Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft
File:                     8U1sPT3myxB096LpBdn4VFEEWmU.mft (raw, json)
Hash identifier:          nC8ZJ4IvGFYSkAQnG8PNWKcHrzpEvT9w7nQEMrrDVH4=
Subject key identifier:   26:01:88:5E:6C:5A:83:0B:11:1A:43:34:3F:FC:80:DA:0A:4B:0B:9D
Authority key identifier: F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65
Certificate issuer:       /CN=A91F2089/serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65
Certificate serial:       04F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft
Manifest number:          04F0
Signing time:             Sun 01 Mar 2026 00:20:02 +0000
Manifest this update:     Sun 01 Mar 2026 00:20:01 +0000
Manifest next update:     Sun 08 Mar 2026 00:20:01 +0000
Files and hashes:         1: 8U1sPT3myxB096LpBdn4VFEEWmU.crl (hash: lDvC/lDO5lA5VkkTA2YN0Ojdfd0rrz73Plq05e9fHSc=)
                          2: 3C4374804CEC11ECAE6AB280C4F9AE02.roa (hash: h/s9RyXLHAI1sqd9uwegBKrHWXm8UIc8RPznkO0q/SY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl
                          rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1269 (0x4f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2089, serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65
        Validity
            Not Before: Mar  1 00:20:01 2026 GMT
            Not After : Mar  8 00:20:01 2026 GMT
        Subject: CN=69a38632-2537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:ae:41:a9:1e:49:51:03:5f:20:10:ad:c4:
                    af:67:63:89:0d:7a:44:30:e0:e8:a0:c0:07:c3:b8:
                    d3:fe:9d:56:f7:7b:21:8c:d9:58:5a:91:16:12:34:
                    f8:bf:1a:06:c6:1c:30:02:27:ad:19:95:09:f3:da:
                    30:9c:a2:e8:15:e8:11:ba:e4:60:3d:8c:d2:8b:a2:
                    4c:50:0d:6f:11:5e:0a:fd:1c:37:a6:0f:f8:bb:c6:
                    9d:6e:1e:54:81:67:70:c1:06:50:ee:3f:67:f2:1b:
                    0a:b6:e7:22:a4:0a:82:1f:23:3b:ba:e6:9f:73:6b:
                    62:d5:47:ee:24:a8:f6:50:38:df:c2:0d:60:43:e9:
                    13:65:1a:6a:4d:76:ae:84:bc:4f:3f:72:1d:30:f7:
                    27:7e:fe:16:24:5b:fb:69:cf:bc:4e:44:d8:53:95:
                    2e:d5:37:e7:74:bf:4e:d4:c8:f7:8c:78:f2:c8:fd:
                    c1:09:cd:d3:4a:4c:22:59:83:c1:78:d4:d3:9e:78:
                    76:9d:93:14:b9:59:54:fe:9f:e6:da:d4:6d:29:3c:
                    ce:20:ea:7e:bd:38:29:41:37:9a:5d:ef:1b:2a:e4:
                    51:da:ec:ee:08:80:43:84:44:33:de:45:93:23:69:
                    3e:c0:45:b5:50:4e:ae:01:79:ed:a9:18:34:e5:71:
                    fa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:01:88:5E:6C:5A:83:0B:11:1A:43:34:3F:FC:80:DA:0A:4B:0B:9D
            X509v3 Authority Key Identifier:
                keyid:F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c8:c4:6e:5f:3a:31:91:57:ae:13:99:f8:66:6e:e8:5d:2a:
         6e:59:50:ee:90:12:27:bd:61:5d:86:26:0c:dc:9a:74:c7:b4:
         12:78:8c:17:a5:25:c0:e0:b5:36:dd:58:86:15:43:16:22:87:
         e0:66:85:b9:96:e0:d1:f6:7c:de:65:68:fd:00:25:7a:bf:89:
         bc:25:58:db:73:60:35:57:45:d7:e1:f3:be:99:ee:49:6f:a3:
         0d:80:8b:17:fc:db:71:9e:c9:6d:5a:bd:3f:b1:be:1a:f1:33:
         fc:66:25:99:e8:de:9b:43:fd:7e:f5:4b:19:8f:a5:69:51:40:
         d2:82:ba:f3:d2:70:f2:ef:c8:65:26:de:a3:d7:87:56:5c:bc:
         01:80:f6:8a:29:30:02:cc:b0:60:fd:62:fe:ad:b1:67:c2:0f:
         7e:f3:66:57:7d:0b:fe:18:a8:7f:aa:83:9e:00:be:9f:56:39:
         c2:ce:11:54:f2:28:4d:1d:e9:7e:7b:0d:df:27:a0:0a:68:dd:
         ad:dc:af:14:25:7e:66:1b:8b:a2:7b:b3:eb:c8:62:9c:36:fb:
         06:88:a0:86:e4:38:72:64:39:4d:39:cb:cb:91:dc:bf:9b:2b:
         ed:10:33:c2:9d:6b:fe:48:5b:a4:40:61:a5:f0:b6:36:90:16:
         ff:88:a9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:00 2026 by rpki-client