Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft
File:                     buWafawHoiW5GzRmrRoHRkk9jiQ.mft (raw, json)
Hash identifier:          qtpZLZeyl2n5doLglzyDQbcOE+mJlb6gVC6XBq+N0S8=
Subject key identifier:   D5:15:52:40:D2:7C:83:72:73:CE:FB:00:0F:01:BB:24:6D:55:15:41
Authority key identifier: 6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24
Certificate issuer:       /CN=A91E9D5D/serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24
Certificate serial:       0658
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft
Manifest number:          064F
Signing time:             Mon 02 Mar 2026 00:59:30 +0000
Manifest this update:     Mon 02 Mar 2026 00:59:27 +0000
Manifest next update:     Mon 09 Mar 2026 00:59:27 +0000
Files and hashes:         1: buWafawHoiW5GzRmrRoHRkk9jiQ.crl (hash: QrVudsCGtYREAuoecz9PP97fHvHelyhiR2sEU6w96Ik=)
                          2: 581F68DAD48A11EEB7A00557C4F9AE02.roa (hash: NDR9ZBlCPG6TNFjpWR6oUi6H3yAwo0tj9PuG9qFDBEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1624 (0x658)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9D5D, serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24
        Validity
            Not Before: Mar  2 00:59:27 2026 GMT
            Not After : Mar  9 00:59:27 2026 GMT
        Subject: CN=69a4e0f1-588b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f5:06:d4:29:55:c9:95:8a:ca:d9:cf:9c:e2:
                    92:be:e2:43:26:53:26:7d:d9:a8:a8:03:d2:fd:d1:
                    76:be:b5:95:38:2e:c9:39:ee:f2:7e:83:dd:76:14:
                    70:c2:df:1f:cc:40:55:ff:79:c3:a3:87:4d:96:93:
                    75:3b:7b:7c:1e:28:89:7e:0d:6d:7b:96:df:c5:b8:
                    c5:eb:54:b4:62:8a:5e:ca:fd:b5:5d:94:5f:77:c4:
                    10:a8:24:ae:da:0b:5a:66:10:33:3e:d8:1d:e0:96:
                    eb:de:2b:d4:3a:f2:71:50:2c:53:ef:a8:98:51:3d:
                    69:6b:53:72:6a:49:53:e6:79:1f:84:2c:75:8b:fe:
                    0e:16:39:69:db:2c:10:7b:d7:cd:c4:d6:2a:33:8b:
                    6f:58:b2:06:69:a3:6a:b9:c0:01:02:d5:97:c3:0b:
                    15:75:b7:c4:f5:ab:44:25:f4:be:35:29:61:a2:91:
                    28:38:20:83:b8:3a:33:5a:41:61:35:9a:1f:ad:95:
                    2d:c7:2e:e6:ce:19:bc:79:e6:19:fb:69:59:24:db:
                    35:42:74:dd:ca:6d:fd:76:9a:1a:1a:17:73:2c:7c:
                    71:9e:e0:70:58:40:08:e2:a7:a2:bf:39:c6:81:dc:
                    77:04:46:bd:8b:2f:96:76:68:3c:40:0e:50:91:7f:
                    15:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:15:52:40:D2:7C:83:72:73:CE:FB:00:0F:01:BB:24:6D:55:15:41
            X509v3 Authority Key Identifier:
                keyid:6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:8c:09:8e:40:b1:1f:f7:83:c6:25:d8:52:d9:b5:69:4b:50:
         57:44:b6:cd:6e:43:a5:40:de:06:c0:17:2f:3a:06:0b:7f:cd:
         de:52:ea:d7:84:d1:bb:2e:a1:ad:14:80:fa:ee:79:67:59:23:
         06:49:f1:cf:72:cf:d1:31:cb:ee:74:9f:88:87:3a:cb:cf:76:
         80:1b:5e:cd:6b:1f:8f:83:3f:2d:5c:76:7b:ee:48:b3:ce:b4:
         4d:ec:a0:ec:5d:a1:c2:e8:19:52:1f:f8:61:61:78:ef:58:1e:
         39:3c:6f:1e:d5:b6:4d:de:b7:9d:07:6a:f1:f5:77:82:9d:cf:
         9d:0c:d7:a4:03:bd:71:95:fe:8d:98:10:66:0d:96:f5:e4:1a:
         b7:16:11:12:67:54:2f:3c:41:90:20:07:fc:a0:3e:8d:6c:66:
         2f:e0:6a:c4:17:a9:92:df:51:21:23:fc:74:92:24:46:00:c9:
         75:09:35:96:cb:21:7f:0a:02:64:3c:7f:55:8c:1e:d5:bf:92:
         19:b5:cd:eb:9c:2d:ea:78:a0:94:63:c4:ae:e6:6e:ca:78:b1:
         2a:77:0e:1f:9a:76:70:51:90:6e:54:34:45:66:fb:5c:53:6a:
         dd:ce:fe:19:d5:fd:f6:04:e3:cc:d4:a9:28:ac:06:65:97:b8:
         07:a3:7c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:31:34 2026 by rpki-client