Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft
File:                     ahpG6ANoiAaY7zBCQgW5d5voseA.mft (raw, json)
Hash identifier:          zYX2T5KL6m3AsTLwobsdVLFxXgtLu/UkrOgAaiBQoeg=
Subject key identifier:   54:90:F7:80:C9:84:3E:03:58:EC:26:58:22:30:87:59:E9:09:A8:19
Authority key identifier: 6A:1A:46:E8:03:68:88:06:98:EF:30:42:42:05:B9:77:9B:E8:B1:E0
Certificate issuer:       /CN=A91442DE/serialNumber=6A1A46E80368880698EF30424205B9779BE8B1E0
Certificate serial:       0688
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahpG6ANoiAaY7zBCQgW5d5voseA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft
Manifest number:          0681
Signing time:             Tue 24 Mar 2026 22:12:22 +0000
Manifest this update:     Tue 24 Mar 2026 22:12:22 +0000
Manifest next update:     Tue 31 Mar 2026 22:12:22 +0000
Files and hashes:         1: ahpG6ANoiAaY7zBCQgW5d5voseA.crl (hash: Se75MK3hEbP+XJIyPxFIOLekrTq8+AnAtRz9AupHcwc=)
                          2: 0D5812C4B2E711EB8A61B44EC4F9AE02.roa (hash: 0o5U/MwsDi8SqCWm3ZLcLDqEydnXo1sYsBEII39u+FU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.crl
                          rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahpG6ANoiAaY7zBCQgW5d5voseA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:12:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1672 (0x688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91442DE, serialNumber=6A1A46E80368880698EF30424205B9779BE8B1E0
        Validity
            Not Before: Mar 24 22:12:22 2026 GMT
            Not After : Mar 31 22:12:22 2026 GMT
        Subject: CN=69c30c46-15e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a8:27:d8:74:23:15:05:89:9d:18:de:f4:1e:
                    ca:4f:3e:58:76:89:fe:c3:bb:f3:02:81:63:12:40:
                    38:99:6c:28:d4:01:5c:e3:b0:d6:6d:c7:13:fe:bf:
                    94:81:9d:6f:a3:31:99:bc:9c:66:73:9b:82:64:4a:
                    84:6f:b5:84:c1:dd:22:b2:52:96:a6:c7:7f:cd:29:
                    8e:60:73:73:57:40:dd:f7:fa:5e:65:5c:c2:45:41:
                    0e:37:17:38:1e:80:b9:8c:98:5a:46:11:20:7c:41:
                    1f:e3:a8:a4:48:e9:28:53:86:96:9d:3d:45:d4:f0:
                    a6:64:4a:df:55:8c:52:92:40:35:e0:b7:88:b3:5e:
                    40:ac:17:55:4e:1e:7e:df:ea:c0:2c:ec:c3:92:9d:
                    77:96:fe:b7:26:49:d1:a9:85:78:c8:4f:e9:0e:02:
                    92:e3:5f:0a:7c:88:5c:76:25:d9:f9:2f:7f:70:60:
                    09:96:1f:a2:97:fd:91:d6:4d:da:56:45:40:3a:ec:
                    1d:05:8c:2e:9b:d9:8a:0b:5e:f7:3e:4b:3e:21:7b:
                    d5:98:5b:7e:16:55:e0:4f:41:9a:ab:a3:ea:1f:4d:
                    41:e1:ff:3d:05:ed:18:84:a4:0d:ce:31:11:26:9d:
                    e5:e0:93:99:0e:01:8b:46:1b:31:e0:2b:2b:4f:72:
                    0e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:90:F7:80:C9:84:3E:03:58:EC:26:58:22:30:87:59:E9:09:A8:19
            X509v3 Authority Key Identifier:
                keyid:6A:1A:46:E8:03:68:88:06:98:EF:30:42:42:05:B9:77:9B:E8:B1:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahpG6ANoiAaY7zBCQgW5d5voseA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fa:3b:a9:c3:f6:4c:21:59:61:83:ea:ed:e3:14:8b:79:9e:
         4f:09:06:19:e9:20:6d:a2:55:ee:17:dc:95:0b:e0:0b:f5:1c:
         9a:ca:eb:bb:83:3e:6e:35:9f:a1:67:d1:df:6d:6f:ff:76:3e:
         07:7d:70:71:db:11:60:cf:00:b7:38:1f:92:8f:ad:fb:99:f8:
         c6:5b:80:78:67:c3:03:d3:c7:6b:d8:a4:1b:2c:85:06:a9:31:
         89:d8:01:06:d4:a6:70:3e:46:d3:ca:eb:3b:29:9b:5a:86:87:
         2f:b2:cf:2d:20:07:9e:9e:d3:5d:bc:8d:79:c9:11:f5:28:77:
         ba:99:e4:7c:71:41:0f:39:67:ea:9f:ea:e1:ad:9c:0a:48:b2:
         ba:d7:b5:61:a7:d0:ef:7f:b6:0a:bf:ce:95:e3:87:56:21:62:
         5f:8b:cc:2d:da:06:f2:21:43:37:36:1d:85:c7:77:56:0e:1a:
         25:16:ce:00:1d:81:14:58:02:33:e1:55:2f:97:67:a5:17:bb:
         17:b5:d4:06:ab:e8:60:ac:2c:b7:8a:d3:7e:d3:18:5a:bd:e2:
         90:3c:18:c5:db:83:01:8e:fd:ac:8f:69:3a:b0:41:46:ff:2c:
         5b:92:dc:98:f0:6b:a8:b5:05:60:a0:ab:62:fc:fc:5c:72:d8:
         b8:28:9a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:10:18 2026 by rpki-client