Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
File:                     m5TObjVVCnQlu0QWLfN8v74FPCU.mft (raw, json)
Hash identifier:          Mo+VsONaMtQgkJCx2JWnETAbZrwGeW4qus48vTa5ZJ0=
Subject key identifier:   15:8F:3C:5F:C5:EE:74:56:8C:AE:91:8B:C2:3A:17:7A:05:E4:2E:59
Authority key identifier: 9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25
Certificate issuer:       /CN=A91776C9/serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25
Certificate serial:       0207
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
Manifest number:          01FC
Signing time:             Wed 25 Mar 2026 02:32:23 +0000
Manifest this update:     Wed 25 Mar 2026 02:32:23 +0000
Manifest next update:     Wed 01 Apr 2026 02:32:23 +0000
Files and hashes:         1: m5TObjVVCnQlu0QWLfN8v74FPCU.crl (hash: WG1PY2XZORSsPWYRtby3vJkLzmLnTCUqeu6vt63K5WY=)
                          2: C9819D5E705711EFBDEF9265C4F9AE02.roa (hash: 7EElla54PME6t43EGMTvu4HFDw83uuSq/ww5cJrQdjM=)
                          3: C872E06C705711EFBDEF9265C4F9AE02.roa (hash: 6fOOVMWHz8uhdua83reqWb8mHIqUK8rXDkUTcJOKXR0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl
                          rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91776C9, serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25
        Validity
            Not Before: Mar 25 02:32:23 2026 GMT
            Not After : Apr  1 02:32:23 2026 GMT
        Subject: CN=69c34937-3327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9c:13:b2:9a:c0:95:ad:62:df:b9:b6:0a:7a:
                    67:6f:3d:c3:6b:b4:2e:c2:8d:f1:50:a0:45:23:45:
                    4e:2e:28:ed:a6:90:39:9a:6c:2f:64:30:c9:3c:3d:
                    bc:34:16:21:a1:85:73:00:45:ee:ec:ad:47:66:62:
                    e1:b6:25:61:57:58:96:76:83:af:45:7b:35:da:9c:
                    bc:5c:da:27:06:3f:0c:b9:0f:0f:7e:ed:9c:3f:02:
                    e7:54:2f:a8:b9:c9:2c:b0:1a:a1:a4:8a:e5:cd:8a:
                    75:6a:b0:ad:ff:70:de:0b:d8:58:54:57:9b:7a:7b:
                    1f:0b:8a:2b:66:68:90:da:7b:57:13:11:d0:08:84:
                    52:f1:76:9a:d2:7c:95:3f:9e:09:31:8f:4b:17:b3:
                    3c:7e:d4:79:00:39:4b:6d:69:c9:8d:79:da:f7:5a:
                    d4:e6:17:66:fd:31:9b:96:6f:30:7c:77:88:e7:7a:
                    27:38:99:14:74:1e:f2:56:bc:42:22:3f:2e:27:b7:
                    9e:82:32:68:44:53:c3:52:1a:3d:3c:f9:ad:e7:83:
                    69:9f:af:b2:a4:fc:74:9b:49:26:57:e8:31:69:1e:
                    f1:91:16:69:14:05:6c:c0:a9:6f:8f:84:7e:c6:97:
                    ab:16:d9:4b:3e:b4:80:46:ae:95:68:d4:1a:1d:9f:
                    51:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8F:3C:5F:C5:EE:74:56:8C:AE:91:8B:C2:3A:17:7A:05:E4:2E:59
            X509v3 Authority Key Identifier:
                keyid:9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:8d:93:56:f8:da:af:73:ab:ed:98:ff:e6:bd:04:ad:85:63:
         16:a9:08:f7:5e:07:4b:e4:75:ec:2d:f3:f7:19:9e:b8:dd:6a:
         76:97:9c:ea:5a:21:9f:33:04:eb:41:ab:2c:f2:36:bb:ef:28:
         d4:20:eb:be:1c:72:89:6a:f5:33:6e:f9:24:26:d6:5a:78:d0:
         e6:bb:46:c4:9a:ef:4f:46:ee:13:4c:4c:f3:79:f4:d8:09:7e:
         8e:b1:85:4c:4f:eb:49:20:22:ca:e9:41:47:7d:75:c4:82:66:
         d5:66:90:3d:f6:73:8d:03:cd:03:d3:70:af:41:68:c3:d8:bf:
         f7:00:b5:84:5d:33:f6:15:b6:55:82:13:8d:04:21:37:72:86:
         ee:e7:ef:45:85:8c:1c:2e:2c:06:e0:91:f9:60:23:d6:7b:a5:
         0e:67:e8:af:80:e8:1a:13:08:46:e8:db:50:09:84:7a:59:e3:
         60:e1:1f:54:ef:8d:9e:c2:85:e5:de:f6:0b:81:c1:c6:ae:3c:
         c1:b5:c0:46:92:8b:e8:51:01:0d:16:56:da:8c:f9:ec:af:1d:
         2f:3f:ba:55:b7:18:c8:84:8c:7a:a0:dc:69:93:d7:2b:eb:02:
         e7:e7:e8:4c:04:7f:30:21:45:f1:8a:e3:57:3a:25:ae:20:24:
         0a:a2:a5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:40 2026 by rpki-client