Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
File:                     tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft (raw, json)
Hash identifier:          vla2d8YELA8Uw+m+Vr/HSrirvN2THzB+0f4xAud+piA=
Subject key identifier:   14:B3:85:09:30:92:C1:BE:B8:6B:84:ED:C4:89:59:55:1C:D5:96:BA
Authority key identifier: B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
Certificate issuer:       /CN=A91897BB/serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
Certificate serial:       082C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
Manifest number:          0822
Signing time:             Tue 24 Mar 2026 20:46:06 +0000
Manifest this update:     Tue 24 Mar 2026 20:46:06 +0000
Manifest next update:     Tue 31 Mar 2026 20:46:06 +0000
Files and hashes:         1: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl (hash: +BuCgATKtksWUFd3eP6gDc61ejPmHP4gqUH6t95aFI8=)
                          2: E51ECC8610E711EBAD066E1DC4F9AE02.roa (hash: wjDSbRQKtPAWbh/Hzs+97MdegPLfvSS74VnDP3uybto=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl
                          rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2092 (0x82c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91897BB, serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
        Validity
            Not Before: Mar 24 20:46:06 2026 GMT
            Not After : Mar 31 20:46:06 2026 GMT
        Subject: CN=69c2f80e-714c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c1:07:c0:55:6b:62:7e:e2:6f:da:55:1c:71:
                    89:0a:87:0f:58:43:bd:6a:05:70:54:b9:0b:9b:7e:
                    fc:29:48:d4:d2:3e:20:c8:45:61:e6:fa:73:fa:b9:
                    fc:63:f8:03:3c:f9:0d:a0:04:5d:bf:ca:40:36:4c:
                    f9:16:fb:ba:1f:d7:d6:81:ca:4c:be:1e:ef:da:3d:
                    7f:7d:a8:03:bc:98:1f:05:fe:54:77:24:f4:2b:d8:
                    cd:45:71:1e:da:78:c6:bd:a8:a3:45:b1:2f:8b:52:
                    35:a7:e7:81:e7:e9:67:13:92:e5:96:62:e3:2b:b0:
                    24:3c:06:f3:ea:c8:86:f9:87:96:0a:94:dd:cf:a1:
                    65:d8:9c:d0:fc:42:ad:49:b7:e9:03:0a:51:44:0b:
                    06:af:bb:13:d6:0d:56:7f:b3:c3:22:47:a8:37:6e:
                    26:4b:da:74:99:bf:62:06:fb:c3:39:36:84:cd:2d:
                    69:c7:dc:f5:32:6c:00:3d:7a:0b:e6:79:d4:52:c0:
                    1c:70:00:98:5e:ea:45:4e:f5:a3:59:19:04:7e:5d:
                    37:d3:4b:a5:1f:01:8c:cd:60:8e:fc:72:74:7b:60:
                    3f:23:9a:d8:d8:5e:e6:23:c4:0f:b5:b8:4f:62:ff:
                    34:20:2c:4a:c8:cc:71:1b:96:68:f3:6e:a2:d3:4e:
                    f5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B3:85:09:30:92:C1:BE:B8:6B:84:ED:C4:89:59:55:1C:D5:96:BA
            X509v3 Authority Key Identifier:
                keyid:B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:65:9b:b5:b5:b1:82:85:8d:72:16:4a:cf:73:b9:59:cd:53:
         73:48:01:70:f6:9c:24:dc:0d:e9:0c:bd:0b:05:36:74:56:2c:
         7c:7f:14:f8:27:8c:49:b3:29:62:ab:7f:62:5e:bf:c5:27:ef:
         4c:29:6e:28:58:d1:a6:83:5e:e8:24:cc:5e:02:8b:a1:28:59:
         ce:40:9e:3c:c3:a1:b8:d5:7e:f8:f7:8c:26:5e:22:8e:82:41:
         c7:8a:cc:8f:12:69:78:52:38:06:ed:bd:38:62:0c:d8:d1:d9:
         c1:aa:8b:fb:2c:37:3f:ed:66:41:94:5e:3f:a9:e9:bc:3f:a4:
         c0:9d:d9:06:51:03:c8:8b:ce:09:7d:fd:c6:e7:07:ff:6c:cf:
         b9:88:98:39:0d:bd:2a:99:26:7b:70:17:a5:0c:37:0d:f0:f6:
         37:85:7f:f7:af:48:ea:ed:a5:6d:b3:97:c1:f3:ed:1b:30:43:
         f0:7e:89:d2:8a:ad:d5:58:2f:46:a4:af:e9:ef:55:06:48:e2:
         70:2a:c5:bb:61:14:7e:ff:ef:cd:41:f0:21:f6:41:d7:5a:7a:
         74:b6:2f:d8:dd:be:ef:6d:c6:47:ab:ce:fb:a4:00:f2:0e:5f:
         e8:a3:f4:59:c7:20:1f:e5:94:25:6d:65:8c:82:fc:5b:4d:6c:
         42:80:72:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:15:24 2026 by rpki-client