Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
File:                     J04DtnsxEz3nwKrpninBmVlSta0.mft (raw, json)
Hash identifier:          QAf3U+kqGslT/yidyaaU5IRrxvuW/bFdBwOCuN/zWw4=
Subject key identifier:   12:0B:02:16:E3:47:23:86:C4:82:1E:E9:0D:3D:CE:DE:AA:CD:87:50
Authority key identifier: 27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD
Certificate issuer:       /CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
Certificate serial:       0C15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
Manifest number:          0C01
Signing time:             Tue 24 Mar 2026 18:38:59 +0000
Manifest this update:     Tue 24 Mar 2026 18:38:58 +0000
Manifest next update:     Tue 31 Mar 2026 18:38:58 +0000
Files and hashes:         1: J04DtnsxEz3nwKrpninBmVlSta0.crl (hash: wjYnKFU/RlLJ+oHuq0I1JM8JpuRi7KmPx8FJlyZw6Ws=)
                          2: E1647F18303311EA8796D584C4F9AE02.roa (hash: hvHQ4oovH4LfseVNWUdyIbRafNtihmdVkn0b5XITvtA=)
                          3: E1FC5A5E303311EA8796D584C4F9AE02.roa (hash: TblqmML4Z56TJGS/QmGAg1lALjsba+7daK1iMQjSZu0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl
                          rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3093 (0xc15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91384FB, serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
        Validity
            Not Before: Mar 24 18:38:58 2026 GMT
            Not After : Mar 31 18:38:58 2026 GMT
        Subject: CN=69c2da42-d3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cb:5a:a6:d0:de:a4:ae:c8:c9:c5:4b:2f:99:
                    14:6d:3f:f7:34:9f:f6:e7:56:a0:cf:e4:0b:95:43:
                    51:e8:52:34:9f:ac:53:ee:b2:8f:e5:d1:8c:e1:e0:
                    59:00:60:41:83:17:99:69:a2:a5:b5:4c:99:e9:e7:
                    bf:f6:08:91:5c:f6:a3:be:52:a9:69:86:95:bf:b8:
                    1e:8f:18:1e:ef:a3:dd:a5:e1:22:05:66:d8:95:97:
                    81:fb:38:92:df:fe:00:fc:0c:39:89:43:80:3a:fc:
                    3a:04:b5:71:bc:1b:4b:cd:37:37:61:3c:ce:0f:de:
                    22:a3:eb:d2:bf:e8:96:62:3e:52:a7:0e:fb:2a:bf:
                    2c:cc:00:a3:b6:c9:a6:04:65:9d:28:b2:19:87:fd:
                    3c:23:aa:b9:74:bd:28:60:d6:fe:91:62:21:8a:b8:
                    3e:a2:d5:60:a8:8b:7a:29:c8:55:3a:98:68:14:87:
                    1b:7f:4c:01:df:a1:7b:08:b5:68:05:b8:38:0d:4a:
                    90:39:1d:67:fa:ba:16:fb:07:52:40:04:ac:d4:f3:
                    32:96:f7:87:d2:fb:ec:fd:f5:9b:ba:ea:90:72:a2:
                    ec:e8:02:3b:4e:be:c2:47:f1:52:c7:87:d0:12:cf:
                    b7:01:4a:4f:8a:49:79:ee:d8:a3:08:18:92:36:55:
                    b5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0B:02:16:E3:47:23:86:C4:82:1E:E9:0D:3D:CE:DE:AA:CD:87:50
            X509v3 Authority Key Identifier:
                keyid:27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:cf:73:d2:cf:c9:6e:b8:9b:7a:ed:ec:a0:3c:3e:9b:94:7f:
         5f:f0:ad:a5:df:33:82:54:df:32:3f:56:dd:81:d2:d2:53:b1:
         60:c3:90:a5:43:ce:bb:d4:c9:a3:79:e2:18:6e:05:6d:78:8d:
         7f:18:dd:61:77:c9:8f:43:4a:bf:bf:0d:72:53:de:38:12:4e:
         37:f0:b4:ad:2a:18:50:94:40:7d:0d:27:48:66:5d:e2:75:9f:
         ce:ec:48:19:a0:08:70:6b:27:49:a6:e8:5f:bb:66:cf:fb:00:
         63:d9:fa:8d:0a:8f:f9:33:64:b8:a3:d6:18:d0:e0:ad:84:a3:
         04:45:02:21:4c:fd:12:e9:61:c7:3a:44:e5:03:ad:c7:5e:6b:
         66:f8:40:e0:9d:6e:e6:15:55:e8:ab:8a:4f:0f:32:e9:7c:af:
         c7:c4:b7:cd:5c:ac:08:83:28:d7:ce:e7:44:09:6f:37:52:3a:
         b3:ef:73:15:ec:7e:8f:23:1d:ae:76:fe:0d:d0:09:53:54:e6:
         30:84:a6:90:09:11:03:b6:62:c9:ab:11:b9:44:22:89:2f:9d:
         28:0d:7e:75:0e:db:00:f6:85:de:dc:ca:74:4c:a4:d3:9f:87:
         f6:8a:9e:fc:7b:19:64:ff:9f:be:05:83:92:61:30:51:5b:da:
         2b:f6:69:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:56:29 2026 by rpki-client