Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
File:                     sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json)
Hash identifier:          pOZBUsLFTBkX5QeRDeqEvVYJxP+ywlC0Cew2uMg62sc=
Subject key identifier:   79:3E:34:CB:74:74:BE:DC:79:2C:90:23:0F:D2:2D:7B:F6:99:FF:27
Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9
Certificate issuer:       /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9
Certificate serial:       01DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
Manifest number:          01D6
Signing time:             Wed 25 Mar 2026 02:53:28 +0000
Manifest this update:     Wed 25 Mar 2026 02:53:27 +0000
Manifest next update:     Wed 01 Apr 2026 02:53:27 +0000
Files and hashes:         1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: zuc/+rpW+aYWI2MVS76PCDJcKkVntCiIDoocNyYa0JQ=)
                          2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: lXCrh/WMvkDpc6n4ZnZrvnnwgqcvP31VsrQGLPZjH+Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl
                          rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91374BB, serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9
        Validity
            Not Before: Mar 25 02:53:27 2026 GMT
            Not After : Apr  1 02:53:27 2026 GMT
        Subject: CN=69c34e27-6d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:97:b2:ce:a2:bf:36:85:a2:46:4d:4a:e9:91:
                    4c:e9:af:8c:1c:ed:91:0a:79:4e:6e:1e:17:96:be:
                    70:dd:04:fa:17:80:90:45:36:8f:77:e8:27:2a:fa:
                    9f:b5:50:38:7d:5d:d1:63:14:47:ce:4a:07:dc:28:
                    f6:a8:42:ec:0d:7f:51:44:c3:88:20:31:8b:d9:c0:
                    7e:2a:f1:a9:21:3b:c5:b5:f3:57:ba:74:c4:e7:b4:
                    84:45:c5:51:53:cc:cd:98:b5:47:43:5b:06:72:bd:
                    6b:5a:b9:3d:bb:30:b6:c3:73:99:54:75:d2:94:dd:
                    da:d4:be:26:e2:be:c1:8b:7c:85:9a:85:a4:dc:81:
                    6d:71:c6:4c:8a:20:d1:98:b6:1c:56:30:59:b8:75:
                    ae:09:f0:12:fc:be:f5:74:4d:e2:0f:10:84:b8:f2:
                    3f:8a:fd:75:2c:11:99:6e:b7:34:03:22:03:56:1b:
                    b9:f1:82:3b:24:81:51:9b:72:ac:19:37:5c:34:7a:
                    aa:6f:ad:2a:48:e3:66:93:df:e0:42:a0:92:44:04:
                    3d:db:02:76:ff:e6:85:ce:41:d8:d2:dd:e6:ac:ff:
                    c4:e5:6d:d8:3f:1f:07:32:16:39:94:47:3d:ab:58:
                    ea:53:09:8f:5a:c8:66:af:2c:05:6f:82:c9:8d:72:
                    97:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3E:34:CB:74:74:BE:DC:79:2C:90:23:0F:D2:2D:7B:F6:99:FF:27
            X509v3 Authority Key Identifier:
                keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:bf:a7:49:7b:0f:93:44:b0:3f:c6:55:b9:53:d8:29:56:d3:
         2c:c9:fc:1c:b6:88:2c:59:12:ba:d4:74:55:29:99:a5:46:6d:
         4d:da:4e:b5:3e:71:84:a1:87:7b:02:2f:84:2b:f1:f4:82:a1:
         50:3a:34:41:e7:6f:29:93:85:92:f4:01:ad:c2:03:96:d5:ce:
         f6:93:ea:5a:e3:bb:45:f9:8c:e1:ba:af:b2:02:22:e6:83:b7:
         34:b5:4b:a9:a8:a4:ba:15:d2:2e:3d:08:5d:42:79:5a:f0:42:
         67:e9:23:3f:13:dd:ec:3e:11:50:cf:bd:19:63:ba:6e:28:e4:
         33:a1:01:47:83:89:10:51:15:7c:6f:e9:40:51:39:ad:c3:fc:
         71:dc:e5:8e:0d:66:a1:2e:64:67:22:90:76:2b:60:38:4f:87:
         e8:2e:3c:c7:07:4d:84:0c:54:8a:a5:79:b6:f4:a5:9c:be:72:
         37:53:a2:bc:34:da:8e:45:9b:52:19:87:ce:f4:50:8a:2a:f6:
         8c:95:76:32:f9:5d:c6:cf:b8:76:17:ac:4f:40:6e:84:28:33:
         68:59:3d:89:77:d8:6a:e3:a3:49:2c:d5:09:1b:a5:32:59:f9:
         64:2b:dc:68:2f:57:90:97:e2:8a:b5:53:d5:be:df:9c:1f:78:
         1d:ce:06:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:56:46 2026 by rpki-client