Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft
File:                     suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft (raw, json)
Hash identifier:          VPrtHubjy/tltmxPHwr8W5j/cwS/Jf06jO+E+HDOQT4=
Subject key identifier:   90:88:D9:1D:98:9E:48:CA:2D:3A:B9:F1:15:5A:53:1A:BA:F9:56:22
Authority key identifier: B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24
Certificate issuer:       /CN=A91FA69F/serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724
Certificate serial:       0141
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft
Manifest number:          013C
Signing time:             Mon 02 Mar 2026 13:55:03 +0000
Manifest this update:     Mon 02 Mar 2026 13:55:03 +0000
Manifest next update:     Mon 09 Mar 2026 13:55:03 +0000
Files and hashes:         1: suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl (hash: d1UXdQSyltkhlzTD8ejj4wivgysIIPtlmYC94MihjBI=)
                          2: 0D38E31833A411EF82E92524C4F9AE02.roa (hash: pj9aUMZT0p0mxgs9aMMBAdtewJzXJebkeL4JCQr84hg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA69F, serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724
        Validity
            Not Before: Mar  2 13:55:03 2026 GMT
            Not After : Mar  9 13:55:03 2026 GMT
        Subject: CN=69a596b7-06eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:54:37:56:62:c1:26:57:9e:78:95:99:46:
                    5d:14:03:79:ab:f0:12:cc:b5:bf:96:bd:66:fb:49:
                    ff:f3:35:99:52:e8:49:b2:22:90:a2:81:f9:7c:4f:
                    2c:c0:d8:89:a5:93:37:eb:81:b8:66:aa:9b:2d:77:
                    2a:70:26:1c:23:0a:02:29:b3:dc:09:ad:52:85:4d:
                    1e:33:ad:68:a4:8f:37:13:b5:57:b8:6e:67:70:c0:
                    13:1c:56:06:ea:1d:eb:83:f1:95:0b:18:4f:b7:a9:
                    49:60:c4:5d:08:58:e0:25:88:7f:70:4f:6f:81:14:
                    8b:9b:09:cd:12:8d:8e:bd:86:ca:ce:96:39:d9:db:
                    3a:8f:87:b8:d9:98:d6:0d:3e:99:12:aa:fa:58:03:
                    7c:ae:9b:20:72:c9:d9:80:ee:2a:db:88:af:3f:f7:
                    e2:3a:e2:e6:84:2e:9e:98:19:90:c7:a4:a0:96:f0:
                    7e:0a:66:5c:56:2b:0a:1f:d8:31:8d:ba:cc:c7:61:
                    c4:c3:c1:c1:79:36:07:f2:09:0c:c4:24:a3:26:24:
                    90:2b:c5:31:4a:66:a8:6d:d9:b8:15:73:98:10:81:
                    1d:be:d1:89:73:d6:22:f0:c7:30:15:86:80:a0:0e:
                    2f:bb:7a:75:4c:ec:6d:be:2d:2f:be:22:f7:0c:04:
                    bf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:88:D9:1D:98:9E:48:CA:2D:3A:B9:F1:15:5A:53:1A:BA:F9:56:22
            X509v3 Authority Key Identifier:
                keyid:B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:40:7b:8e:68:0a:a1:30:83:e6:50:2e:e0:8e:ab:8d:67:9d:
         58:3c:36:95:7f:14:8d:24:1b:96:a9:a6:2c:8d:7e:4f:05:8c:
         32:62:63:4c:0b:6e:16:a6:2c:85:ae:77:d9:dd:7d:76:d9:52:
         9e:64:27:4f:53:df:3c:7d:41:0a:7f:dd:bd:cb:8e:9a:2f:54:
         90:a1:83:63:97:b5:3b:ec:ef:a7:c0:5d:47:b9:ce:37:a3:6c:
         0e:35:b2:a8:9e:b0:8c:cb:1f:df:9e:9b:62:39:6c:b5:de:56:
         3d:c0:70:30:56:fa:da:38:84:01:45:b6:2d:35:b0:63:1d:a2:
         02:57:79:1a:bd:08:7e:ad:65:ff:85:da:10:9a:63:ee:56:f1:
         73:a3:34:ee:9f:c1:db:7e:f5:96:73:d1:02:e6:7a:2d:5e:28:
         19:52:c7:99:38:21:8b:20:87:6e:69:1d:3a:27:d9:79:6a:5e:
         7e:45:cd:78:c8:2e:16:ae:09:0b:8d:e0:21:91:a6:56:42:bc:
         24:0e:3f:9e:bb:9a:b9:b2:54:d2:5c:cd:c4:1f:db:64:ae:e0:
         7c:4f:69:71:a8:cb:5d:48:b2:c9:ef:96:df:4e:6b:17:34:34:
         9d:a9:18:ef:c2:29:a1:3b:5a:3c:b9:f6:c8:32:e8:1d:12:b1:
         16:9a:7c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:56:06 2026 by rpki-client