Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
File:                     v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft (raw, json)
Hash identifier:          7ffYPqaM18zN5P4kIX6Wg4MNhPbbwGdymQLE7MQXOJI=
Subject key identifier:   79:FA:A4:F8:25:1B:D5:0F:22:5E:E2:67:AB:2D:32:26:08:84:1C:14
Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69
Certificate issuer:       /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669
Certificate serial:       1C74
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
Manifest number:          1C6D
Signing time:             Thu 26 Mar 2026 16:09:51 +0000
Manifest this update:     Thu 26 Mar 2026 16:09:51 +0000
Manifest next update:     Thu 02 Apr 2026 16:09:51 +0000
Files and hashes:         1: v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl (hash: q9ab86i8SAvjF0tjtsGeN5+ISlv9uf5btzpAL0T8KEA=)
                          2: 11600CECBA8E11F09FE88B46C4F9AE02.roa (hash: NzPA3vTx/A3a5wnPCMTUeeGHZAhzPwo4b+b76jAubug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl
                          rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 16:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7284 (0x1c74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91168B5, serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669
        Validity
            Not Before: Mar 26 16:09:51 2026 GMT
            Not After : Apr  2 16:09:51 2026 GMT
        Subject: CN=69c55a4f-76a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d7:dc:22:f6:df:cc:51:46:c4:75:34:e9:0b:
                    cf:5e:98:ca:fb:59:61:b3:21:10:da:73:4f:35:7b:
                    33:61:8b:81:14:4c:0c:af:a5:db:dc:c2:4e:e3:96:
                    0b:2c:e2:74:61:41:f3:b7:1c:21:01:dc:a1:e1:58:
                    27:3c:8f:f7:3e:8e:5b:e3:96:19:53:fc:12:ad:c5:
                    af:b9:09:b5:7a:87:d9:cd:90:60:14:01:4b:78:fd:
                    4f:f6:1f:96:dd:e1:99:9c:5f:11:0c:e0:9c:11:8f:
                    2a:14:0e:40:bb:21:e7:9a:d5:34:73:80:e5:f6:25:
                    dc:cd:ee:08:28:af:ea:bd:c7:a8:16:af:cf:21:5f:
                    01:0a:24:1a:1b:1d:d5:79:0e:d1:cc:9a:e7:46:27:
                    0a:50:b1:b5:dd:7f:04:d6:d8:49:88:65:76:54:20:
                    af:e5:6f:3b:6c:b8:3f:32:6c:48:52:d6:e1:d5:47:
                    a1:d4:35:8b:94:da:e3:78:7c:45:be:02:0d:fa:f4:
                    d1:4d:11:6e:6e:0f:60:83:1b:5d:2a:45:83:43:cd:
                    c1:c2:59:69:eb:26:ac:db:c7:5c:db:e8:da:e3:22:
                    dc:4c:d5:45:3e:94:ac:2b:a6:0f:f8:bd:55:e6:28:
                    0b:21:1c:87:5a:af:2c:a9:3e:a2:e2:cf:c6:11:41:
                    79:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FA:A4:F8:25:1B:D5:0F:22:5E:E2:67:AB:2D:32:26:08:84:1C:14
            X509v3 Authority Key Identifier:
                keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:c3:4d:55:0f:3f:47:8f:96:e7:72:26:e4:4d:98:8c:b1:1c:
         0e:f7:58:9e:16:74:01:8c:25:d2:55:75:7d:74:a7:af:55:39:
         f6:76:82:cd:f4:d1:9c:14:9c:65:b0:07:38:02:29:71:9b:d1:
         87:05:88:57:13:fa:a8:ba:ac:4f:9a:0a:90:90:8b:2e:62:e8:
         18:ca:57:8e:47:76:d4:79:83:38:1e:a5:ca:81:f6:1a:f9:be:
         f4:6a:44:d0:f3:5d:5c:c3:6e:65:44:03:72:85:6c:de:ec:38:
         e1:6f:81:2d:27:c5:f9:78:0f:8a:84:31:d2:da:62:1c:1a:d3:
         db:35:f0:3d:1b:29:31:e0:29:4e:40:61:52:dd:61:62:6a:0e:
         15:6a:5a:f6:ba:6c:af:39:31:1f:12:28:5a:3a:5c:1a:83:1e:
         c0:f5:c0:6a:83:8f:94:ab:be:67:64:a4:b0:e1:5a:66:37:2e:
         8b:c3:1d:9f:3c:b4:91:51:68:de:a9:f5:9d:97:82:8e:ad:40:
         ba:b2:a9:a1:e3:30:6e:08:2b:7e:29:59:b1:b9:bb:fc:a1:cc:
         d8:87:43:fa:fe:34:83:5a:cc:70:72:5a:8a:d0:1d:00:47:0a:
         32:29:2f:65:2c:f0:78:2d:88:45:8c:2d:1f:9f:21:49:c6:2d:
         a4:c5:86:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:14 2026 by rpki-client