Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
File:                     AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft (raw, json)
Hash identifier:          LMXSCpf9fq0m18uFyKTFFjmjbIbJ83LDVMuYMXhsa/c=
Subject key identifier:   2B:2C:AB:7B:DC:32:B5:FD:F1:47:B5:5F:AD:D4:F3:71:C1:59:A7:4D
Authority key identifier: 00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB
Certificate issuer:       /CN=A91735C9/serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB
Certificate serial:       0BF2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
Manifest number:          0BE6
Signing time:             Thu 26 Mar 2026 18:46:59 +0000
Manifest this update:     Thu 26 Mar 2026 18:46:59 +0000
Manifest next update:     Thu 02 Apr 2026 18:46:59 +0000
Files and hashes:         1: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl (hash: H3I3q1xM1OjtBrw+tKf8cvp2jHnotWND+4xaU3ba4fo=)
                          2: 32DDB7DA368B11EA9713E971C4F9AE02.roa (hash: jQEsRXKGQd/Fm36zrxqAJNpuT36PbNJ9lnCBkWVizjk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl
                          rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 18:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3058 (0xbf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91735C9, serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB
        Validity
            Not Before: Mar 26 18:46:59 2026 GMT
            Not After : Apr  2 18:46:59 2026 GMT
        Subject: CN=69c57f23-8de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2d:e8:6d:ee:cb:89:c1:07:24:0f:bc:88:ad:
                    da:d1:3b:a7:2b:25:01:b2:01:c5:54:fa:20:63:85:
                    20:3c:94:6a:23:29:bd:c0:36:9c:3c:cf:3a:6e:de:
                    28:0c:aa:71:77:a1:0c:04:7d:c5:f6:a1:49:df:a1:
                    13:27:2a:7b:40:ee:1e:78:94:4c:ac:4f:b2:c6:76:
                    0d:88:06:16:82:46:54:11:b4:06:71:2d:c4:13:94:
                    0a:06:2e:0d:ff:b3:b5:79:f4:c5:1d:f9:e7:14:23:
                    23:0b:06:cb:31:b6:22:a9:31:fe:f4:5c:84:32:b1:
                    46:9e:63:ad:60:55:d1:ab:70:0e:11:de:3d:2b:85:
                    15:7d:75:5e:61:f3:d1:28:1c:c2:44:d9:d6:03:18:
                    e1:c2:fa:97:ad:10:fe:f3:dd:ea:ea:b9:96:cd:67:
                    ec:0a:88:b5:47:12:26:5c:6a:ea:1c:27:e2:fb:8a:
                    b6:69:e2:3b:90:1a:93:e8:f8:2a:f7:53:b3:9d:5b:
                    4c:d7:1d:55:24:35:d3:6d:d2:69:8f:c8:01:3c:64:
                    1c:0a:01:c3:f9:39:e6:4b:05:04:4c:00:87:5d:83:
                    c0:46:74:0e:24:a2:8f:23:98:75:34:13:55:41:62:
                    79:ac:96:9f:bf:20:43:5d:7f:26:b5:d5:56:9d:67:
                    99:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2C:AB:7B:DC:32:B5:FD:F1:47:B5:5F:AD:D4:F3:71:C1:59:A7:4D
            X509v3 Authority Key Identifier:
                keyid:00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:c8:86:28:68:70:eb:b6:d3:ea:2e:db:d3:14:37:7b:10:10:
         0a:db:d3:9a:e0:c7:ec:90:ca:74:5d:53:13:76:c6:ff:3a:4a:
         34:6b:7a:6a:c4:04:df:31:18:9a:63:d3:7e:4e:db:7e:b0:b8:
         0b:68:29:7d:86:54:6e:84:15:9d:27:f5:ef:79:d0:d7:83:db:
         77:2c:5b:50:cf:84:c1:cb:e7:2e:d0:c4:1c:b2:1b:1a:80:32:
         03:a7:d4:98:a9:75:cf:26:ce:25:dc:65:8a:84:35:71:a5:5f:
         10:f0:6f:7f:20:1a:d0:a0:8a:b2:30:80:31:34:8d:e1:87:a5:
         a2:e0:b4:7a:78:a2:27:50:69:15:37:27:f9:21:b7:17:6f:e3:
         4d:1a:e8:41:99:13:c5:b2:9a:aa:df:8a:b5:76:e2:ea:69:17:
         1b:5b:a4:f7:97:7e:9a:1a:82:34:51:9a:e9:e4:03:ee:ec:97:
         e7:27:1c:43:19:31:76:2a:c8:0f:a9:10:d7:a8:fb:8b:35:d5:
         4f:98:26:38:e8:c6:d8:31:4b:b2:46:70:29:d1:34:a0:5d:3c:
         f9:14:52:07:f4:e8:eb:c0:e2:54:15:5a:dc:34:a9:60:fd:f5:
         f2:5e:db:df:b2:c3:03:16:b1:e3:5a:e0:35:77:6e:56:47:a1:
         b9:6c:27:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:59 2026 by rpki-client