:f1:58:65:c4:
                    3c:62:3a:d7:3e:15:73:5f:28:b6:ca:46:9e:e9:dd:
                    90:b5:d3:92:04:52:ad:95:73:6c:22:77:4f:7c:f2:
                    b6:f8:44:77:a3:9c:9b:4e:2c:fd:b7:c5:1c:16:43:
                    7f:30:12:f0:7e:cc:89:c8:d9:c5:14:2a:88:a0:d7:
                    02:ae:37:8d:2b:89:5c:e3:2c:e5:3f:38:1f:96:9d:
                    eb:51:ea:28:bf:7a:b5:89:9a:73:d1:66:80:8c:2b:
                    a9:c4:df:e1:1f:cb:52:d2:3d:dc:6b:83:90:ab:89:
                    32:bd:36:3c:ce:49:98:a0:ac:45:69:59:ce:9a:df:
                    64:8f:55:91:2d:c2:17:70:a3:7e:9b:83:14:17:cc:
                    d6:73:67:69:90:a2:07:e6:ea:c9:b7:41:23:14:75:
                    36:93:3b:23:5f:60:42:ca:99:53:91:1d:da:5c:30:
                    13:33:b1:20:6d:e9:58:75:5c:89:fe:3f:56:28:3d:
                    ec:46:17:62:32:10:c5:27:27:d0:50:e3:42:fd:b2:
                    10:aa:67:44:13:62:e6:fa:45:76:e8:2e:46:64:f2:
                    7e:35:40:76:bb:88:da:ab:95:41:64:11:78:77:a0:
                    39:f7:3c:07:63:a8:21:e0:4a:7c:89:8f:91:d5:86:
                    f3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C2:8F:D8:12:D0:F8:C3:D3:24:D1:AF:51:8A:0C:07:E9:EC:68:88
            X509v3 Authority Key Identifier:
                keyid:53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:40:f9:2f:06:75:de:f2:17:95:f3:aa:b9:d1:ce:83:53:12:
         fc:74:bc:1f:14:7f:0f:27:4b:02:b8:71:ac:2c:7a:b5:7d:1c:
         61:fa:2f:87:15:12:b7:e2:05:7a:94:8d:d3:64:46:9c:bf:06:
         ce:b5:70:b3:6c:7b:7e:56:e2:93:64:e2:ba:30:04:c6:2a:ce:
         dc:1d:d7:13:b4:9c:22:23:89:7e:07:09:2a:59:30:a0:d6:74:
         8d:5e:cf:a8:0a:b8:31:eb:58:04:b2:77:e5:df:e9:c1:4b:5a:
         83:b4:32:5c:45:4d:6c:57:83:15:c9:c5:2d:ae:4f:3c:aa:6d:
         76:36:67:04:29:09:d4:7c:a7:e0:5a:10:9c:f9:35:f2:4d:62:
         4e:92:8f:5c:59:26:a2:ad:86:00:51:1a:34:b9:c4:75:90:90:
         45:e8:85:38:97:2d:f0:80:6b:40:b7:c8:3a:e7:61:a3:42:c3:
         cf:f4:6e:d7:4c:24:20:af:22:c0:eb:d3:1a:e1:d1:9f:47:cf:
         e1:92:df:b6:9d:73:b8:23:f3:71:0d:06:d0:75:2d:a2:0e:4c:
         36:f2:3f:3b:29:8d:29:10:8c:e7:45:2a:10:05:2e:f0:55:e2:
         29:24:d2:3d:a0:7d:39:44:0f:76:33:06:ee:56:c7:f7:41:20:
         43:66:e6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:41 2026 by rpki-client