Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft
File:                     _un91LDoMTGIoIn3qH-30BUyU4g.mft (raw, json)
Hash identifier:          TWhMIFO0C3ifHwsSjIP01O0+J4Dt82UjRlxZ72rxPcM=
Subject key identifier:   5C:0A:B9:65:BD:9F:A3:2B:5B:00:8A:81:3C:C9:22:AF:7F:D6:A4:23
Authority key identifier: FE:E9:FD:D4:B0:E8:31:31:88:A0:89:F7:A8:7F:B7:D0:15:32:53:88
Certificate issuer:       /CN=A918C673/serialNumber=FEE9FDD4B0E8313188A089F7A87FB7D015325388
Certificate serial:       0707
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft
Manifest number:          06FF
Signing time:             Thu 26 Mar 2026 21:50:32 +0000
Manifest this update:     Thu 26 Mar 2026 21:50:31 +0000
Manifest next update:     Thu 02 Apr 2026 21:50:31 +0000
Files and hashes:         1: _un91LDoMTGIoIn3qH-30BUyU4g.crl (hash: FFPEA8bbIgrurVkz2PVNQLoQCaSKXu/nerar0RPkfBY=)
                          2: 5803FE3880CD11EB83E8035FC4F9AE02.roa (hash: DdSs1+V8lus5gAngiKSCzk0U8+l+t9qxXBgD0Sy/R+4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.crl
                          rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 21:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1799 (0x707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C673, serialNumber=FEE9FDD4B0E8313188A089F7A87FB7D015325388
        Validity
            Not Before: Mar 26 21:50:31 2026 GMT
            Not After : Apr  2 21:50:31 2026 GMT
        Subject: CN=69c5aa28-1bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cf:ec:08:45:13:c7:fc:12:af:cc:58:59:49:
                    dc:45:b2:13:85:83:b4:5c:31:04:3d:b5:86:10:84:
                    0d:b3:79:b3:dc:ad:a6:6f:1e:66:43:38:31:ba:78:
                    41:fc:3e:e9:12:02:72:6e:dc:4c:a2:a9:68:25:4e:
                    8e:f1:83:ea:93:d2:2d:1b:62:d5:6a:42:d5:88:a2:
                    22:39:2a:f0:19:64:f1:0c:aa:8e:52:90:eb:6f:63:
                    80:68:d8:3a:5f:43:a6:c2:99:09:63:b5:30:4b:b1:
                    74:03:1d:10:25:5b:e3:54:56:bd:f2:50:b9:93:76:
                    9c:04:3c:a3:95:40:60:4a:3c:18:b2:d1:fd:0e:66:
                    dc:b7:3f:ee:06:e9:b4:60:da:54:2b:a8:94:12:1f:
                    6e:1e:c7:15:86:d1:a7:7a:bd:94:6e:17:46:14:a7:
                    b4:2b:83:3e:5f:5e:00:cd:2a:48:79:26:62:0e:b6:
                    0a:ec:f5:80:a8:05:4e:ba:50:13:45:e2:68:87:a7:
                    86:20:28:7c:02:8b:44:99:86:56:e3:3f:c1:b3:bd:
                    08:34:05:15:ec:4f:e7:6f:2b:30:a8:5e:99:d8:5b:
                    9f:69:cb:66:6c:7d:aa:f1:88:fd:96:b9:52:03:b0:
                    3f:16:63:c1:01:76:1b:ea:d4:1f:4d:6f:e9:7f:7b:
                    44:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0A:B9:65:BD:9F:A3:2B:5B:00:8A:81:3C:C9:22:AF:7F:D6:A4:23
            X509v3 Authority Key Identifier:
                keyid:FE:E9:FD:D4:B0:E8:31:31:88:A0:89:F7:A8:7F:B7:D0:15:32:53:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b1:1e:9f:cc:0b:0b:78:15:32:ac:97:3e:43:70:d4:66:cc:
         a2:f6:13:76:2c:b5:98:68:d0:ce:17:93:bd:f4:ff:ed:8d:48:
         12:2c:95:76:44:8e:de:f6:e4:c4:d8:9b:e6:cb:38:67:b9:fb:
         ba:2f:83:a8:91:ff:a1:25:a2:66:d6:c5:b9:34:07:2b:0b:4d:
         87:a1:52:c2:d2:6a:36:74:ba:00:a8:49:5d:1f:98:4c:ea:1f:
         2f:ff:92:9b:50:a5:bb:7d:ec:4b:78:80:44:e7:aa:fa:d4:f9:
         27:39:0d:b3:e0:e8:75:9d:73:de:82:8e:e9:2d:3f:6f:d2:c6:
         38:a5:55:c4:17:6c:bd:33:76:a8:91:f4:13:35:78:a4:05:8f:
         69:57:ef:99:a7:b6:da:63:f6:bf:fe:05:90:81:51:b1:c1:b2:
         7e:a1:7d:4c:9f:70:24:e8:b9:df:d4:a8:18:44:e5:33:ca:3a:
         82:0d:8c:3d:7b:7a:1c:85:6e:30:6e:a1:6e:a5:12:42:70:b3:
         72:c4:25:5c:50:4f:00:a6:f3:a8:ba:91:b6:e4:0a:0b:1c:26:
         e8:83:61:21:de:49:6b:4e:d8:ce:aa:b9:77:d6:5a:9c:74:2f:
         77:32:da:31:a6:83:89:26:90:20:0d:24:6d:e5:dd:fa:b1:dc:
         8e:73:ef:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 09:03:36 2026 by rpki-client