Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft
File:                     l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft (raw, json)
Hash identifier:          9sjt85jgBqcvS6e+1yRgvIiueeqH2rKGA3YBKdJfk/0=
Subject key identifier:   A9:6D:73:FA:86:3B:4B:B6:B7:96:EF:FE:21:06:0C:53:75:8F:92:E1
Authority key identifier: 97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12
Certificate issuer:       /CN=A91887ED/serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12
Certificate serial:       0744
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft
Manifest number:          073B
Signing time:             Thu 26 Mar 2026 21:37:35 +0000
Manifest this update:     Thu 26 Mar 2026 21:37:34 +0000
Manifest next update:     Thu 02 Apr 2026 21:37:34 +0000
Files and hashes:         1: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl (hash: jGUzWM/EcJ1R1dKN9XqJozdTq60dI/JtFU+lY1RBHgA=)
                          2: 5B596EA26B9B11EBA6B7E387C4F9AE02.roa (hash: te1kdq92VgFygTtdop1iQjv7JxZOQ/Lth61MfMSAoiI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl
                          rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 21:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1860 (0x744)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91887ED, serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12
        Validity
            Not Before: Mar 26 21:37:34 2026 GMT
            Not After : Apr  2 21:37:34 2026 GMT
        Subject: CN=69c5a71f-6e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6e:c5:f4:cc:2b:99:e7:9a:41:46:ce:e6:c0:
                    9b:cc:13:7c:43:37:01:1e:4c:56:b4:f7:f9:c9:83:
                    34:1b:7c:89:25:f4:c4:41:c1:d9:2d:c8:c1:68:5b:
                    68:ff:a4:33:4e:54:11:1f:53:c1:86:a1:18:77:76:
                    db:4d:e1:b8:bc:e2:2f:61:8d:64:37:56:b9:46:d2:
                    1a:ab:5a:6d:5c:35:d0:b7:e7:1a:c6:98:14:81:91:
                    65:a9:a7:ec:65:93:f6:46:bd:14:f5:d1:91:80:a5:
                    67:8a:c1:96:2f:e1:e7:2c:00:e6:42:36:91:23:44:
                    6d:57:6b:79:47:e3:88:39:64:74:0b:4e:59:04:ad:
                    dc:bb:2f:4c:0a:38:ca:82:98:2c:18:a0:04:ca:84:
                    06:b4:65:fe:29:30:05:30:c0:6a:7c:38:2e:ca:14:
                    ee:d7:5f:f7:df:ee:0f:5f:04:79:bf:db:99:97:cb:
                    93:8d:71:b9:04:93:21:f9:aa:e3:32:2a:71:57:74:
                    12:1f:89:17:40:5e:4b:e6:eb:c9:45:a3:6a:a8:b0:
                    d3:4e:17:4e:64:fa:bd:3a:f5:68:26:28:9c:26:50:
                    a7:a6:0d:7b:a3:a4:bf:5b:b6:74:0f:19:8f:6a:23:
                    b1:9b:cf:12:09:9b:b0:a7:ef:75:66:17:0e:19:7c:
                    f6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6D:73:FA:86:3B:4B:B6:B7:96:EF:FE:21:06:0C:53:75:8F:92:E1
            X509v3 Authority Key Identifier:
                keyid:97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c9:4e:67:08:85:43:e6:8b:ff:73:55:db:94:15:14:b1:f3:
         f7:e8:7d:cd:06:fe:ce:ad:6e:a3:01:7c:39:eb:3b:fc:94:d8:
         65:4f:1f:c6:33:50:54:ce:5f:d1:d3:f9:92:7c:b4:ba:59:5d:
         c7:2b:6d:fb:d4:f3:98:36:43:1e:ff:9f:e1:56:95:3b:29:3a:
         96:8d:ae:f3:4d:57:08:75:0f:5a:9a:01:cb:81:29:e2:17:f8:
         0b:5b:57:2f:c5:a2:da:13:1a:7b:51:b3:e1:e4:59:04:a4:f3:
         08:43:7b:1f:b5:03:db:b2:9e:fc:12:ff:75:bc:4b:3e:35:d2:
         03:b2:22:83:fe:d0:47:01:1c:bd:c7:8f:f8:98:7d:8e:58:06:
         d4:4e:c2:45:13:6d:5d:7c:08:89:94:27:f2:88:f7:32:d7:f7:
         08:a1:34:af:dd:b7:5c:ca:64:bd:0d:7b:7d:f4:2c:d7:92:22:
         59:c1:d8:73:06:44:0e:e8:5b:66:16:79:d8:06:c4:23:6f:40:
         c4:91:bd:94:97:d8:ce:2e:8b:4d:86:c4:da:af:78:2f:bf:52:
         8b:0a:29:ce:f5:5c:39:02:c2:19:c8:32:65:ce:fc:fc:94:a3:
         e8:3e:11:bf:17:f4:5a:ce:32:91:54:11:5d:72:75:f8:b3:35:
         85:e7:a2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:42:24 2026 by rpki-client