Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
File:                     53BQiRv4knQyZQtwbyv-3ZKhEck.mft (raw, json)
Hash identifier:          Zr2vjnWl8xAEyGaCdZwsisceQKG9D1hmWXPhIiektXc=
Subject key identifier:   87:92:7F:7E:27:95:D2:4E:5A:1B:EB:96:66:59:4B:B7:81:FE:8B:6B
Authority key identifier: E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
Certificate issuer:       /CN=A91F8ADF/serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Certificate serial:       021D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
Manifest number:          0211
Signing time:             Mon 02 Mar 2026 00:20:50 +0000
Manifest this update:     Mon 02 Mar 2026 00:20:48 +0000
Manifest next update:     Mon 09 Mar 2026 00:20:48 +0000
Files and hashes:         1: 53BQiRv4knQyZQtwbyv-3ZKhEck.crl (hash: Z1tJswERxh/kVhKz/gmN3TaUGkaLKnd30U9ys2UG49c=)
                          2: F3210638F06D11ED9055A212C4F9AE02.roa (hash: h5xh1R0tEre7HmC/xYO8AoJTBuo2TI6B3de4UegYPas=)
                          3: F2948C58F06D11ED9055A212C4F9AE02.roa (hash: NdG+EESk6AxDfSsv+CEMSa3ytYfunyOHRDzMUr7MG1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl
                          rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8ADF, serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
        Validity
            Not Before: Mar  2 00:20:48 2026 GMT
            Not After : Mar  9 00:20:48 2026 GMT
        Subject: CN=69a4d7e1-a4a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:59:e5:f1:7b:eb:83:46:e0:e3:db:0f:87:
                    1b:44:63:54:b6:94:61:ca:36:f1:1a:3d:27:80:ab:
                    9d:24:0b:a6:78:fc:f3:29:26:7d:e4:f6:b3:50:83:
                    96:32:64:a5:35:72:55:06:91:9e:dd:8c:a4:58:03:
                    5c:07:24:5c:c4:c0:41:56:6c:44:fb:17:ff:1f:ee:
                    12:d9:76:b5:75:08:75:d9:ae:4b:22:29:0a:90:23:
                    10:d7:3b:0e:25:4a:dd:14:ae:d2:68:57:d6:b0:19:
                    64:d0:d2:23:1c:e1:60:2e:96:96:8c:4d:b7:c4:a7:
                    da:6c:4a:9f:f5:c8:4d:f3:15:1b:b3:d4:bc:f1:d1:
                    5e:cb:54:52:41:be:41:54:ad:48:22:ac:dd:30:19:
                    4c:6b:61:af:84:52:47:83:28:bb:99:26:f7:3c:bd:
                    ed:e6:5f:75:aa:d7:2d:ed:64:be:79:78:dd:59:5e:
                    84:ab:fb:64:45:37:d4:80:fa:68:a8:28:cc:27:28:
                    75:a0:81:ef:d4:9c:14:61:76:28:92:2f:6a:6d:27:
                    27:96:5a:5f:c1:89:48:65:74:99:d6:23:c9:43:8a:
                    54:6c:12:80:f9:29:c7:72:5e:8e:24:81:02:f5:24:
                    d1:56:a2:28:41:e5:db:ab:cc:a0:a6:2e:71:0c:34:
                    ce:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:92:7F:7E:27:95:D2:4E:5A:1B:EB:96:66:59:4B:B7:81:FE:8B:6B
            X509v3 Authority Key Identifier:
                keyid:E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:45:63:2e:b3:73:bb:de:ee:35:d2:15:01:c1:b5:10:b8:0f:
         c6:5b:ab:5d:93:93:03:96:3c:2f:e9:99:47:f6:b8:28:f5:05:
         dc:ab:47:09:25:51:8a:80:f2:ae:49:d7:d0:51:13:fe:5d:ee:
         d4:2e:4d:7f:a0:9e:76:25:86:45:36:f6:22:7b:8f:1e:75:fc:
         00:f7:10:f7:8a:73:96:f6:e4:50:97:d8:3e:fc:b2:d0:49:3f:
         16:ec:20:21:90:d6:80:f2:ba:51:c2:82:e1:2c:ea:ba:36:9e:
         a3:85:64:dc:09:34:a1:0d:29:6c:4c:59:49:64:f4:c0:55:68:
         de:03:69:fc:e5:a3:8e:23:bf:b9:79:6a:e7:8e:7a:bd:e9:0b:
         ef:32:f0:45:09:58:63:10:72:de:92:6c:91:0a:c9:81:38:59:
         50:32:51:c0:92:17:94:8c:7f:d4:cb:38:bf:36:05:4f:35:69:
         3c:5e:8e:91:c1:45:f0:9e:98:35:63:a5:36:32:27:6c:50:04:
         c5:f8:d6:8a:01:a3:1f:84:58:16:eb:80:48:0a:e1:a6:9a:36:
         c0:09:08:48:8b:23:7f:3e:c4:91:40:53:1b:87:39:9e:cb:9a:
         31:a8:31:71:7a:ec:63:9b:55:86:74:8e:45:f8:e7:41:a2:54:
         29:70:c2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:54 2026 by rpki-client