Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft
File:                     sg6f5krzzoyYJyXQEqFCknJjzvA.mft (raw, json)
Hash identifier:          fncHDKF7Eczo6vTTBPgLG+vYi033zLFMdfbKZhUScvY=
Subject key identifier:   02:2F:D7:E1:02:53:98:27:F2:DA:37:C5:64:1D:A1:BA:D2:B7:AC:C3
Authority key identifier: B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0
Certificate issuer:       /CN=A91477C3/serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0
Certificate serial:       08AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft
Manifest number:          089C
Signing time:             Tue 24 Mar 2026 20:20:34 +0000
Manifest this update:     Tue 24 Mar 2026 20:20:33 +0000
Manifest next update:     Tue 31 Mar 2026 20:20:33 +0000
Files and hashes:         1: sg6f5krzzoyYJyXQEqFCknJjzvA.crl (hash: vxyudOXVFAwWyGVWtogN82QVxvGfQDkXKmFF60pMH80=)
                          2: 5FB89FD4DA8511EEBD7AF854C4F9AE02.roa (hash: XSSSfE9iJebrluIiHWJs0Zhb1i4/3PM9OkDY26rCm9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl
                          rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2222 (0x8ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91477C3, serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0
        Validity
            Not Before: Mar 24 20:20:33 2026 GMT
            Not After : Mar 31 20:20:33 2026 GMT
        Subject: CN=69c2f212-eefa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:67:3b:2c:76:67:2c:86:26:92:94:31:09:50:
                    b0:3a:99:dc:c0:a3:6a:18:b2:10:9b:99:50:43:f8:
                    21:36:38:f0:26:3b:8f:4f:b9:c2:4b:f9:b0:43:bf:
                    07:31:13:6e:e7:a4:19:e8:28:31:97:df:62:0a:54:
                    89:fb:b4:22:f0:33:b3:d5:af:fa:f9:20:5f:e9:fe:
                    20:b6:a2:42:eb:f0:b9:d0:39:65:d1:81:e8:bf:72:
                    36:1f:be:eb:ec:6f:cd:94:58:d2:b7:5c:eb:2c:48:
                    d0:3c:f5:07:b0:d1:1a:2f:6c:d9:cf:fc:89:a1:e3:
                    fe:4f:0a:49:4e:f5:00:9c:0a:86:1f:5a:4a:75:f0:
                    a1:32:52:26:54:41:30:b7:f3:b0:0a:8e:14:de:1e:
                    f3:c5:d3:28:71:9e:20:53:2a:ce:43:51:6f:01:f1:
                    e5:cd:ea:49:38:65:74:5a:3a:a0:25:d1:ca:31:bd:
                    17:ef:c0:2f:2f:2a:18:83:4b:27:77:2e:bc:4f:3f:
                    af:0d:8b:59:94:d0:f3:f0:03:f5:bf:d3:bb:5b:61:
                    24:18:4c:87:13:d2:68:f8:ef:d3:30:0f:0a:8d:42:
                    64:72:d6:a7:f4:3a:15:77:41:ab:5e:a5:d3:e2:c1:
                    8f:c2:de:2a:a3:c0:0c:c7:8a:8f:e7:80:5f:0c:ec:
                    76:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2F:D7:E1:02:53:98:27:F2:DA:37:C5:64:1D:A1:BA:D2:B7:AC:C3
            X509v3 Authority Key Identifier:
                keyid:B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:6e:d5:d4:17:17:92:a8:70:a1:e3:8e:1c:ef:b1:83:00:30:
         42:dc:04:99:ee:80:c5:dd:be:2e:08:b3:07:10:cc:64:f9:32:
         cd:0c:3f:dd:28:78:50:71:35:58:46:2c:f2:84:da:aa:fa:cd:
         40:4c:d8:80:d1:67:de:07:52:49:7c:38:8a:6e:0b:02:2d:cd:
         c4:5a:00:7a:11:5d:8f:fa:f7:d4:55:0b:f2:82:3c:30:a8:fb:
         6d:f1:b3:b0:5c:d6:4b:e0:4e:65:58:88:e9:a4:3e:5d:37:40:
         9f:f4:eb:c6:84:3b:30:45:65:55:6e:f2:c8:7d:60:08:62:59:
         44:3c:d9:80:a2:a4:98:ac:62:88:36:0e:e4:1a:1c:b1:0c:3e:
         36:f4:cb:8f:8e:02:5e:1b:af:78:65:4c:e0:d9:60:83:de:06:
         d3:85:2b:e1:c0:ee:fe:33:0e:7c:55:68:84:93:21:37:4d:df:
         30:4b:98:26:d4:d3:14:29:1c:1b:d9:e5:02:e7:6e:39:29:48:
         bf:0d:0e:2d:85:58:5a:1e:db:83:7e:97:cc:d1:b4:9b:f2:66:
         a1:f0:d3:f1:91:9e:d1:62:1a:3c:60:40:6a:e9:e7:e5:30:ef:
         54:99:1c:1a:37:a9:6b:34:ba:17:a9:48:01:a1:4f:8c:7d:72:
         9b:a8:eb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:32 2026 by rpki-client