Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
File:                     1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft (raw, json)
Hash identifier:          3YTJb//dVP/nyKMZkvCyOpcBp+Mrit8DBX4hJWR1BeA=
Subject key identifier:   62:6E:F6:28:6C:FD:3D:7A:A4:9B:83:92:AC:62:07:6D:23:56:85:9F
Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59
Certificate issuer:       /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
Certificate serial:       0261
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
Manifest number:          07D6
Signing time:             Thu 26 Mar 2026 23:04:41 +0000
Manifest this update:     Thu 26 Mar 2026 23:04:40 +0000
Manifest next update:     Thu 02 Apr 2026 23:04:40 +0000
Files and hashes:         1: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl (hash: 1XJGr0grt6aaDANeyQWfRcvwcroGTh+lJQu19GcpOAA=)
                          2: 1B4BA08497A711EDA815F80AC4F9AE02.roa (hash: W2iKZuwFXrIaEg1oki94Jl0a2awSnqHnroRhsj7WeDw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl
                          rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91233F8, serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
        Validity
            Not Before: Mar 26 23:04:40 2026 GMT
            Not After : Apr  2 23:04:40 2026 GMT
        Subject: CN=69c5bb89-c17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f5:6a:1d:a4:52:2c:e2:e0:61:50:96:67:e8:
                    11:f4:c8:ae:51:1c:3f:20:95:17:dc:5f:ff:e9:1d:
                    99:32:ea:dd:99:34:02:04:93:30:d0:fd:6e:e6:df:
                    a3:29:38:a3:e1:16:86:02:8a:19:0f:c2:bb:d5:b7:
                    fe:e5:dd:2b:19:0d:30:26:1a:63:7f:56:7e:3c:11:
                    49:91:2e:cf:ac:c7:84:6f:89:09:ec:83:56:91:8d:
                    7c:6f:e4:5d:8d:18:a1:d2:93:2e:a5:10:23:68:c7:
                    61:35:56:31:7e:31:6e:ac:61:c9:16:86:19:f3:c4:
                    04:58:50:82:46:1b:6b:75:03:65:b8:f8:0a:a5:ae:
                    7b:c1:9b:d6:e4:9a:19:fc:27:c8:9b:f8:c3:bc:3c:
                    30:29:a5:bd:63:75:6a:a1:6a:d4:bc:ff:b7:c0:bc:
                    ff:75:34:9f:a0:2f:ba:00:b6:8a:7c:99:0c:6b:a9:
                    8d:8a:a6:2d:01:da:fb:8c:52:64:85:35:f6:58:cf:
                    e8:23:1d:e4:8f:cb:55:6f:fd:1c:68:8e:65:50:de:
                    db:f4:03:cd:b8:db:40:c0:3e:7c:c2:90:2b:49:90:
                    d9:f7:ca:bf:f6:9a:bf:4a:62:dd:25:2f:70:9d:f6:
                    77:0e:26:ba:a3:d3:57:d3:9e:95:6e:73:0f:18:13:
                    ed:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6E:F6:28:6C:FD:3D:7A:A4:9B:83:92:AC:62:07:6D:23:56:85:9F
            X509v3 Authority Key Identifier:
                keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:7d:08:6e:06:5c:2b:84:42:43:01:57:14:7c:24:1b:55:4d:
         01:05:ed:cf:b5:1b:31:8a:96:0f:63:0d:be:07:48:2a:bf:72:
         98:45:e5:a8:34:37:7e:dd:cc:8e:c7:66:be:2b:c4:ff:21:16:
         17:17:98:ee:3a:f3:6d:c9:62:19:49:d2:1c:2f:e0:87:e4:2d:
         7f:87:c5:31:09:e8:47:a1:63:d5:8e:e8:0f:a8:f2:c8:2e:62:
         14:87:03:ed:a7:7d:5e:e1:4b:dc:c8:82:05:ae:92:cd:49:47:
         be:60:0b:57:62:27:5b:5e:5f:84:55:cc:66:ff:bb:d4:5c:64:
         e6:6b:61:91:87:00:ba:df:9b:67:89:b9:59:2c:f2:32:94:99:
         8a:11:6c:60:6a:d6:8d:58:42:17:af:dd:d3:11:a0:04:0c:93:
         f4:f5:f9:4a:aa:62:12:fb:7f:ae:c7:8f:aa:2f:56:bf:d8:ab:
         ba:bb:ea:6e:d3:40:d7:c5:45:30:41:ea:30:0f:40:68:cc:46:
         b8:2a:44:46:ed:4b:b0:d8:e3:3e:b3:c8:33:34:b8:b2:71:21:
         2c:64:9a:d7:c0:81:8e:90:e9:c9:a3:f5:64:a7:18:6a:9a:9a:
         48:21:fd:fa:f3:cf:f4:c2:1c:13:a8:c6:26:7b:45:99:cf:1f:
         75:a9:54:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:10:01 2026 by rpki-client