Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
File:                     -sKy5UFEW1tHxZ2uHeLd6IeauLs.mft (raw, json)
Hash identifier:          ST+YVhED7ou0b2235UAdZaVJgK4zNayujkuMg0ME/zo=
Subject key identifier:   F2:B6:73:4E:F4:66:F5:18:EE:6F:81:4C:F1:23:9F:08:37:E0:F9:78
Authority key identifier: FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB
Certificate issuer:       /CN=A91F11EE/serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB
Certificate serial:       0141
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
Manifest number:          013A
Signing time:             Sun 01 Mar 2026 06:28:08 +0000
Manifest this update:     Sun 01 Mar 2026 06:28:07 +0000
Manifest next update:     Sun 08 Mar 2026 06:28:07 +0000
Files and hashes:         1: -sKy5UFEW1tHxZ2uHeLd6IeauLs.crl (hash: hJQ3b7YluLfxANPgCFkrU8VXZUDdUw2z0UEFPW5okIU=)
                          2: 8B0201183E8911EFB2DCA846C4F9AE02.roa (hash: sQR4OxxnRQelaQye41JzM/+/uoADouWx9n3P5u34eoY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl
                          rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:28:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F11EE, serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB
        Validity
            Not Before: Mar  1 06:28:07 2026 GMT
            Not After : Mar  8 06:28:07 2026 GMT
        Subject: CN=69a3dc77-d370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:fa:db:8e:98:ef:6a:74:47:11:87:b7:e5:
                    3a:7e:47:d9:4b:07:60:04:19:b1:30:8e:6c:35:c6:
                    39:da:41:2b:f1:23:3e:c3:7a:17:8a:9c:4d:a0:0f:
                    d1:62:1e:47:0e:af:e0:7c:71:69:c0:29:c1:77:e2:
                    4f:28:18:65:cf:47:b2:c1:a0:50:c1:bc:5a:59:18:
                    a0:37:41:53:6d:7f:f7:8e:f8:0f:38:1b:e8:2d:91:
                    54:72:5e:aa:65:70:5e:2d:9f:19:20:7c:3a:56:77:
                    67:f9:17:fe:5d:86:15:85:52:73:46:c7:b7:c1:36:
                    ed:7a:55:f3:ec:82:9b:75:4f:41:d4:98:ee:ea:19:
                    a2:eb:d8:c9:aa:c9:06:2f:7f:c3:c4:72:67:73:23:
                    3a:c2:cf:cc:69:02:f6:ac:fd:c8:7b:2d:2e:08:17:
                    3e:8a:d8:4a:28:f9:6f:23:e4:0c:74:4a:03:c8:c2:
                    11:a3:13:2c:de:43:9b:08:cd:a9:b3:ac:09:55:c1:
                    79:67:fc:dd:ee:9d:27:f9:c1:db:84:69:fc:0c:8d:
                    6e:b6:fa:b4:bf:a7:29:cf:e7:c9:c8:20:d9:9c:49:
                    a3:fc:7f:82:6e:11:95:86:30:f2:f7:1a:37:07:7a:
                    66:29:1f:09:89:9b:0b:69:18:47:b0:08:ac:cb:99:
                    68:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B6:73:4E:F4:66:F5:18:EE:6F:81:4C:F1:23:9F:08:37:E0:F9:78
            X509v3 Authority Key Identifier:
                keyid:FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c9:a6:22:87:7c:8d:38:5a:ae:42:12:14:79:b2:3f:8d:ff:
         48:d1:95:f4:9d:ce:f4:0e:08:bd:24:ae:85:5f:8e:b9:5b:b7:
         28:7b:a3:ed:ae:e7:c0:87:f3:ad:69:ee:54:bd:ef:7b:dd:d4:
         7f:20:85:12:75:61:b5:8d:89:6b:c6:50:97:b5:45:ab:42:91:
         2f:f0:a5:95:34:11:99:e4:f8:a1:05:e8:66:1f:d0:e9:22:51:
         c4:df:c3:18:d5:dd:b5:55:b7:2c:ca:f7:ad:ab:b4:c1:fe:12:
         67:07:ee:4e:13:10:76:2a:2c:8a:a5:7d:01:af:6e:7e:0e:e7:
         0c:92:e3:a4:0e:35:d9:dd:c4:31:9e:ac:bb:1f:06:15:27:61:
         4c:a7:32:75:f3:3c:e4:57:e9:9f:85:38:94:93:7d:32:fe:1b:
         29:df:ec:70:17:02:77:4c:75:2c:53:b7:70:a3:9a:db:bf:04:
         b0:5c:98:6b:f2:5c:b3:dc:a1:67:e5:fe:49:90:26:6f:96:19:
         92:98:20:50:bd:49:d6:06:5e:5f:5d:9a:73:10:ad:d2:66:3e:
         93:76:08:4f:fd:42:f2:c9:fc:4a:ff:a9:30:e0:7f:c1:89:f5:
         d4:4b:a6:08:e3:ee:0c:65:f9:2b:f7:af:09:5b:f5:79:73:70:
         e4:0b:45:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:15:44 2026 by rpki-client