Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
File:                     0gZrYZNOd88mep3MOL9d7iHwe6M.mft (raw, json)
Hash identifier:          fVbh2942I0hxEJPIDBKRPQm8kwQvvkkMncafER/EDIc=
Subject key identifier:   14:62:7D:77:64:85:89:88:AE:99:3A:7B:5C:FB:87:ED:EE:CF:4E:79
Authority key identifier: D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3
Certificate issuer:       /CN=A91EBBAF/serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
Manifest number:          93
Signing time:             Sun 01 Mar 2026 08:46:58 +0000
Manifest this update:     Sun 01 Mar 2026 08:46:58 +0000
Manifest next update:     Sun 08 Mar 2026 08:46:58 +0000
Files and hashes:         1: 0gZrYZNOd88mep3MOL9d7iHwe6M.crl (hash: R+6VDG3Uc9l8uG6yvKzkeUELfOotDtNJUeOY0HDzL+k=)
                          2: C3C056A636DD11F08C82E269C4F9AE02.roa (hash: iP/6xi2129urspCLbMmJYNgMwMlUN1peIHRT5SM4ZI4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl
                          rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBBAF, serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
        Validity
            Not Before: Mar  1 08:46:58 2026 GMT
            Not After : Mar  8 08:46:58 2026 GMT
        Subject: CN=69a3fd02-157f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e3:b1:b3:74:c9:34:5f:c1:0d:9a:d4:9b:71:
                    09:12:50:90:92:57:72:fa:51:a6:d1:3b:e2:54:88:
                    9a:2f:7a:55:8e:cc:63:d3:45:27:c5:56:b2:c3:51:
                    76:fb:9a:a0:3f:f9:9a:3d:0d:0b:a0:52:ee:a6:f4:
                    00:dd:a2:bb:d9:44:d9:24:58:83:ff:33:a9:4e:4a:
                    73:41:24:6d:11:48:38:08:81:eb:6e:96:38:b8:60:
                    8e:52:d1:b2:b3:2e:d0:9b:fe:90:ec:8d:f3:60:83:
                    0e:fe:30:6d:17:65:00:b0:7e:77:ed:11:34:25:f8:
                    e4:82:5e:94:32:61:6f:23:61:32:4b:a3:64:57:84:
                    ef:4a:84:52:5f:34:53:1c:4f:92:a0:b1:aa:0d:41:
                    94:d8:97:17:a1:f4:a3:15:0b:79:65:9b:d5:bf:d7:
                    e3:ab:d3:5b:1d:bc:36:3d:03:7c:09:65:73:11:02:
                    13:c0:c5:4b:73:0e:72:93:70:8f:1a:ea:bf:ae:20:
                    92:07:f5:b6:08:d3:f3:07:b6:16:3a:1b:60:ed:9d:
                    13:e2:da:31:39:57:93:ce:42:d8:e0:6f:4c:2b:ab:
                    39:b2:1a:b5:77:ac:e3:bf:33:45:bf:e1:83:40:ea:
                    3c:d1:83:d2:20:e6:1d:f1:da:81:00:cf:ab:50:4f:
                    a7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:62:7D:77:64:85:89:88:AE:99:3A:7B:5C:FB:87:ED:EE:CF:4E:79
            X509v3 Authority Key Identifier:
                keyid:D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:0f:61:28:30:fd:40:8a:ad:42:5e:24:1c:56:ec:72:8a:1c:
         79:44:74:33:a4:8e:cd:f2:c3:65:ee:f1:ef:81:32:87:84:11:
         20:e6:c1:27:3e:a1:70:03:60:f6:96:a5:95:25:3a:84:77:f5:
         fe:7e:83:bd:a3:54:3f:fc:2e:42:54:1a:3d:90:10:d8:3c:25:
         b5:b7:dd:02:70:41:86:62:24:b3:af:d1:43:80:25:b4:e3:63:
         e1:b5:bf:36:38:1e:00:be:b6:62:0b:e1:08:0a:60:d1:a3:6d:
         2d:fc:9d:c6:a7:de:c9:23:9b:81:4e:f7:4b:13:de:21:0b:90:
         f0:21:45:c6:22:14:e3:2e:d7:de:dd:17:f0:e3:e7:9d:10:2a:
         b2:9d:53:a2:c2:a3:9e:bb:e9:8b:da:7c:22:1b:a9:4f:86:c5:
         12:88:dc:c4:4a:3b:db:a9:ce:dc:b4:02:7f:47:19:e7:53:3d:
         d0:57:cc:38:aa:57:7a:9f:ea:ba:bd:1b:0f:c8:7f:f4:7a:02:
         c3:75:f6:c2:06:75:80:ec:06:7d:fe:2f:21:33:90:79:06:f9:
         a2:2b:8e:37:8f:10:f1:f1:b4:ab:23:fc:a8:ae:de:d5:1f:54:
         83:e0:79:87:09:d9:81:77:88:e2:11:d6:9f:9c:0b:eb:64:0e:
         02:72:0f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:07:08 2026 by rpki-client