Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft
File:                     bUron6l6cWotkmYf8s9b08zcKfw.mft (raw, json)
Hash identifier:          IkfHKhfSziVQ/a7lpSY95DA4e5E/oMsIIu35P1DZJE8=
Subject key identifier:   AF:7A:4F:CF:B6:73:F7:80:3B:E0:0B:EC:95:64:92:7C:E8:D4:7F:AE
Authority key identifier: 6D:4A:E8:9F:A9:7A:71:6A:2D:92:66:1F:F2:CF:5B:D3:CC:DC:29:FC
Certificate issuer:       /CN=A91778C2/serialNumber=6D4AE89FA97A716A2D92661FF2CF5BD3CCDC29FC
Certificate serial:       17E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft
Manifest number:          17A7
Signing time:             Thu 26 Mar 2026 16:34:16 +0000
Manifest this update:     Thu 26 Mar 2026 16:34:15 +0000
Manifest next update:     Thu 02 Apr 2026 16:34:15 +0000
Files and hashes:         1: bUron6l6cWotkmYf8s9b08zcKfw.crl (hash: Bz43H/+8EqVy49iqM8I892hyn+bjwRpHhZ0FcSChyt0=)
                          2: 0EF775B2EFCD11EF92BCB66CC4F9AE02.roa (hash: 45ZKfLCd79M7grb/NFrxHrHTz4EXMCPhKmHz8mBqdu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.crl
                          rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 16:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6119 (0x17e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91778C2, serialNumber=6D4AE89FA97A716A2D92661FF2CF5BD3CCDC29FC
        Validity
            Not Before: Mar 26 16:34:15 2026 GMT
            Not After : Apr  2 16:34:15 2026 GMT
        Subject: CN=69c56008-1fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:00:1b:d2:6e:06:35:cc:c1:0a:8f:f0:d3:53:
                    d2:56:3d:40:3f:dc:51:bc:90:2f:fd:11:96:5b:e4:
                    b9:6b:90:1a:de:a8:1c:12:ac:b1:c0:63:45:75:8a:
                    c9:25:36:e2:7f:23:4b:10:81:8d:53:60:44:55:01:
                    5c:26:fb:3a:45:b6:53:51:8a:7d:98:83:e3:52:f5:
                    b4:88:25:ac:e9:04:42:9f:48:d1:2b:d6:a8:d4:c3:
                    d0:0c:25:98:99:9e:6e:53:ca:14:6a:a7:b1:17:66:
                    ad:7b:bf:c8:e1:bd:02:86:ab:1c:c6:49:84:7b:37:
                    da:8c:15:56:4a:1d:92:6b:4b:b1:d1:be:1e:64:52:
                    b9:76:90:61:48:51:b2:5f:f6:df:0e:7d:68:7b:de:
                    88:1d:a5:c8:cc:0d:8f:c2:bb:57:b2:70:6b:f9:86:
                    9b:5a:0e:a3:3e:22:01:52:35:97:a4:04:b8:2e:63:
                    7a:36:00:f2:cd:78:59:90:ff:18:df:23:22:4d:33:
                    b9:0a:e9:54:4f:67:03:9b:15:f1:83:e0:d5:77:96:
                    38:17:60:51:f1:40:f5:35:04:87:6e:f2:4e:cb:b7:
                    c4:a2:8a:e3:4f:45:9e:9f:03:2e:42:dd:df:11:50:
                    3e:86:21:0d:ea:96:2a:e4:5d:55:e3:7c:c6:8d:e7:
                    11:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7A:4F:CF:B6:73:F7:80:3B:E0:0B:EC:95:64:92:7C:E8:D4:7F:AE
            X509v3 Authority Key Identifier:
                keyid:6D:4A:E8:9F:A9:7A:71:6A:2D:92:66:1F:F2:CF:5B:D3:CC:DC:29:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ef:3e:2a:56:be:41:1d:74:5e:be:4d:95:e1:c1:72:68:b0:
         b9:57:7a:36:21:de:a0:b5:0a:8c:c7:11:df:e4:5e:21:30:0d:
         c8:93:95:b0:65:8d:ab:95:bc:c0:b8:32:08:37:04:7e:9b:c5:
         6f:67:06:cd:a1:72:d0:32:1b:a9:4e:4b:9d:fa:0c:8c:a4:c3:
         06:13:2c:a5:d4:be:e3:a3:d0:12:89:4e:9d:a7:35:81:6f:ee:
         09:46:7f:05:5e:87:53:71:b7:9e:c5:8d:c5:67:94:58:60:5f:
         3a:c8:ec:f2:60:82:8c:0d:1b:90:15:15:a0:e7:ef:d4:4f:bf:
         1c:fa:9e:d5:b6:4f:2b:6b:9b:55:68:79:4a:08:d2:95:61:87:
         e9:01:1d:3e:05:fa:a2:ed:33:68:74:6f:01:76:b8:ac:a4:c0:
         05:6e:ee:b7:a2:85:80:89:94:90:74:77:51:a9:15:b7:2b:a5:
         2c:06:1a:39:cf:2c:97:fc:f9:d2:a8:f6:26:dd:e2:6a:f8:c2:
         1d:cc:11:8a:c7:8d:17:fc:a4:be:f9:57:b9:54:6b:c8:7b:45:
         ca:ee:73:bd:92:d9:8b:d5:b3:3c:80:32:6e:d7:9b:6f:59:28:
         c3:99:98:1a:a5:a8:d7:f1:be:be:26:94:a8:73:bc:cc:02:f6:
         e7:ac:7c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:46 2026 by rpki-client