Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
File:                     C_K1lEw6LMq2wdErw2pa88Lc938.mft (raw, json)
Hash identifier:          t3FzMYntWWqNX9z7PHTaz5nIEjAAaGb0azjc8zRPM0k=
Subject key identifier:   1D:3C:5C:2E:72:A1:71:43:6E:F7:9D:BB:49:DA:AE:21:38:E4:68:0F
Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
Certificate issuer:       /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
Certificate serial:       0D56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
Manifest number:          0D3F
Signing time:             Tue 24 Mar 2026 17:52:34 +0000
Manifest this update:     Tue 24 Mar 2026 17:52:34 +0000
Manifest next update:     Tue 31 Mar 2026 17:52:34 +0000
Files and hashes:         1: C_K1lEw6LMq2wdErw2pa88Lc938.crl (hash: VdnLA3t2UaccsvrZIcSdtChgrTmDoKHT4ksUvDTtAn8=)
                          2: C981BB3CF36A11E983B1D764C4F9AE02.roa (hash: qcCtaMG3+No90shDmbUp/tU8ruNeRWwZsRG7YBEd9j0=)
                          3: F5660FBC160611ECB3912A7EC4F9AE02.roa (hash: ZrjcR9T+8HqKoXscHlTL4X0njAxpjmVzzUteKMnha0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl
                          rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3414 (0xd56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91473F8, serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
        Validity
            Not Before: Mar 24 17:52:34 2026 GMT
            Not After : Mar 31 17:52:34 2026 GMT
        Subject: CN=69c2cf62-4830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6f:0f:69:9b:36:31:8d:f9:b3:83:a5:58:42:
                    df:54:7a:d4:78:02:5d:ff:31:7d:c0:af:ee:98:a7:
                    b1:ac:e3:35:5f:d4:b2:de:4a:26:1f:88:aa:6d:3e:
                    1e:88:9f:a9:e6:7e:aa:7a:85:25:b8:58:47:a5:86:
                    42:59:ce:77:24:8c:bc:25:f5:4b:7a:bb:2f:f5:3f:
                    80:28:ca:94:a1:64:15:55:90:85:12:10:65:1f:3e:
                    2f:e7:8c:67:40:9d:5d:23:85:15:7e:fd:5c:57:4b:
                    b5:fc:eb:b4:cb:b6:77:dc:52:9f:d0:dc:4c:da:b3:
                    47:98:79:e2:90:7b:86:14:8e:5b:21:5a:53:b6:c9:
                    92:80:43:f3:5e:ca:b9:52:c0:5e:10:41:d6:09:5d:
                    b1:7f:59:6b:69:3f:5e:7b:98:eb:e9:60:e8:77:bb:
                    65:39:e1:83:88:44:49:78:45:0f:4d:59:56:71:1a:
                    a9:bc:36:ca:8c:66:ea:1a:e3:b4:0f:c7:1a:fd:80:
                    c7:18:d4:a8:98:69:00:65:84:3d:bc:19:c1:83:d3:
                    63:8b:a9:51:33:f1:3e:0f:20:b4:6d:d5:fe:bd:08:
                    33:58:3c:ac:16:3b:ed:b6:71:85:41:3e:69:cf:df:
                    0f:d4:c0:3f:af:37:e4:32:2c:21:0f:50:86:2f:4f:
                    38:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3C:5C:2E:72:A1:71:43:6E:F7:9D:BB:49:DA:AE:21:38:E4:68:0F
            X509v3 Authority Key Identifier:
                keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d7:ce:dd:ec:85:d7:44:80:9e:d1:d7:d6:97:08:87:59:43:
         70:88:15:39:2c:62:63:ef:0b:37:12:cc:f3:fd:d8:77:17:de:
         d9:1e:73:b9:a6:12:19:5e:85:18:93:90:0f:4d:52:a4:b9:5d:
         21:e3:f1:70:ee:4b:f4:96:e0:f1:ef:a0:3c:ba:5c:48:ac:70:
         33:87:22:5a:40:91:d0:ba:fe:d8:74:1e:52:5e:b3:f3:23:ba:
         a4:8b:b8:54:59:bc:ee:7f:d4:e2:c6:4f:dc:15:b8:08:c4:eb:
         f1:05:fd:14:4f:b5:10:a2:7c:d8:ca:38:56:f5:98:dc:ca:28:
         2f:0e:3c:17:29:2b:c4:b3:60:5d:16:ec:f7:3f:20:15:cb:34:
         b4:c4:3d:68:f6:f9:09:bf:42:06:19:de:62:89:93:ff:9e:79:
         3d:b2:00:6f:da:39:97:e3:2f:d7:dc:76:bc:d0:06:3f:42:58:
         25:b8:74:ca:54:fe:60:b6:54:41:3c:a4:ef:cf:45:fb:2d:f4:
         00:25:48:e4:04:f4:a8:c3:09:d3:cd:5a:b8:47:ae:da:8d:56:
         4a:90:c5:7f:00:ba:a4:a0:dc:b1:2f:c9:ba:e3:5e:f7:47:44:
         73:b4:ef:3b:57:66:ee:68:fb:ec:d6:15:fe:63:23:01:08:c1:
         9c:19:aa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:30 2026 by rpki-client