Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
File:                     aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json)
Hash identifier:          28imdKV7R+b0e3Im3M4n5HFogZgT+N/Ax9uhp6uX7yQ=
Subject key identifier:   74:FD:FC:F2:BF:67:43:6B:53:03:47:B7:92:EA:FF:F7:9F:C2:AB:C1
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Certificate issuer:       /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial:       0280
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
Manifest number:          0244
Signing time:             Wed 25 Mar 2026 02:23:47 +0000
Manifest this update:     Wed 25 Mar 2026 02:23:46 +0000
Manifest next update:     Wed 01 Apr 2026 02:23:46 +0000
Files and hashes:         1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: UGkArlFK8imTY6zd5L0NA2AXGS/PZjggsrGv9+sBgRQ=)
                          2: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: hy3xSvTP7O3mbzfHFNsYWB6zvGiymVdeaKb6AgSQN3E=)
                          3: AF2D50BE562B11F0A2095579C4F9AE02.roa (hash: GKfJ2kB3yXKiTx70mXKirnJ5shWw+x/l7CpoEVzirXk=)
                          4: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: Oi3EWJoEgd9DWmEEG+iX3qCZVJDhp6GEs5+/XmAJvSc=)
                          5: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: wtaIxTF17d8IiemG3sWgy0ofBOn5zvPTqbrlTJWPses=)
                          6: 2F03F3FCB3AF11F0B9165B5BC4F9AE02.roa (hash: 4RuwvlEUfIsojOEJPNkdcqMMKDfzfms7bbjFDB3xQI0=)
                          7: F16963D8B3AE11F0A879E65AC4F9AE02.roa (hash: t3iwawjGJ56AujlNR7I280077YB+jhEWT3pLtX6G6h0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
                          rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:23:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 640 (0x280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
        Validity
            Not Before: Mar 25 02:23:46 2026 GMT
            Not After : Apr  1 02:23:46 2026 GMT
        Subject: CN=69c34732-c27e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:37:f0:e1:42:74:a7:50:36:35:7f:49:23:d0:
                    1c:5a:d0:f5:49:3f:27:ba:c3:ac:a4:6e:77:dc:45:
                    bf:b9:3a:40:b1:a9:8b:54:a0:36:8f:eb:9a:0e:5c:
                    07:77:4a:24:d1:8b:8e:97:4a:b4:45:a0:ed:3e:9d:
                    c6:ba:fa:25:8a:f5:78:7a:7f:c9:86:2a:e2:a9:13:
                    8e:82:ca:7d:30:9f:1a:0d:cb:4e:44:78:e6:72:47:
                    71:e0:de:e6:c0:ee:ce:aa:37:13:aa:ec:d3:f3:b5:
                    83:0b:14:31:2d:ea:e8:be:c9:ae:1d:92:f6:c5:d8:
                    08:79:97:c8:c7:48:26:eb:5c:e9:d1:0b:cb:f3:22:
                    2f:1d:b5:27:b9:8c:17:b3:45:f5:36:17:52:6f:1d:
                    7f:c5:31:d4:5c:0d:68:14:0d:f7:56:f1:9d:df:61:
                    06:6e:16:82:0e:0a:74:34:66:46:07:55:50:12:c8:
                    b8:68:65:da:ba:eb:8d:6a:ba:80:c7:ad:1e:54:22:
                    9e:85:6d:30:06:43:b9:e4:8f:50:e2:8c:fc:0c:bf:
                    ed:02:38:8e:6a:e3:c1:21:ab:1b:0c:04:9c:c7:37:
                    38:ce:2e:c7:d4:1b:7a:b9:ca:2f:41:bd:c7:e7:10:
                    32:90:52:20:e4:e9:a2:82:b1:84:f2:fe:66:30:4f:
                    33:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FD:FC:F2:BF:67:43:6B:53:03:47:B7:92:EA:FF:F7:9F:C2:AB:C1
            X509v3 Authority Key Identifier:
                keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:8f:b0:2b:61:ed:0f:0b:cc:f9:b8:26:9c:0c:78:42:3d:7f:
         5f:05:6d:28:50:d8:94:1b:ad:02:b0:e9:47:59:a8:98:d3:68:
         f7:47:f9:15:e7:13:ff:56:83:c0:86:6c:4c:c2:b7:5b:2e:68:
         d6:a8:bd:23:40:b0:c3:99:64:6d:ba:17:77:e4:12:15:74:33:
         fb:01:c9:d5:17:f0:f5:e2:70:bb:1e:b1:e8:54:ae:8c:a1:8d:
         57:f9:cf:04:a7:d6:9d:0e:55:4b:30:c3:de:b9:a1:e5:f6:f1:
         32:f2:a9:62:a1:98:a7:38:b9:42:52:0f:ca:d1:80:8b:a3:35:
         7e:66:d3:17:19:13:68:71:0b:64:49:e3:1e:9a:9b:4e:98:47:
         19:cd:6c:73:88:4b:9c:a9:61:52:d7:82:98:87:7d:e6:f3:98:
         83:19:39:7b:cd:33:54:f5:36:8a:1f:e6:cf:ae:d6:b9:65:9e:
         25:57:aa:e7:ad:15:35:44:77:25:a4:54:14:b3:40:6b:85:09:
         1f:62:be:46:fb:df:a1:69:09:c6:34:53:e0:ce:4a:34:31:cb:
         9f:0c:48:94:fc:32:a1:85:a3:21:5a:20:f8:2a:f2:81:bc:35:
         ed:e9:24:1e:e7:34:af:92:f4:11:f2:3a:31:b8:ad:ec:ea:d5:
         94:3b:31:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:36:46 2026 by rpki-client