Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft
File:                     owBvXZI9TJzDuBs4ocpnEnR9RAY.mft (raw, json)
Hash identifier:          ZKNEvoGLJ2Yc/Q9/JsdReV+sARs59M7YSOt6Dn5sk88=
Subject key identifier:   8C:71:36:7A:2A:DF:37:65:73:15:8A:26:2E:04:8A:F2:F0:E6:A0:11
Authority key identifier: A3:00:6F:5D:92:3D:4C:9C:C3:B8:1B:38:A1:CA:67:12:74:7D:44:06
Certificate issuer:       /CN=A91185B8/serialNumber=A3006F5D923D4C9CC3B81B38A1CA6712747D4406
Certificate serial:       023D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft
Manifest number:          023C
Signing time:             Wed 25 Mar 2026 01:54:11 +0000
Manifest this update:     Wed 25 Mar 2026 01:54:11 +0000
Manifest next update:     Wed 01 Apr 2026 01:54:11 +0000
Files and hashes:         1: owBvXZI9TJzDuBs4ocpnEnR9RAY.crl (hash: mnOlXnkxcY/wRPgmcHQk65phZWJpXDkAv7VaKRELnLI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.crl
                          rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91185B8, serialNumber=A3006F5D923D4C9CC3B81B38A1CA6712747D4406
        Validity
            Not Before: Mar 25 01:54:11 2026 GMT
            Not After : Apr  1 01:54:11 2026 GMT
        Subject: CN=69c34043-7b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a3:1f:d1:83:5f:56:65:a6:77:7a:e1:b3:a4:
                    8b:dc:67:7d:22:70:fe:92:99:bd:d8:db:fa:d4:47:
                    75:91:20:7c:56:89:b6:5c:a2:f4:7e:cb:93:14:09:
                    59:91:51:f4:c2:ac:8c:02:f9:d2:a9:e5:97:5a:ad:
                    3c:83:29:80:28:fe:b6:2d:5e:9a:e2:97:d9:a8:22:
                    42:3e:e2:ca:d6:14:93:cc:a4:2d:8b:53:f8:3a:1c:
                    ab:1c:32:7f:20:d4:bb:97:8e:16:13:e0:86:7b:95:
                    39:f2:7c:0e:77:cb:91:b9:46:d7:aa:bb:66:a0:f2:
                    40:25:6f:88:72:ef:01:9f:24:cd:e4:94:6e:1c:0e:
                    6d:69:00:18:34:9d:08:db:1a:b9:ff:d3:22:61:be:
                    b1:f0:d6:de:5e:6f:09:8a:96:52:69:bb:64:cb:19:
                    f2:76:8c:db:f7:65:30:1c:41:77:cb:ed:31:b9:48:
                    87:b2:c9:f6:58:f6:90:d8:f0:f7:46:5f:61:4c:b6:
                    fa:a5:df:79:2b:9f:29:e4:33:c8:1c:31:0e:24:d5:
                    b5:d2:45:7c:f5:bc:f0:73:69:a0:64:0c:88:02:82:
                    fa:39:e6:f6:c1:17:83:15:55:d6:a1:77:ac:25:e2:
                    80:86:de:64:88:35:53:c4:28:1b:6e:98:74:b7:bd:
                    40:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:71:36:7A:2A:DF:37:65:73:15:8A:26:2E:04:8A:F2:F0:E6:A0:11
            X509v3 Authority Key Identifier:
                keyid:A3:00:6F:5D:92:3D:4C:9C:C3:B8:1B:38:A1:CA:67:12:74:7D:44:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a4:8c:ae:50:53:12:2b:11:27:16:31:b2:91:ec:ba:c3:53:
         4c:c1:f5:09:7d:eb:52:24:f1:4f:27:e5:6c:08:57:03:59:ad:
         ba:d5:9e:1f:33:16:94:ca:fa:86:c2:65:99:c1:6c:71:25:07:
         eb:c1:c5:7b:59:90:33:86:94:6b:d5:44:7c:29:63:40:8c:5c:
         02:72:71:fa:8d:80:d3:4f:56:ec:af:e2:b8:d1:a2:20:e2:a6:
         d0:ce:9a:0a:23:e5:52:7f:3f:7b:74:db:57:a8:b1:5e:42:42:
         48:23:9c:06:a9:3d:b6:4b:7d:7a:d9:b5:db:92:77:58:3d:3f:
         04:a8:45:db:a2:62:09:d1:7c:0f:ce:aa:e3:f6:e8:12:17:96:
         98:fc:dc:80:18:2f:4a:75:ab:f4:0c:7f:de:e1:05:be:04:12:
         88:d5:db:6f:83:67:ec:1c:d0:48:af:a7:86:70:6b:a7:42:9c:
         96:ba:b8:54:1e:7f:9e:bb:b4:6c:20:32:d6:c1:7e:34:00:a7:
         ea:f1:19:2e:8e:c8:20:37:86:53:3d:0e:87:b8:1d:e7:3f:09:
         a8:a5:8a:32:12:c4:0b:06:7c:01:57:9a:7e:1c:23:c7:1b:48:
         5b:0e:4f:1c:67:49:d6:01:40:da:00:ac:7d:b4:9b:70:f1:d7:
         1a:f9:f7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:44 2026 by rpki-client