Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft
File:                     Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft (raw, json)
Hash identifier:          hxIYLQ0vaJYZTHAIw/SFNH3g6UXR9SY6Rq1lzFiBBcI=
Subject key identifier:   FA:8B:78:C7:19:AC:0D:7B:0B:1D:5A:25:27:0E:CE:2C:09:79:6E:F2
Authority key identifier: 0B:0E:4A:4E:AA:D1:50:A3:F6:3E:61:1B:04:84:31:0F:E5:FA:F9:54
Certificate issuer:       /CN=A91E9B39/serialNumber=0B0E4A4EAAD150A3F63E611B0484310FE5FAF954
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft
Manifest number:          2F
Signing time:             Sun 01 Mar 2026 10:08:15 +0000
Manifest this update:     Sun 01 Mar 2026 10:08:15 +0000
Manifest next update:     Sun 08 Mar 2026 10:08:15 +0000
Files and hashes:         1: Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl (hash: EnMwCtf6NWR9Y629AYAcoa+soubuwowua2qdaixvN84=)
                          2: 97B11C3CD29411F09264510FC4F9AE02.roa (hash: QApOxw4AB+QU5Y26DW3TDa/Ln50nbLLZSnM8Pz+sHv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:08:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9B39, serialNumber=0B0E4A4EAAD150A3F63E611B0484310FE5FAF954
        Validity
            Not Before: Mar  1 10:08:15 2026 GMT
            Not After : Mar  8 10:08:15 2026 GMT
        Subject: CN=69a4100f-1af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4e:3e:47:dc:23:8b:f5:de:fd:0c:f7:37:f2:
                    2c:12:39:60:40:03:bd:c7:f2:72:46:eb:de:f7:05:
                    31:ec:de:ee:b4:39:b9:db:fd:d5:3d:f1:7e:e2:77:
                    86:27:07:8a:fb:7c:9c:33:cc:a0:74:56:49:56:8a:
                    ab:96:50:aa:b5:81:d1:bd:45:58:3f:5b:23:47:29:
                    24:84:b7:9b:42:58:83:e0:6d:75:40:c5:ed:04:b5:
                    cd:40:7c:13:09:79:54:a7:a4:43:d1:95:f7:2a:91:
                    30:ad:69:36:f0:b6:67:ed:1a:5b:6d:ec:87:46:8d:
                    4c:e6:97:8c:7a:f3:2f:38:41:21:12:a3:50:59:c0:
                    cd:98:c8:6c:4b:9d:31:6e:3b:4e:95:e0:32:b1:84:
                    20:40:ba:3d:d2:05:30:8f:8b:c4:bb:e1:60:a3:25:
                    ed:93:b6:30:d8:b6:0a:a4:65:87:2a:0e:fe:a8:99:
                    bc:2b:c6:ed:36:54:63:3e:18:a9:af:0e:6a:2b:8a:
                    a6:4d:dd:ac:f1:00:bb:93:1d:22:4b:a4:d0:11:78:
                    ee:f8:bd:39:5b:fc:ca:e8:28:46:25:2a:84:82:15:
                    b5:ae:6f:aa:e5:18:54:d5:05:b9:be:18:a1:d5:91:
                    10:09:cb:e0:ae:11:11:c9:f6:38:5d:da:a3:e2:4c:
                    06:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8B:78:C7:19:AC:0D:7B:0B:1D:5A:25:27:0E:CE:2C:09:79:6E:F2
            X509v3 Authority Key Identifier:
                keyid:0B:0E:4A:4E:AA:D1:50:A3:F6:3E:61:1B:04:84:31:0F:E5:FA:F9:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:47:34:37:55:4d:83:5f:70:71:32:42:93:99:1f:33:93:b3:
         1b:a2:7f:dc:dd:b2:15:8d:20:06:1a:ac:1d:4a:bc:01:c9:d2:
         9d:7b:c7:08:f2:03:1b:5a:8b:eb:d3:4d:d2:71:58:ed:ca:53:
         dc:12:a9:d8:ca:25:70:db:f0:4f:99:92:25:32:10:22:06:f1:
         0f:3d:c0:fa:8d:95:74:fb:15:2b:74:65:20:10:c8:3e:97:20:
         b5:20:c3:27:03:7c:9c:4f:59:4d:b4:d5:c7:37:e3:2b:9c:7e:
         bc:7c:05:51:34:62:22:3c:0d:7a:f3:ad:fb:c7:d7:b1:64:3b:
         b0:01:d9:49:94:9a:ce:a1:2e:25:95:2a:16:8a:6a:77:8e:73:
         66:3f:51:f9:93:d7:44:54:81:e1:3b:73:e6:64:61:56:0b:b3:
         72:b3:62:50:aa:77:03:fc:70:5e:55:b2:9a:44:4a:de:d6:6d:
         9b:b6:58:b0:fb:b8:dd:23:37:00:ff:20:d8:67:0d:68:52:cc:
         c3:b0:22:90:5e:7c:fd:2d:94:65:55:63:99:b8:6f:df:55:42:
         f1:69:4f:ad:c9:6f:29:09:d1:e6:10:44:e4:62:4b:32:d4:ca:
         98:e9:f1:c2:0b:8f:dd:40:aa:51:3e:76:24:3f:02:42:30:c0:
         3e:ef:ae:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:42 2026 by rpki-client