Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft
File:                     acVuJtdk8a5PRoYo5XUx03NKwCc.mft (raw, json)
Hash identifier:          7/UVcONw3ilLYL46wk1S6ADD6Dfx+2eXO9ILyTHQWUQ=
Subject key identifier:   45:E2:5D:9C:98:83:D9:9F:C9:04:0A:E3:24:BC:7B:D4:1A:9C:F2:47
Authority key identifier: 69:C5:6E:26:D7:64:F1:AE:4F:46:86:28:E5:75:31:D3:73:4A:C0:27
Certificate issuer:       /CN=A91105F6/serialNumber=69C56E26D764F1AE4F468628E57531D3734AC027
Certificate serial:       024F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft
Manifest number:          0246
Signing time:             Wed 25 Mar 2026 01:49:55 +0000
Manifest this update:     Wed 25 Mar 2026 01:49:54 +0000
Manifest next update:     Wed 01 Apr 2026 01:49:54 +0000
Files and hashes:         1: acVuJtdk8a5PRoYo5XUx03NKwCc.crl (hash: sOJgkstLkNVR7PFkEFpAmkK6v66g4XezCxl8lzzCl5A=)
                          2: 3D93BEB65E6611EEA526DB11C4F9AE02.roa (hash: peVyEzO9gNc8ebAUe7uR3/+3YYWj5qCyfYGMzhFmq1o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.crl
                          rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91105F6, serialNumber=69C56E26D764F1AE4F468628E57531D3734AC027
        Validity
            Not Before: Mar 25 01:49:54 2026 GMT
            Not After : Apr  1 01:49:54 2026 GMT
        Subject: CN=69c33f43-fd7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a9:36:77:94:64:37:40:82:0e:85:76:d7:44:
                    41:9a:25:83:e6:90:07:ae:a6:08:a9:b0:36:c0:8c:
                    79:9e:da:ed:b1:8b:94:90:2e:6f:0d:d3:be:81:09:
                    c8:e7:c5:bf:ad:25:c2:38:8d:0e:83:b7:83:47:49:
                    8d:6a:19:85:78:a1:7d:7a:c9:6f:a4:cb:82:7f:a4:
                    c8:5a:92:03:5d:e2:a9:11:bf:a7:0c:18:61:72:a5:
                    3b:0e:8b:c9:48:b9:2c:2b:e4:2b:70:46:10:ba:6d:
                    d5:d2:ab:62:72:38:ee:b2:85:e5:73:6d:02:7c:6f:
                    57:6b:6e:fd:d0:3c:50:00:a4:0b:00:13:1c:f8:93:
                    58:4d:ae:df:ba:0d:8a:88:7e:a7:f7:9b:56:21:76:
                    4f:43:7d:9e:43:08:c2:07:97:6b:8f:85:c4:ff:f0:
                    da:a6:f4:ef:32:6c:b6:fb:37:56:b0:21:23:9f:d0:
                    4b:3c:8b:19:bf:c1:24:c6:20:c7:fc:47:03:a9:bf:
                    dd:df:a3:5b:ea:32:ad:db:77:c7:75:21:2f:80:cc:
                    3e:bb:be:bb:3b:13:45:bc:69:40:c0:90:d6:4b:3e:
                    6d:08:71:e1:f3:75:e3:35:c4:65:d3:b7:df:38:93:
                    4f:df:02:08:03:82:1a:75:c7:db:67:26:39:20:07:
                    ad:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E2:5D:9C:98:83:D9:9F:C9:04:0A:E3:24:BC:7B:D4:1A:9C:F2:47
            X509v3 Authority Key Identifier:
                keyid:69:C5:6E:26:D7:64:F1:AE:4F:46:86:28:E5:75:31:D3:73:4A:C0:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:96:f5:fe:dc:ba:d3:15:9f:08:07:ac:89:cc:c0:1d:e7:d8:
         aa:10:aa:c4:37:0e:f5:3c:78:de:d2:3b:60:df:0f:44:b6:0e:
         f6:1e:ad:82:d8:3b:98:02:3c:0c:64:2d:6a:ff:1e:71:a3:a1:
         72:52:ea:11:27:9c:ff:00:80:d1:2f:37:23:cd:f8:b9:ea:a2:
         d8:b6:ac:42:de:2e:0b:34:32:18:ad:35:e1:aa:5b:e9:c9:f5:
         d8:60:95:d3:19:69:02:a9:00:2b:5a:4f:f5:2c:33:54:01:df:
         11:94:54:e9:ca:3c:b6:b4:ae:71:55:fe:70:ce:23:76:e1:35:
         93:c3:0c:26:60:f9:43:0a:20:9c:c7:8e:cf:11:1c:83:dd:a7:
         65:d7:68:e4:77:a6:da:43:a7:70:80:00:a9:23:53:69:cf:2b:
         be:c4:b5:40:75:44:3e:9c:ff:20:84:26:77:2b:ac:e9:7d:fb:
         ca:8a:b4:9b:6c:ae:97:e3:f7:0d:a9:56:c0:1a:54:e5:96:78:
         22:4a:4d:ff:58:f3:30:dc:9b:1b:73:39:7c:ed:32:20:c5:2d:
         77:cf:38:e2:95:7e:ef:57:24:6f:7b:06:d3:d9:2c:14:3d:1c:
         89:c6:65:08:d7:66:5e:9d:b6:c8:86:e8:4e:3e:2e:53:22:3b:
         59:63:c7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:52 2026 by rpki-client