Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
File:                     4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft (raw, json)
Hash identifier:          SjV4Q20tlg7J8bwiMJb3qELAxp242Ff7SwIwi3oH/9k=
Subject key identifier:   F6:90:29:85:FB:EB:1D:D3:5C:AC:CF:92:88:77:59:BC:A6:48:1E:FD
Authority key identifier: E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A
Certificate issuer:       /CN=A91493FC/serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A
Certificate serial:       0259
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
Manifest number:          0250
Signing time:             Wed 25 Mar 2026 01:42:54 +0000
Manifest this update:     Wed 25 Mar 2026 01:42:54 +0000
Manifest next update:     Wed 01 Apr 2026 01:42:54 +0000
Files and hashes:         1: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl (hash: 3FoHkWcW17JvfZrpatBEa9bRmF/W3o3hYW285BBnlMs=)
                          2: D076B1A49F2911ED937CF05AC4F9AE02.roa (hash: 0mStAYqkRJzWhbr9vtFnPK6aXqaBSA4ax3GBzsLy3eM=)
                          3: 38702E769AF611ED8D41985BC4F9AE02.roa (hash: mhkOh2zSHS1+l3qaaKFXDPoYKhGJyCSHTM8TY0dVm/4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl
                          rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91493FC, serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A
        Validity
            Not Before: Mar 25 01:42:54 2026 GMT
            Not After : Apr  1 01:42:54 2026 GMT
        Subject: CN=69c33d9e-58fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4e:2f:ef:ac:e7:72:cd:51:a5:0a:27:82:f8:
                    0f:8b:ea:01:ff:ba:2e:80:be:1d:c5:4b:4a:ab:ed:
                    d5:91:87:a4:f6:92:ce:7d:9d:bc:02:dc:3a:24:2d:
                    64:63:3a:36:4a:19:00:d8:de:4f:c6:23:76:fe:96:
                    64:c3:6e:6c:4b:8b:15:60:bf:bd:47:ad:12:36:14:
                    a3:48:50:c9:aa:a5:27:ac:04:c7:0c:28:9e:33:2c:
                    50:78:8f:17:b6:6c:08:6f:86:35:9a:d3:70:f5:ea:
                    fd:f3:c9:ee:63:bb:73:6b:f6:32:21:0b:a1:04:74:
                    76:dc:99:d2:22:a8:0e:64:f1:ea:79:47:49:e4:df:
                    40:65:db:fc:15:d6:c3:56:42:f0:00:5a:d7:0e:2c:
                    34:18:d6:ee:57:95:c7:76:c9:a2:d5:ff:54:b6:aa:
                    cc:11:b9:a0:52:c0:a8:10:64:a9:e1:82:30:28:f1:
                    c2:91:a3:db:b7:ca:6a:61:fb:9a:79:c7:9e:36:3e:
                    ad:6c:70:5e:62:00:19:38:fb:81:e6:2b:ea:e0:06:
                    d6:8d:4b:68:9c:38:85:bb:99:e4:8f:60:37:34:de:
                    fd:0c:5f:48:c5:44:04:93:ad:c8:c5:7b:c6:16:39:
                    c7:fb:78:de:31:ef:c4:df:4f:62:96:b5:92:1e:ce:
                    52:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:90:29:85:FB:EB:1D:D3:5C:AC:CF:92:88:77:59:BC:A6:48:1E:FD
            X509v3 Authority Key Identifier:
                keyid:E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:4d:1b:b4:e9:f4:cd:82:8a:65:bf:2f:28:8e:01:53:a9:8c:
         c1:dd:cf:9a:d4:a9:49:c4:37:fb:2a:08:98:70:e8:6b:b7:f5:
         78:57:dd:9d:e6:1f:5d:4d:c9:69:61:99:a3:cf:db:07:da:d2:
         d4:bc:da:ae:2b:53:ae:c6:55:a9:91:67:b8:4a:6b:a5:7d:83:
         14:b1:27:d8:89:6d:df:c5:e2:dc:1b:42:5d:4a:74:72:21:83:
         2a:af:27:48:d7:1d:14:1c:9c:d8:30:f4:18:df:7a:9e:72:71:
         3b:9a:91:ca:35:cf:37:fc:66:03:6c:05:a6:ee:c4:2b:98:ed:
         ed:7c:70:be:ec:94:2a:9b:29:a4:3c:76:86:97:54:af:ae:84:
         36:6d:97:fb:e2:74:36:1e:39:d6:49:69:a3:e6:5b:79:df:a2:
         87:27:3f:08:ea:ca:bc:aa:75:37:10:fb:59:06:23:cd:41:d7:
         73:4e:a6:f4:8f:7f:70:0f:82:1d:a5:00:39:0b:bf:7a:5c:c9:
         a3:1e:5a:db:bb:05:02:79:9e:93:1c:bf:37:f3:97:e7:93:75:
         92:4f:f9:44:4b:b9:a4:43:b0:50:bc:0c:bc:51:17:26:3a:db:
         a0:ad:9d:a0:d2:37:8a:3a:4f:45:06:06:15:e7:9c:2f:60:0b:
         d6:7c:6f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:22 2026 by rpki-client