Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
File:                     hrKx0eeCRIuE9pgY8WofcHtUyGw.mft (raw, json)
Hash identifier:          rXha+BDtxgVDKzBPsSqh/Vea/8o0/AvUbk6cefEfLHo=
Subject key identifier:   8C:1C:F6:2B:65:50:C7:09:B3:86:51:5D:BA:F3:91:37:F8:EF:D3:12
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Certificate issuer:       /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial:       076C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
Manifest number:          0754
Signing time:             Mon 02 Mar 2026 00:02:49 +0000
Manifest this update:     Mon 02 Mar 2026 00:02:48 +0000
Manifest next update:     Mon 09 Mar 2026 00:02:48 +0000
Files and hashes:         1: hrKx0eeCRIuE9pgY8WofcHtUyGw.crl (hash: C1IzpCRIg/YEx4Giglt6z1VPmWagqyN/GYoMTbCYH/4=)
                          2: 06E6952AAB4211F08DC86D66C4F9AE02.roa (hash: Ac5D1VocSkIxBJU8V/4LRUmQRbTw+flgUSB3ZRW3o8U=)
                          3: 8A5AA9BAAB4111F09E531265C4F9AE02.roa (hash: uIB/iGD9NSR9Z5Dx/6iTyvp39u2y6pd5/0tMf3x9ZRE=)
                          4: 7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa (hash: kobGUu1ByDri4VT+YEcCMbSP5W+2KrXkfmSpExJ4PNQ=)
                          5: E658D57AAB4111F09E35ED65C4F9AE02.roa (hash: PEXjSnRuyjRlPGGQw5DqvBSsiQtAtGebvla4PdBpVog=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
                          rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1900 (0x76c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
        Validity
            Not Before: Mar  2 00:02:48 2026 GMT
            Not After : Mar  9 00:02:48 2026 GMT
        Subject: CN=69a4d3a8-2dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ff:c8:26:e5:39:92:9d:7a:3a:f7:88:8a:e1:
                    dd:af:b1:64:46:36:d9:46:fc:a0:95:7a:6d:19:3b:
                    9b:ef:07:cf:4a:7b:90:91:2a:92:19:85:d0:e5:a0:
                    ca:fe:fa:55:3a:0e:8c:61:e7:33:6a:99:d4:e0:60:
                    fd:4f:f4:29:4a:62:33:0f:da:82:25:a6:10:d3:61:
                    73:d0:11:17:2f:4a:36:2b:37:07:04:6c:3e:f1:52:
                    92:53:a6:dd:e7:2e:5a:3e:e8:d7:9f:66:27:91:66:
                    f0:49:b0:06:6c:0d:a5:f0:10:ea:92:70:2c:f4:85:
                    eb:7f:fa:eb:ad:a9:d7:01:af:a6:a4:5c:5c:4b:a6:
                    95:96:56:6f:91:ff:38:d4:87:5d:81:56:4b:9e:d6:
                    b7:38:7c:b8:d6:ca:7b:ff:5d:27:e0:2c:fd:93:0e:
                    ea:27:97:2a:72:6b:10:ad:75:20:20:73:d4:bf:c7:
                    35:2f:ab:ae:36:db:20:a0:55:93:af:b1:53:32:ac:
                    ba:e4:d9:26:77:28:68:e7:e0:9d:8d:83:1f:cd:fb:
                    0c:23:10:5d:63:88:8a:d5:e1:a9:80:2f:d0:ad:44:
                    ed:30:e6:74:48:ca:84:ab:0e:e7:b8:98:d6:98:2c:
                    26:6b:f0:cd:93:ed:55:98:b0:43:59:42:bd:36:c0:
                    b5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1C:F6:2B:65:50:C7:09:B3:86:51:5D:BA:F3:91:37:F8:EF:D3:12
            X509v3 Authority Key Identifier:
                keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:63:38:c5:a1:14:34:8f:08:f1:21:db:83:e1:cd:ac:d9:e4:
         c3:56:e0:06:85:dc:0a:e2:27:c5:41:19:27:6e:b7:d3:e9:a4:
         b1:db:0d:56:2a:20:cd:dd:2c:b6:c6:e1:4b:dc:e9:be:8d:c9:
         aa:17:45:99:a2:8f:f7:b5:2e:99:c0:40:88:b9:e1:08:da:5e:
         3d:b7:ea:31:4d:84:1a:1e:f6:3d:9c:1e:7b:fd:fc:b2:06:5e:
         96:c9:07:90:a8:b9:03:46:0a:97:4e:6c:78:ef:60:b6:7a:f9:
         16:cd:51:2f:8d:f6:bf:de:e3:17:1c:ac:b5:f8:69:e7:0a:c0:
         5b:4c:05:5f:42:c7:73:f4:85:80:e7:dc:26:83:a4:89:5f:f5:
         a8:05:27:76:38:65:47:2e:1f:20:f0:7b:2c:74:6d:88:9b:ae:
         63:8e:b8:61:c6:67:d1:d1:50:50:e2:ab:01:7d:1a:7e:ab:f3:
         0c:de:c6:ee:ec:a8:35:47:35:51:fb:a2:7c:d0:b4:31:5d:d1:
         dd:2e:29:c2:72:5b:11:e8:21:9a:4d:0a:39:f0:dc:02:0f:82:
         00:e0:23:9c:ab:f1:6e:78:7c:f1:07:35:9b:20:dc:a7:55:58:
         1b:36:6f:46:fe:7c:e6:53:52:89:4a:dc:1a:98:80:7e:de:60:
         f6:45:ee:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:27 2026 by rpki-client