Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft
File:                     K6PqbAvX8YRghmD5ogTlEYZaAN0.mft (raw, json)
Hash identifier:          ptaGnDB78MJoZGzTrbR3W/+LsqzCuYiO3/CbXxXzgwM=
Subject key identifier:   1D:C8:B7:B0:FC:24:1F:35:FB:D2:47:EB:F2:0E:53:7A:1C:C5:A1:4D
Authority key identifier: 2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD
Certificate issuer:       /CN=A91F1E8B/serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD
Certificate serial:       09B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft
Manifest number:          09A8
Signing time:             Mon 02 Mar 2026 02:03:24 +0000
Manifest this update:     Mon 02 Mar 2026 02:03:23 +0000
Manifest next update:     Mon 09 Mar 2026 02:03:23 +0000
Files and hashes:         1: K6PqbAvX8YRghmD5ogTlEYZaAN0.crl (hash: wSn+3sA2ZHfNDpUeBkpLDgqeqKQuO+aZhRUJodngWY8=)
                          2: 33F713A8A3CF11EAA31D8C20C4F9AE02.roa (hash: drREk/OAiw4nw+aB1RVjD5zbqv5hAnk1VMgyPcenfqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl
                          rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2481 (0x9b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1E8B, serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD
        Validity
            Not Before: Mar  2 02:03:23 2026 GMT
            Not After : Mar  9 02:03:23 2026 GMT
        Subject: CN=69a4efec-88fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:79:5d:c5:07:ae:2a:d4:fe:fe:ec:93:2c:ff:
                    5d:a5:39:f4:1e:47:27:e4:d4:f2:c7:7d:b7:33:c5:
                    dc:68:4f:ba:df:ca:4c:15:e5:6e:5b:47:aa:67:7c:
                    01:58:e9:ff:75:a1:91:6c:b7:38:5c:72:95:9f:d8:
                    9c:78:e4:fc:3a:9a:e4:61:49:2c:7c:ec:06:c9:b3:
                    1c:a0:6e:04:9d:64:35:0f:a4:12:17:60:11:61:89:
                    ed:7b:1d:bc:7a:bf:67:a3:77:0d:72:6b:0b:e9:3f:
                    d6:2e:dd:a0:02:1c:b7:63:8f:48:be:9e:91:4b:6d:
                    59:a5:7a:e4:77:c7:7f:5c:63:4d:ae:fa:1c:77:a2:
                    bf:59:52:bf:33:0d:c4:bc:f9:90:0d:93:b2:ed:3d:
                    a3:ba:a0:47:5d:ad:93:87:1b:3a:e3:5f:76:20:5c:
                    3b:b0:f5:78:3e:23:5e:59:65:03:79:a2:e4:9e:36:
                    a6:78:ce:08:4e:ba:26:54:a2:ed:ac:5a:62:25:3e:
                    77:92:41:cc:57:29:b6:93:c8:17:d3:68:ea:95:bb:
                    71:54:83:27:be:b6:c2:bb:89:b5:8a:aa:d6:18:aa:
                    56:5a:68:53:16:31:82:7a:32:d5:6e:36:95:cb:d6:
                    88:e2:71:b0:bd:4b:48:1e:cc:d4:f8:9a:71:d6:a6:
                    22:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C8:B7:B0:FC:24:1F:35:FB:D2:47:EB:F2:0E:53:7A:1C:C5:A1:4D
            X509v3 Authority Key Identifier:
                keyid:2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a0:5d:f5:bd:44:e3:ad:ee:7f:f0:bc:d2:f4:20:81:cd:f3:
         af:f7:53:2a:2d:3e:1e:4f:8c:d7:3f:65:66:8d:c0:4f:fa:a3:
         63:17:51:dc:c8:4f:df:7e:17:d6:ba:d3:41:9d:79:0b:83:23:
         0c:46:5e:c2:8f:1f:c9:65:63:d9:29:1c:5d:09:0c:8e:0a:81:
         03:00:72:0d:9b:d9:d4:5f:0f:52:9a:3e:bb:00:ff:45:6d:80:
         78:6f:44:29:69:61:39:dc:c1:d9:8d:1b:34:d4:cf:3d:35:af:
         d1:ac:6f:08:3c:a9:54:c5:d7:97:2a:fb:bb:88:ac:7e:79:99:
         fc:5d:aa:66:cf:09:fa:7e:c9:fd:f8:4d:72:cb:45:0d:45:06:
         61:e2:88:4e:02:df:06:27:eb:2d:54:9e:27:c1:8e:ca:c0:7c:
         d7:7a:4d:61:69:a3:c0:1e:5a:3f:f5:46:54:47:ae:1c:83:c1:
         22:79:2f:71:e2:f3:dc:6a:eb:92:f3:82:9f:dc:29:31:78:5f:
         7c:83:a7:38:19:7c:e3:d6:86:0e:f4:15:60:f9:fe:73:f4:04:
         fa:e2:c6:80:1d:92:69:b0:6f:74:a8:0c:41:91:58:97:a0:c9:
         e9:10:07:f9:06:ee:f8:f1:88:13:86:ae:6e:c3:a0:41:a1:5f:
         42:63:18:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:44 2026 by rpki-client