Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
File:                     _ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft (raw, json)
Hash identifier:          oZyVtl43M0ROEaIsxY6r+ao9vzW+WPYHio7ZxXytmWk=
Subject key identifier:   0F:F9:EC:93:8D:4D:95:BF:AF:71:12:43:82:91:01:4C:81:DF:3F:D8
Authority key identifier: FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6
Certificate issuer:       /CN=A91820AF/serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6
Certificate serial:       070F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
Manifest number:          0705
Signing time:             Tue 24 Mar 2026 21:42:08 +0000
Manifest this update:     Tue 24 Mar 2026 21:42:08 +0000
Manifest next update:     Tue 31 Mar 2026 21:42:08 +0000
Files and hashes:         1: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl (hash: 0KlMLm3LKz+4epMJQDEPHQEQt1PcK4FMyaLOSkuklJs=)
                          2: D4DE5FF8A01F11EC87D72549C4F9AE02.roa (hash: aA6Dw3R9kVAHSoiUlastCf/DMZ8hslWGyzDMB+ksQeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl
                          rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1807 (0x70f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91820AF, serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6
        Validity
            Not Before: Mar 24 21:42:08 2026 GMT
            Not After : Mar 31 21:42:08 2026 GMT
        Subject: CN=69c30530-b060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:cc:8b:b0:af:ba:ff:2b:33:94:91:03:39:
                    db:25:c6:bc:7f:2c:10:fc:39:6c:34:01:34:2f:75:
                    95:9b:86:21:b9:63:19:39:0d:f1:da:1e:20:d1:6c:
                    49:9a:2b:af:dd:70:18:bd:db:ff:2f:25:5e:53:25:
                    84:47:65:e7:43:a6:c4:61:a9:db:1a:6d:13:d3:e5:
                    57:33:4f:a8:1a:51:3f:fd:f0:e3:b8:6b:26:60:d7:
                    0c:58:d3:c7:24:4a:31:b8:17:97:cb:c9:dd:d3:cd:
                    79:b6:b8:f4:a0:11:19:c7:bb:89:c4:76:b9:1d:72:
                    df:6d:8b:7d:d9:04:e3:40:2b:5a:89:b1:41:b1:ef:
                    6b:e5:4f:e3:40:f7:b5:49:1e:56:ad:0b:ef:7c:ff:
                    8d:b1:16:f2:cf:2a:9c:95:62:d8:1f:77:62:8e:f8:
                    15:eb:7c:43:42:06:66:5d:36:f9:2f:2f:03:2b:7e:
                    6b:92:71:74:ce:88:2e:2e:04:85:27:e1:34:de:7a:
                    46:5f:94:36:12:c5:d8:6f:aa:ba:89:a9:8e:d7:74:
                    ee:48:8f:54:11:ed:d6:2a:30:83:e3:59:76:09:45:
                    09:75:35:e9:06:1c:eb:d3:e8:76:ec:b2:54:33:69:
                    11:a0:1a:78:90:47:dc:a6:81:7b:a0:4d:ca:70:9d:
                    6d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F9:EC:93:8D:4D:95:BF:AF:71:12:43:82:91:01:4C:81:DF:3F:D8
            X509v3 Authority Key Identifier:
                keyid:FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:42:7b:15:07:57:73:fc:c5:ed:10:ff:63:d6:ae:32:c4:f0:
         0e:72:19:91:a0:8e:f6:d6:6b:d9:38:69:34:a5:54:a0:c4:74:
         81:a7:18:cc:8a:da:43:29:83:8c:69:f9:ed:b3:21:b0:f9:a9:
         2d:cf:99:bb:23:c9:cb:3c:cf:83:24:6e:17:51:e3:58:ee:5d:
         d6:80:a4:87:b7:e7:80:f0:17:50:13:29:fd:bf:61:33:15:2f:
         09:6c:41:6a:99:6e:bb:9e:15:15:e6:32:b4:07:5e:57:1c:5b:
         49:67:be:68:f7:c6:09:78:a4:36:dd:4b:5d:8f:bb:de:c5:ea:
         8a:60:c2:87:7a:ab:2f:25:2c:9e:6c:18:a3:98:bb:74:51:4a:
         3a:81:d1:cb:af:3c:3f:2b:e7:1d:43:28:ef:fa:7e:eb:57:5c:
         67:73:be:05:b7:d9:3d:14:7f:ae:0f:9b:26:71:24:6a:7d:62:
         81:8d:03:1f:0a:80:5d:7f:88:fc:ac:24:ee:af:b5:1e:8c:85:
         fc:67:fe:f9:ca:5b:99:9b:c0:a6:37:6a:62:6b:5e:12:a2:22:
         82:9c:82:75:b4:5e:2b:ad:c8:f7:96:0f:ad:59:ba:ff:ae:23:
         64:18:89:14:08:63:e4:c0:c8:49:39:e8:33:2e:ff:c1:df:4a:
         dc:42:d8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:27:46 2026 by rpki-client