Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft
File:                     _nQHcdbqABLeOHBW-Iy-3TbEqGA.mft (raw, json)
Hash identifier:          +5UqhnbZVJJrfZ/LwE3qmPwLmM9TzW+PXWeXvDz8hOw=
Subject key identifier:   F3:8C:0A:C1:6E:9A:87:4B:54:AA:DF:97:C9:04:30:1F:2B:18:CC:69
Authority key identifier: FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60
Certificate issuer:       /CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860
Certificate serial:       0215
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft
Manifest number:          020F
Signing time:             Fri 27 Mar 2026 02:26:48 +0000
Manifest this update:     Fri 27 Mar 2026 02:26:48 +0000
Manifest next update:     Fri 03 Apr 2026 02:26:48 +0000
Files and hashes:         1: _nQHcdbqABLeOHBW-Iy-3TbEqGA.crl (hash: wo6GPIPuDtwKvrnhWoqcVnDnCgHEZaUWkOEHiciRr2k=)
                          2: 37B318C0050111EEAFBCAE7EC4F9AE02.roa (hash: w83Gd1qNybw8NY4qox6lPSa3DzAa4i1Y84/n9D6sf/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl
                          rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91889A4, serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860
        Validity
            Not Before: Mar 27 02:26:48 2026 GMT
            Not After : Apr  3 02:26:48 2026 GMT
        Subject: CN=69c5eae8-9aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:03:86:49:9c:1e:fa:6d:37:c0:45:32:bc:bf:
                    e6:eb:ad:52:08:84:61:b9:61:fc:ee:80:8e:10:6a:
                    9b:83:88:69:f9:2d:a6:61:d3:b7:f2:80:04:49:1e:
                    e7:7d:c0:d0:ba:41:bd:65:d2:e1:1e:42:1e:0b:f8:
                    8b:0a:35:82:c6:a5:03:82:1c:67:fb:4b:a2:c8:b9:
                    ca:eb:96:60:3f:f4:20:e0:12:aa:a3:c4:04:88:38:
                    74:36:4d:54:57:dd:85:fd:7e:f7:23:c4:98:e9:34:
                    22:0b:7d:e1:0b:2c:bc:d5:35:e3:60:3c:35:38:70:
                    3c:d2:7e:ec:c5:5d:ba:92:8a:6c:98:48:73:08:08:
                    0a:8a:f7:7e:dd:b7:05:48:24:71:5a:72:11:fc:ac:
                    14:11:87:a4:e5:66:fd:15:f3:4c:17:1a:9d:2f:c4:
                    74:de:77:de:4c:97:56:1b:20:7b:d8:f3:96:63:a4:
                    67:eb:1f:77:3b:16:f5:ac:a3:0b:57:d3:74:ba:f0:
                    f1:0c:5f:ac:6b:af:32:6f:97:f1:d9:93:7c:6d:ff:
                    21:3f:0d:78:4c:2c:ec:bd:70:a0:29:2b:42:96:bd:
                    8f:0c:45:ef:24:07:c1:2a:b5:c5:e0:1d:f9:8a:cf:
                    d7:b3:6d:6b:64:0e:67:3b:f3:a5:bf:af:15:4f:6e:
                    cd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8C:0A:C1:6E:9A:87:4B:54:AA:DF:97:C9:04:30:1F:2B:18:CC:69
            X509v3 Authority Key Identifier:
                keyid:FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f8:e2:f0:ff:a0:3b:23:c4:dc:1f:58:44:8a:2b:c8:8e:1a:
         fa:84:b0:11:0d:24:0d:14:75:8e:ff:33:81:bc:a4:76:66:0d:
         55:57:53:b6:84:75:f9:c9:56:ed:26:c3:e2:dc:ef:60:82:91:
         01:d1:76:7a:f9:f3:ee:7d:b0:8c:80:6e:35:e3:b4:32:65:d7:
         3c:4a:07:fe:bb:0b:a5:3b:8b:b4:85:f9:20:3a:3e:b4:8e:40:
         10:c4:69:ec:7d:30:56:68:a6:ab:01:d1:96:a5:b4:e5:c0:76:
         fc:0d:3a:89:73:10:18:c1:12:2a:63:0e:a8:af:d9:80:34:42:
         2d:7d:c2:4a:03:f6:33:4f:00:66:7b:04:27:32:81:d6:ef:ea:
         af:21:bc:8c:04:a5:f6:73:a1:a9:73:33:44:17:3e:d3:28:37:
         92:77:31:5a:70:45:81:5d:d7:09:0f:b1:a5:f6:f8:63:1d:d9:
         1a:eb:7c:24:b4:a7:36:9b:57:d6:bb:40:f2:11:a4:56:ee:f1:
         eb:15:1d:ad:9d:8a:af:0c:3b:b5:d5:06:d8:46:1c:f0:d5:55:
         49:88:5c:b8:96:be:08:1b:fa:c1:70:c4:1d:f3:d0:7d:26:ae:
         09:b0:1f:e5:61:36:6a:77:5e:ce:c6:e8:ad:f0:ef:55:66:0d:
         5c:eb:9e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:56 2026 by rpki-client