Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
File:                     p_d_IEfTVowEOjOMeTKwojyPaHE.mft (raw, json)
Hash identifier:          IqtrLVIu58/EuU/7isy1U1ruma9NRop/KXrWREa8wXk=
Subject key identifier:   09:70:C1:B9:81:6F:C4:0D:65:44:58:70:A8:A4:A5:AD:FE:5C:C8:D7
Authority key identifier: A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71
Certificate issuer:       /CN=A91FD4E2/serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
Manifest number:          48
Signing time:             Sun 01 Mar 2026 09:46:27 +0000
Manifest this update:     Sun 01 Mar 2026 09:46:27 +0000
Manifest next update:     Sun 08 Mar 2026 09:46:27 +0000
Files and hashes:         1: p_d_IEfTVowEOjOMeTKwojyPaHE.crl (hash: m679ZLgb98RbF4JvbCGxYLqJzU0ImZoPxwTG5E6pOKs=)
                          2: D08BF898AEDA11F09093014EC4F9AE02.roa (hash: KbzUtTPtGCQ3I/N5KWpd9MwtuQNamm+9Vruv3vtMr6A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl
                          rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:46:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD4E2, serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871
        Validity
            Not Before: Mar  1 09:46:27 2026 GMT
            Not After : Mar  8 09:46:27 2026 GMT
        Subject: CN=69a40af3-ed37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4e:34:b8:23:26:20:a5:91:0b:37:b7:a9:81:
                    b5:ee:f4:05:56:fc:1b:1d:cb:87:30:c2:71:01:2b:
                    94:3b:51:cb:57:6d:23:8d:ff:4c:25:52:97:2e:ac:
                    5f:09:b6:b2:05:81:b3:cf:bf:12:67:84:27:55:60:
                    59:5c:9f:2d:89:44:79:76:93:34:ae:98:aa:b5:aa:
                    80:7f:d8:26:ea:de:27:3c:39:6a:4e:63:75:fd:61:
                    9f:7a:7c:71:7e:49:3e:c6:17:93:6e:bb:f4:61:96:
                    84:b8:79:66:cb:9a:e0:d8:37:62:e5:ab:4f:1d:b7:
                    f2:59:81:87:a4:cb:4a:89:62:5d:0d:d0:f1:e4:ae:
                    d8:5f:56:62:0f:6f:b4:52:a9:65:c6:1d:b0:7f:10:
                    e6:06:fa:f7:67:fb:de:d0:72:a0:21:d7:7a:af:e9:
                    7e:ca:98:c3:3b:4a:d1:d6:33:7a:27:25:e3:61:06:
                    3c:7c:19:ff:32:96:4c:de:26:75:85:af:77:42:11:
                    87:d3:ac:ef:b6:5d:8d:d6:16:48:b4:9e:78:f9:a3:
                    41:fc:43:2d:43:4e:30:71:eb:e6:88:ad:ca:1f:07:
                    cf:37:36:43:dd:b8:44:4b:76:7a:f2:23:58:19:6e:
                    f7:6c:2b:44:62:63:04:36:f2:b6:4d:f0:bc:fa:ea:
                    88:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:70:C1:B9:81:6F:C4:0D:65:44:58:70:A8:A4:A5:AD:FE:5C:C8:D7
            X509v3 Authority Key Identifier:
                keyid:A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:83:5d:7a:1b:f8:c4:7e:c8:73:2a:0c:11:62:b7:6f:e4:97:
         ba:7b:76:b0:cb:0d:e8:6f:07:30:8b:51:b0:a4:98:b0:da:fb:
         1f:e4:89:38:86:d3:c4:d2:e7:30:b7:0e:35:b9:a0:7d:7b:6d:
         24:7d:2e:4e:20:73:72:53:79:32:f7:84:42:76:87:11:02:75:
         38:ac:66:b6:70:67:18:f8:4e:c6:68:9f:f2:6b:83:36:09:43:
         aa:1a:f7:c8:63:9a:62:02:05:7d:a1:18:b2:0f:5a:8c:50:4f:
         40:6e:32:58:77:99:0c:e5:55:49:6b:9d:30:c5:e8:8b:ca:4b:
         97:97:7a:6c:82:4b:f8:13:8d:a6:3b:5a:55:5d:ab:82:a2:e4:
         14:6c:df:42:45:22:cd:69:ef:bc:ed:41:4d:95:83:e8:3e:50:
         1d:07:8c:c2:8f:5c:09:e1:4a:e9:7a:ea:59:fd:fe:8a:f2:42:
         d9:7a:88:40:38:8e:ed:90:29:27:cf:1e:10:33:a7:1b:34:18:
         79:47:66:66:12:05:45:96:7e:cb:97:00:63:f4:0d:07:fa:ee:
         59:e9:20:50:1d:4e:59:34:11:88:a6:a7:33:fe:6e:93:b4:4b:
         60:31:07:66:55:b1:e9:35:17:de:c5:a2:b4:22:12:18:4a:6f:
         27:75:ae:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:05 2026 by rpki-client