Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft
File:                     a5tdFBgYlY1zBFgvJU6hddhD4_0.mft (raw, json)
Hash identifier:          oswv49AEpfsRAy1h8UvroruREvUQMEGz4pLMW2xTgIc=
Subject key identifier:   1B:11:BB:99:AE:BF:23:0F:A6:70:01:8E:E6:C6:34:C5:BE:35:DF:55
Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD
Certificate issuer:       /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD
Certificate serial:       0A64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft
Manifest number:          0A5B
Signing time:             Tue 24 Mar 2026 19:25:58 +0000
Manifest this update:     Tue 24 Mar 2026 19:25:58 +0000
Manifest next update:     Tue 31 Mar 2026 19:25:58 +0000
Files and hashes:         1: a5tdFBgYlY1zBFgvJU6hddhD4_0.crl (hash: B8SwOKNFYSygJCr153fyfxllwcFEKOkb5rGx/TaCzp4=)
                          2: 8F467E0082DD11EABD325010C4F9AE02.roa (hash: /TyJAfvHXnlcTjTJnBEXj10sAyKFIKDHzBpuyr/AsrA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl
                          rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2660 (0xa64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91359CD, serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD
        Validity
            Not Before: Mar 24 19:25:58 2026 GMT
            Not After : Mar 31 19:25:58 2026 GMT
        Subject: CN=69c2e546-4ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e3:3d:e5:61:aa:2a:d5:ca:f4:95:79:45:85:
                    33:92:af:dc:c3:61:fa:ae:77:f5:c5:96:d8:18:b3:
                    c5:95:14:c7:81:78:7a:67:e6:e8:c6:a0:5b:f9:14:
                    a3:40:b3:48:90:7f:61:06:1d:86:49:f0:d9:d8:d2:
                    f8:65:1e:76:45:53:69:be:94:e4:fe:ea:99:9f:f2:
                    61:73:93:f2:59:d8:3e:6a:70:f6:1c:cf:64:a1:62:
                    9a:7d:31:34:53:6e:ef:73:bb:ac:c9:bc:81:99:4b:
                    53:53:0e:39:7b:84:d0:87:bd:c6:a9:c7:fa:73:64:
                    75:41:6a:07:ac:af:d4:2e:c5:27:ff:06:eb:35:ee:
                    03:b5:78:b6:f0:fd:68:09:de:08:53:90:75:75:33:
                    8d:03:2d:c0:42:17:d4:fd:a2:af:ab:52:70:2e:f7:
                    0d:8c:dc:32:ad:b9:94:69:7a:e1:49:85:b2:3b:e6:
                    21:1c:2a:79:77:9c:ff:15:84:db:7c:6f:3e:17:a5:
                    5d:9e:43:e1:15:cf:3e:5f:cf:fc:0e:41:1e:5d:98:
                    ca:b5:04:b8:00:f2:d9:4e:af:04:34:2b:ae:cb:bb:
                    8c:e4:6d:34:e6:ba:b2:a5:d3:26:6a:28:8c:9e:c9:
                    0c:5e:71:f2:b9:2a:e3:e3:8b:24:b0:5c:8c:11:77:
                    fc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:11:BB:99:AE:BF:23:0F:A6:70:01:8E:E6:C6:34:C5:BE:35:DF:55
            X509v3 Authority Key Identifier:
                keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a5:12:95:a3:0e:2f:92:b5:07:a3:05:98:11:35:eb:87:cd:
         01:3d:82:37:0d:7e:15:59:19:5d:62:cb:20:d4:2c:34:9a:0e:
         f4:32:50:22:41:f1:21:c2:2d:d8:36:3b:fa:f3:51:51:ac:6f:
         c8:f2:db:f8:a2:a8:03:b5:a5:a1:6d:63:bb:44:14:90:af:c3:
         13:04:c8:c2:c8:14:e7:7a:5b:01:2b:56:d0:03:fa:2a:70:3a:
         26:42:3f:c5:32:9e:12:c9:cf:1d:4c:b7:0b:c9:28:89:2b:f2:
         52:7e:0b:60:53:5a:12:f0:c6:97:25:6e:04:ac:09:c2:63:00:
         13:07:77:06:bf:d1:d8:94:a4:56:75:0d:71:c4:ba:a4:ef:9a:
         b6:bd:cc:b7:38:e5:02:79:96:29:e1:dc:c1:0c:a8:eb:f6:fb:
         b8:08:70:fc:f2:96:72:b2:70:05:1b:ad:1a:50:6d:29:2e:31:
         98:13:ad:8d:0c:93:20:c2:a1:1f:ec:e5:01:a7:3f:86:b1:52:
         87:5b:1a:38:13:01:52:42:a0:b3:a2:01:68:1c:52:f8:fe:c9:
         b6:d0:70:63:5e:b6:f8:35:8c:f5:60:7a:06:68:9c:ca:ea:d4:
         e4:49:bf:56:74:b6:66:9c:3c:46:bb:89:52:b5:1a:e7:f3:db:
         b4:85:7a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:53 2026 by rpki-client