Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.mft
File:                     1H75KB4xQx3ljjR8aX45vydCkRk.mft (raw, json)
Hash identifier:          M3ckSecYLaedHxKhWRIrQeZiNgQcU6KjdXy8WIZ2pU8=
Subject key identifier:   B2:FB:13:9C:31:C0:BD:BA:6D:DD:E1:21:3E:9D:A8:E6:70:C8:46:49
Authority key identifier: D4:7E:F9:28:1E:31:43:1D:E5:8E:34:7C:69:7E:39:BF:27:42:91:19
Certificate issuer:       /CN=A91612FE/serialNumber=D47EF9281E31431DE58E347C697E39BF27429119
Certificate serial:       0103
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1H75KB4xQx3ljjR8aX45vydCkRk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.mft
Manifest number:          0103
Signing time:             Wed 25 Mar 2026 05:21:25 +0000
Manifest this update:     Wed 25 Mar 2026 05:21:25 +0000
Manifest next update:     Wed 01 Apr 2026 05:21:25 +0000
Files and hashes:         1: 1H75KB4xQx3ljjR8aX45vydCkRk.crl (hash: 9zt6xtu2bdr2BXRTiYo/BfYJ84c2DhaXCiWrL2oEWAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.crl
                          rsync://rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1H75KB4xQx3ljjR8aX45vydCkRk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91612FE, serialNumber=D47EF9281E31431DE58E347C697E39BF27429119
        Validity
            Not Before: Mar 25 05:21:25 2026 GMT
            Not After : Apr  1 05:21:25 2026 GMT
        Subject: CN=69c370d5-675b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ee:7e:a4:46:c2:e7:42:2c:a0:81:74:4b:31:
                    23:78:20:92:8e:be:88:a4:98:e3:06:6b:9f:da:18:
                    4b:bf:d9:03:d5:a4:60:61:d5:0a:74:ed:99:d2:d4:
                    b3:4c:cf:9b:c6:6e:35:e2:dd:d1:39:e9:13:d9:36:
                    89:93:dd:68:79:fc:8a:2c:73:af:72:2a:fb:b1:67:
                    d1:16:bf:e9:5c:fa:d5:eb:da:c7:b5:90:29:4a:86:
                    b1:65:c5:26:d2:49:c0:08:9d:b5:c1:41:d5:92:bd:
                    b1:14:35:af:ce:c9:9a:64:a1:c8:6a:75:ed:1c:7c:
                    af:ab:90:99:5f:0c:b2:e4:1f:a2:c9:ca:16:db:61:
                    01:7c:b9:37:30:bc:ec:d4:8f:39:47:d6:c9:e7:6f:
                    fa:c6:a1:c9:4b:7c:97:3d:ab:e4:86:57:c3:0f:24:
                    40:27:9c:84:69:68:41:34:89:c5:16:b6:bb:87:43:
                    fe:70:94:49:2c:8d:bd:be:40:92:08:6f:71:ad:b5:
                    ff:9d:eb:ab:3d:b5:12:1e:17:51:ea:47:39:b3:17:
                    e3:c0:3a:b5:6c:99:4c:af:cb:38:32:0a:73:87:41:
                    71:73:ba:d0:48:5a:2e:2c:83:b4:94:1f:55:5e:b9:
                    cb:a9:29:6e:47:27:df:11:15:64:bc:c6:1e:88:da:
                    ba:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FB:13:9C:31:C0:BD:BA:6D:DD:E1:21:3E:9D:A8:E6:70:C8:46:49
            X509v3 Authority Key Identifier:
                keyid:D4:7E:F9:28:1E:31:43:1D:E5:8E:34:7C:69:7E:39:BF:27:42:91:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1H75KB4xQx3ljjR8aX45vydCkRk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:62:ca:70:7f:34:a7:a2:06:ab:8e:0f:1d:21:db:d6:42:2c:
         85:fe:17:f5:11:d8:8b:9c:ce:ca:d6:8f:5b:6f:cc:b6:9f:a6:
         e1:99:54:36:02:22:38:bb:b9:90:b4:d1:8b:a1:29:76:4a:b8:
         dd:ba:a2:a3:2a:c5:d4:69:ff:a9:29:a7:62:27:e1:21:22:5d:
         3a:14:37:35:0c:2f:66:04:4b:73:8e:8a:f8:fa:66:11:23:ca:
         7d:c5:55:7c:ed:cd:5c:02:21:47:96:71:63:b8:40:ea:3b:c1:
         19:c5:b8:b7:dd:1d:1e:3c:28:fa:5b:b0:e8:00:c0:e1:dc:4a:
         6c:92:19:13:3d:a6:46:bf:bc:6a:96:c0:e7:15:db:2c:d2:2c:
         20:7e:e0:91:10:17:39:b1:ef:9a:26:04:bb:26:a9:e9:b0:b4:
         12:48:d4:76:06:26:11:55:bd:4b:8e:f4:81:5d:de:0a:99:9e:
         34:98:cd:15:7a:87:5f:08:b2:16:1c:c6:40:ab:6a:8a:2f:cd:
         33:dd:bb:18:ec:04:0b:f0:df:b7:dc:04:bd:7c:af:ab:fe:11:
         0e:77:41:d2:c4:c4:6f:bf:54:cc:57:d5:28:f1:72:98:3b:ba:
         a4:a2:70:db:71:ac:d8:bb:99:2d:ba:ea:e1:be:46:94:71:68:
         64:9e:f6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:43 2026 by rpki-client