Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
File:                     N0X7n36iweJS0pvv2GphV3YNiMA.mft (raw, json)
Hash identifier:          yqQ6y414Oso25AWX0T/rnv7Jx++VCEM+ZuRmuh/jXB0=
Subject key identifier:   8D:95:1D:08:33:FC:18:DB:A0:24:D5:26:27:D5:60:2F:79:0C:34:DF
Authority key identifier: 37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0
Certificate issuer:       /CN=A91EEAD3/serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
Manifest number:          014D
Signing time:             Sun 01 Mar 2026 06:11:15 +0000
Manifest this update:     Sun 01 Mar 2026 06:11:14 +0000
Manifest next update:     Sun 08 Mar 2026 06:11:14 +0000
Files and hashes:         1: N0X7n36iweJS0pvv2GphV3YNiMA.crl (hash: 9H2tlKSFt0dSQow/Z7hBVQNGGBKXee54UEI7szxhako=)
                          2: E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa (hash: JS+wQ/n/N85a7D5eKfW4py9j2KTpDdxesCwuqsoCRf4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl
                          rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEAD3, serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0
        Validity
            Not Before: Mar  1 06:11:14 2026 GMT
            Not After : Mar  8 06:11:14 2026 GMT
        Subject: CN=69a3d883-350f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:12:99:22:e4:18:0b:7f:95:f2:a8:78:40:5a:
                    15:d9:2f:d9:2e:64:c1:17:0c:fe:fa:37:b0:e6:e3:
                    e5:94:33:7f:b3:bc:d0:1a:df:2e:de:4a:46:5b:30:
                    c3:1c:67:d0:89:19:51:e0:f6:2c:3f:03:9f:c9:14:
                    08:67:02:8a:05:76:59:84:02:a2:6f:7c:0a:f9:19:
                    f8:fb:30:ed:ff:50:fd:f3:ea:ef:c2:55:e7:5a:52:
                    7c:d1:a9:2c:40:e7:88:02:2b:34:07:3c:1e:1a:8b:
                    2f:5c:95:d0:d8:94:56:01:04:4d:1a:76:6a:1c:11:
                    d6:38:71:b0:cc:a8:12:77:91:05:be:c3:17:e5:e6:
                    8e:08:4c:22:55:79:0a:f3:03:05:b0:ac:de:bb:90:
                    ce:90:d9:29:97:01:c8:d0:1b:78:85:e0:84:39:64:
                    da:77:a5:2d:6d:73:01:ed:23:c2:a2:ae:ee:59:fb:
                    00:ce:0e:97:b7:a0:98:b4:b0:20:5d:19:0e:db:0d:
                    e6:c0:51:ec:b5:c3:7b:e2:65:fa:8b:b5:34:9b:5d:
                    57:54:a0:0f:74:53:5b:77:b0:4d:b7:58:0b:8a:b2:
                    d9:4f:f8:fb:e9:c0:1b:0f:b1:a4:c3:5b:be:d5:0c:
                    8a:65:41:c0:9b:e0:47:f3:38:04:52:ee:3c:26:fd:
                    5e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:95:1D:08:33:FC:18:DB:A0:24:D5:26:27:D5:60:2F:79:0C:34:DF
            X509v3 Authority Key Identifier:
                keyid:37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:2b:7e:28:40:a3:08:7f:b9:23:43:06:65:29:53:f9:53:27:
         ce:40:6c:45:53:cb:90:7d:58:cf:dc:f9:df:b8:e8:33:a0:48:
         fa:4a:93:21:0f:8a:e8:62:f9:ec:93:46:bf:15:25:5e:52:d1:
         72:90:01:7e:7c:cc:eb:72:ff:97:e6:da:75:37:ba:bc:c4:26:
         aa:27:6b:fb:9b:6f:48:ce:1a:0c:c6:da:87:f4:85:97:ed:64:
         d4:f4:7a:77:f0:38:c9:53:fd:a7:b9:9b:f3:70:9c:87:d7:98:
         30:f3:0a:4b:b7:84:6f:b1:88:16:ed:83:d9:ba:17:de:2a:16:
         4e:01:69:ab:63:e6:ca:02:71:49:57:14:68:fa:df:71:2d:09:
         a3:c3:b5:68:05:3f:52:fe:a8:44:c6:29:fa:3c:75:05:71:a5:
         b1:6c:75:c3:dc:99:82:5d:32:3a:dc:8a:05:c9:28:ea:76:df:
         16:3f:66:41:90:9f:9b:78:2e:4f:ad:cc:f7:2e:9e:b4:3d:53:
         39:18:f7:2d:f7:f6:fe:1f:bd:5b:02:28:6a:f9:93:9f:99:69:
         40:f7:b3:8d:0d:a8:a5:0c:8d:fe:50:d5:a3:98:4d:35:dd:b8:
         64:2c:d0:aa:ac:41:1f:c6:da:ca:6a:9d:24:3f:d0:e1:a3:d5:
         36:52:46:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:53:34 2026 by rpki-client