Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
File:                     C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft (raw, json)
Hash identifier:          pnyo2SF1cK2YDA91K+yh983vdsoSuQn3R5GBLY89CeA=
Subject key identifier:   58:CB:50:A3:C6:30:32:F0:94:E4:09:D9:3F:2A:C1:97:44:58:90:19
Authority key identifier: 0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72
Certificate issuer:       /CN=A91868EC/serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772
Certificate serial:       01A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
Manifest number:          01A1
Signing time:             Fri 27 Mar 2026 03:38:36 +0000
Manifest this update:     Fri 27 Mar 2026 03:38:36 +0000
Manifest next update:     Fri 03 Apr 2026 03:38:36 +0000
Files and hashes:         1: C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl (hash: jKeZ6NxuPzrsurUBant4COGYTNze0DrmV04khoYA3t8=)
                          2: 8BDE35DAADB511EEA223FA64C4F9AE02.roa (hash: 8IJddaauAbPRZ+tJveuySl440+OqP5ny57SJigufBM8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl
                          rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 03:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91868EC, serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772
        Validity
            Not Before: Mar 27 03:38:36 2026 GMT
            Not After : Apr  3 03:38:36 2026 GMT
        Subject: CN=69c5fbbc-4a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e2:e1:cb:99:1f:4c:d1:4a:5b:ca:40:d6:15:
                    0e:5a:a1:96:a6:89:f5:7b:ce:1b:b5:de:87:7d:fa:
                    a0:27:66:d2:0d:67:1f:ed:cb:2d:ee:a7:ba:a9:bf:
                    c7:e3:aa:13:9c:7e:cb:ca:ae:c1:0f:8e:b3:6a:7c:
                    88:a2:32:52:86:cc:54:be:74:81:6a:2a:d4:f8:fb:
                    7d:5a:4a:66:a5:82:e8:69:56:06:ff:3f:4e:e4:4c:
                    a5:b4:e1:96:d1:6f:6f:6a:00:d0:47:c1:ae:2a:1d:
                    50:85:0c:03:b7:48:2f:18:37:e2:f2:83:de:93:1c:
                    6c:c8:96:2a:cd:e0:b9:4e:4e:e6:15:9a:95:7a:e2:
                    6d:29:71:c0:c6:ed:a5:48:1a:88:5a:55:c2:e5:a9:
                    93:c3:bb:8f:9f:d6:ff:eb:d9:3f:92:15:58:d9:e9:
                    a6:b0:e4:34:ff:f2:84:96:2e:bb:be:c5:c9:b6:9d:
                    00:86:d5:4e:2d:c6:e4:1b:ae:1e:75:7f:4c:a4:f7:
                    0a:43:9d:09:50:1f:ca:e5:85:29:aa:9d:4f:cd:c6:
                    50:73:05:7e:77:5d:1f:6e:28:d1:bf:9e:74:b6:b7:
                    29:f3:23:49:5b:4b:a0:78:28:86:1b:43:d3:0b:b1:
                    a5:d5:b6:7d:a4:91:58:97:c1:d3:6d:71:0e:ca:b7:
                    3e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CB:50:A3:C6:30:32:F0:94:E4:09:D9:3F:2A:C1:97:44:58:90:19
            X509v3 Authority Key Identifier:
                keyid:0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:80:46:8f:c9:4d:fe:91:ca:11:9d:53:96:63:02:47:18:98:
         d9:ae:59:b9:97:84:74:44:7a:dc:96:30:65:df:3f:02:a4:55:
         66:7b:d2:ba:49:e5:c8:41:39:7a:62:a7:08:41:e2:c7:93:29:
         bc:65:21:89:50:54:9c:a6:ab:59:71:0b:35:34:59:25:2f:6e:
         72:4c:20:a5:1e:25:1a:b8:8c:7f:1e:8a:30:a5:bc:72:ac:5b:
         df:f1:36:d6:da:90:13:f0:26:a0:6c:5e:72:f3:0d:7e:0b:62:
         e2:b5:58:0f:cf:d2:4c:d0:e5:58:d8:bc:79:01:c5:54:08:58:
         89:c9:32:fa:d8:ad:15:5d:0a:d5:f6:f0:53:02:c0:ab:04:39:
         d5:a3:fd:08:4a:5b:7e:3b:b8:97:0b:16:10:f6:c5:7f:7a:61:
         81:02:77:5a:cb:17:a9:36:01:27:9f:fd:34:f3:b9:d5:d9:7b:
         38:30:d1:d3:d5:96:30:14:e6:8f:32:f5:e8:4c:3b:12:43:1d:
         23:e1:79:b8:f0:1b:11:4a:4d:26:11:26:bd:98:2d:95:09:a6:
         2d:d1:9a:84:0e:11:20:a7:26:70:ea:85:49:73:66:3d:a2:44:
         d8:0b:45:11:d8:d0:32:07:bc:8f:b9:47:0c:1f:2f:d8:2a:ca:
         5b:8b:a3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:31 2026 by rpki-client