Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
File:                     0nYmctKXWA5IQijBceWokHMMF28.mft (raw, json)
Hash identifier:          mrAw5S2dWWqPdDaBFZBs7Bu18+vfaRPGPnuRwEX5CKY=
Subject key identifier:   09:4F:7D:EA:50:F9:5D:00:3A:8B:07:32:3C:B5:EB:F3:EC:9D:CC:31
Authority key identifier: D2:76:26:72:D2:97:58:0E:48:42:28:C1:71:E5:A8:90:73:0C:17:6F
Certificate issuer:       /CN=A91724A6/serialNumber=D2762672D297580E484228C171E5A890730C176F
Certificate serial:       0245
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
Manifest number:          023E
Signing time:             Fri 27 Mar 2026 02:03:48 +0000
Manifest this update:     Fri 27 Mar 2026 02:03:47 +0000
Manifest next update:     Fri 03 Apr 2026 02:03:47 +0000
Files and hashes:         1: 0nYmctKXWA5IQijBceWokHMMF28.crl (hash: q4YOH2h/pEPFGmIUzdDsu5QtWTii0nH98U1AXI6gzH4=)
                          2: 950A55CCC3C711ED8419AA64C4F9AE02.roa (hash: rlJpxeuz4XfDgn5OftJBgDHyUQdmKKYiwzNQtX6KD/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.crl
                          rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91724A6, serialNumber=D2762672D297580E484228C171E5A890730C176F
        Validity
            Not Before: Mar 27 02:03:47 2026 GMT
            Not After : Apr  3 02:03:47 2026 GMT
        Subject: CN=69c5e584-4d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a0:49:32:b3:32:7f:23:3d:cc:6f:a8:56:4b:
                    f5:94:fa:ec:2c:c5:3d:f6:78:4b:41:8a:dc:04:f5:
                    35:bf:18:20:e0:a8:43:c0:69:96:0c:21:06:de:c2:
                    6a:03:64:d7:b1:28:b9:b1:bf:1d:ca:4d:03:3a:7a:
                    9d:ca:73:57:ce:0b:24:e1:53:44:ea:d5:6e:cd:b6:
                    b4:61:84:b8:b8:ce:c1:e2:87:3d:1d:78:6a:6e:27:
                    ab:d6:52:44:37:c6:1a:d5:67:0c:cc:ef:8d:a1:33:
                    2a:c8:35:18:9b:b3:7a:13:b9:6f:59:b1:a6:12:52:
                    98:93:d5:98:63:5d:4c:23:23:46:c9:dc:13:d0:37:
                    0f:e5:a7:7a:f6:6d:c6:18:d0:8d:a1:ec:91:0e:f9:
                    b6:8b:3c:eb:77:aa:67:3c:30:a5:d9:e4:11:1b:f4:
                    d1:b3:40:92:6b:76:9a:25:9f:d4:d4:24:a1:26:a5:
                    8b:a4:55:30:48:73:3e:ad:ab:c3:5f:49:a1:9d:6c:
                    55:2d:3d:8e:7f:d6:f3:46:f1:75:15:d0:bb:2d:f9:
                    1d:f6:f2:68:3e:d8:3f:c8:91:bd:ed:4f:02:59:4a:
                    93:7a:35:67:64:6b:6f:9f:a3:15:09:86:12:3d:67:
                    83:42:43:ff:87:7c:57:84:53:74:56:cc:5f:28:f9:
                    56:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4F:7D:EA:50:F9:5D:00:3A:8B:07:32:3C:B5:EB:F3:EC:9D:CC:31
            X509v3 Authority Key Identifier:
                keyid:D2:76:26:72:D2:97:58:0E:48:42:28:C1:71:E5:A8:90:73:0C:17:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:48:a3:44:33:6c:a5:65:79:f0:0b:b0:7f:32:a9:1a:a2:bd:
         8d:f3:5d:34:a9:ad:cc:77:07:38:15:2d:53:37:d3:59:1c:80:
         0c:c7:68:56:cb:6d:f4:ab:55:8a:9a:fd:78:65:a9:f5:93:38:
         40:30:e3:31:bc:af:9b:ce:b9:36:e1:de:3e:62:7b:ed:bb:8a:
         82:af:40:89:27:ce:19:7e:53:91:1e:4b:fd:fe:89:ee:5d:6b:
         55:cb:c1:54:73:99:44:3e:ed:e0:eb:d5:8e:fc:34:f1:9a:2e:
         ad:8c:c6:3d:ca:46:df:52:b8:8d:8c:6d:00:6b:d1:71:5c:c3:
         1e:e4:f9:f7:00:62:7e:d6:84:e7:56:64:35:2c:78:95:18:75:
         5e:3f:10:cc:82:92:d0:bb:a9:e9:85:4e:89:46:09:b7:70:6d:
         5b:4c:e0:35:79:6f:cb:9f:06:05:2e:0b:02:28:62:c2:f0:33:
         0d:0c:ad:41:40:7f:91:54:8d:6e:5d:11:b9:2d:c9:91:32:57:
         7e:81:ca:14:c6:6c:7f:1b:0e:dd:cd:4c:f6:da:0d:46:e0:67:
         e4:b6:21:b1:61:43:da:fd:7c:3d:ee:e0:ed:90:fb:d6:14:1b:
         68:81:7a:0e:57:01:3b:5a:f7:24:47:6d:57:f9:7d:de:ab:13:
         65:29:90:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:33 2026 by rpki-client