Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
File:                     8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft (raw, json)
Hash identifier:          oGamdBpdTmGi8oUoSLGu8iCKbYg37JuclL9u8viBAl0=
Subject key identifier:   45:64:25:C1:65:DB:54:2E:87:E8:29:6B:D8:D3:6C:85:35:11:E4:9A
Authority key identifier: F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA
Certificate issuer:       /CN=A91206B5/serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA
Certificate serial:       0A5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
Manifest number:          0A55
Signing time:             Thu 26 Mar 2026 19:32:00 +0000
Manifest this update:     Thu 26 Mar 2026 19:32:00 +0000
Manifest next update:     Thu 02 Apr 2026 19:32:00 +0000
Files and hashes:         1: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl (hash: nP4zxl9CVg1ZFpJCTMT4zg1mtVxqgkD7PX/Jb395hQk=)
                          2: 7F4DB79C82F211EAAC592A59C4F9AE02.roa (hash: i4ZxxqpQ+3zI5So5ObXBzu07nchHUX/1pbi3p0o+9eE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl
                          rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2652 (0xa5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91206B5, serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA
        Validity
            Not Before: Mar 26 19:32:00 2026 GMT
            Not After : Apr  2 19:32:00 2026 GMT
        Subject: CN=69c589b0-d6c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:44:78:47:6a:43:cb:b7:52:f8:d2:b4:2d:5a:
                    c0:fa:2a:92:1a:88:cb:5f:04:f1:3c:72:e6:ee:2b:
                    1e:ee:29:bb:7e:0e:8e:94:f4:37:2e:2e:62:cd:c7:
                    3a:3e:e8:4b:d4:36:ba:49:6c:89:07:ce:2c:e7:4e:
                    90:8d:d2:64:12:4d:4b:02:bc:e9:c9:98:19:64:79:
                    fc:62:65:2d:6d:73:f9:2f:a3:93:81:6d:5e:b8:6c:
                    e6:c8:b4:0f:a6:fc:ea:c8:61:25:af:16:8b:c0:86:
                    b3:a3:53:0e:76:59:57:14:3e:59:5a:39:e6:d6:65:
                    20:c7:ed:4f:83:bf:f5:f8:c3:12:2b:f0:06:55:c1:
                    a6:33:ad:d4:47:64:9c:80:a1:92:1a:d7:f5:07:3e:
                    8c:c2:42:14:ec:14:f3:af:2f:c8:8c:a8:e7:11:e3:
                    b4:da:6c:d4:fd:f1:5e:52:a6:4f:ce:12:9a:3f:89:
                    41:fc:4f:a4:05:96:43:f7:d6:06:17:ed:81:c3:c8:
                    e2:8b:14:28:99:1e:0b:c5:83:8d:96:de:e4:a3:ea:
                    d9:d8:eb:73:98:b7:dd:a7:d9:5b:c6:3a:b6:2a:fd:
                    ef:0c:fd:96:42:e0:f7:76:35:b6:f2:e4:4a:b3:e8:
                    d3:f8:c3:e2:bc:b7:fc:ab:f3:76:f1:0c:f2:4e:e7:
                    0c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:64:25:C1:65:DB:54:2E:87:E8:29:6B:D8:D3:6C:85:35:11:E4:9A
            X509v3 Authority Key Identifier:
                keyid:F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:50:38:fe:04:5b:3c:23:ed:97:17:a5:d0:44:f5:51:93:d2:
         91:79:f7:55:3d:ae:b1:47:75:8f:df:94:64:88:d9:e6:70:e2:
         ad:63:ed:50:a7:ea:89:32:74:a2:48:92:9d:db:d9:39:0f:56:
         96:8f:cd:d9:59:8e:47:4d:3d:d0:04:e9:32:c3:ce:fd:9b:36:
         36:67:49:6f:7d:1c:9f:50:96:02:ac:53:51:e8:c5:54:39:f1:
         89:74:15:05:92:d7:01:84:6e:8c:9d:31:c9:fb:cc:7d:da:d7:
         02:53:89:9e:44:8b:08:4d:e7:8a:fe:47:ee:60:83:d2:7d:73:
         a5:c3:cb:bc:a7:00:93:e0:e7:39:18:54:e3:37:cb:cf:0e:43:
         e7:04:f2:8c:0c:60:11:9d:eb:30:03:9f:0e:36:8c:e6:d0:e4:
         42:28:53:d0:9c:4c:f6:87:25:73:54:61:50:5e:3b:06:d7:54:
         63:6a:6e:34:d3:17:af:57:9c:22:bd:c4:47:17:b1:af:54:3c:
         de:fe:60:52:bd:3b:3c:1f:29:a3:c1:27:8a:3c:ed:cf:38:ce:
         69:a4:d1:ce:c3:51:90:4e:0b:17:09:d5:71:fb:f9:cd:46:3b:
         b3:c3:f4:c6:e7:25:55:84:ce:32:a8:09:5d:2b:27:fe:43:24:
         46:9d:e8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:51:48 2026 by rpki-client