Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
File:                     N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft (raw, json)
Hash identifier:          I+XWV1PbmMJMKhMIQzYY5iLKUdGzqUXa8MSEYrFEUxE=
Subject key identifier:   82:5D:FF:06:AA:BC:CB:AD:AE:1B:04:8E:F4:D9:C4:BA:2C:E7:0B:C5
Authority key identifier: 37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A
Certificate issuer:       /CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
Certificate serial:       023D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
Manifest number:          0234
Signing time:             Sun 01 Mar 2026 03:20:57 +0000
Manifest this update:     Sun 01 Mar 2026 03:20:56 +0000
Manifest next update:     Sun 08 Mar 2026 03:20:56 +0000
Files and hashes:         1: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl (hash: q45skRu6cOEZ5LumoNHf6kNNXFyODIS4qamBxyKEDoI=)
                          2: A24D0F54140C11EFBC640B71C4F9AE02.roa (hash: wRJLakVb4OT38G6t+rRsnOSv4LpQV0AO0Scq5OD6JMU=)
                          3: 545EDE9C140911EF8520A25BC4F9AE02.roa (hash: Tv8VFI61ht6g4zpgpyoiarorIdL71VBSjtb/bqzuKfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl
                          rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDA40, serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
        Validity
            Not Before: Mar  1 03:20:56 2026 GMT
            Not After : Mar  8 03:20:56 2026 GMT
        Subject: CN=69a3b099-39a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3d:cb:7c:16:45:47:c6:db:e9:72:5a:04:1e:
                    44:77:03:c4:5f:ff:49:eb:d4:6d:51:16:6d:59:4a:
                    eb:b4:ef:89:f0:5e:6c:82:b3:4d:a6:fb:5a:37:c7:
                    fa:1a:bf:68:58:b4:81:0d:cf:cd:d3:9f:2a:26:e5:
                    9f:05:de:c2:ff:04:ce:c1:41:53:f5:98:dc:1e:3b:
                    00:4c:4d:14:f0:00:95:cc:fa:fc:e9:2c:cc:52:0e:
                    66:2e:a7:a1:a4:28:32:7a:3b:5c:c5:5c:bb:20:a2:
                    e3:97:fe:59:a4:34:45:d3:a6:ff:d7:f9:9d:20:66:
                    88:da:80:40:b0:3a:cf:09:79:c8:22:93:8e:c3:25:
                    63:37:b6:5d:5f:6e:17:f8:b1:48:c7:33:86:de:bc:
                    17:1a:40:d2:7c:57:44:c6:64:7e:15:87:21:23:b4:
                    5e:1e:91:7b:79:d1:62:07:a8:3a:b9:34:98:ca:f0:
                    0c:9f:f3:13:ef:69:58:0b:32:92:1b:a7:8c:c8:de:
                    b2:98:0d:72:b6:88:bd:ed:1d:38:54:29:b7:c2:8b:
                    dc:a7:48:d5:2e:e7:74:97:01:6c:a0:22:0c:2b:d0:
                    71:33:63:80:73:d7:9b:83:fd:96:8e:0e:11:83:c9:
                    0c:71:06:6e:2b:92:cc:65:73:8f:ea:69:00:71:7a:
                    39:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5D:FF:06:AA:BC:CB:AD:AE:1B:04:8E:F4:D9:C4:BA:2C:E7:0B:C5
            X509v3 Authority Key Identifier:
                keyid:37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:47:28:71:17:ac:36:44:aa:02:d1:2a:d4:4b:ee:a3:9b:c7:
         83:7e:c4:22:22:fa:6d:54:7a:c2:1d:01:fe:9f:65:fc:a7:b4:
         d9:ef:10:55:90:28:9c:a3:58:12:13:4d:ed:c5:83:5d:07:e9:
         54:ac:d0:f7:20:b6:29:9b:09:f2:5d:82:19:08:1f:0b:1e:a9:
         d9:5f:0d:d9:d5:f9:94:45:9d:3c:6d:2e:3b:17:e4:4e:02:f6:
         06:fd:a2:76:b8:71:b9:b3:10:eb:df:a8:d1:24:14:81:b7:1e:
         6d:3f:a4:af:6a:f8:7a:dd:8f:cb:f8:51:03:d3:bc:27:69:1e:
         8e:a7:2d:4d:01:ff:89:aa:db:74:3f:90:40:da:42:fc:30:86:
         76:48:48:70:e2:48:f5:f6:61:c6:91:70:3e:a0:3d:7e:51:0f:
         65:df:dc:6b:cc:f9:31:cc:80:5d:2e:7c:a2:3f:b5:36:3b:cf:
         5d:c9:79:dc:c8:c4:83:d9:ac:c7:56:e1:f3:a4:1a:e3:c6:de:
         94:27:1e:e7:45:f8:98:45:72:21:43:f1:15:2b:74:20:41:73:
         bc:92:9b:7b:29:a7:be:3b:9c:a8:3b:8a:d8:08:ab:79:10:c7:
         08:d9:79:63:c9:b8:29:7a:3b:58:c9:f9:54:20:35:7c:68:16:
         33:80:87:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:07:28 2026 by rpki-client