Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft
File:                     U7ksLaLVSegUcEB8yP8MdbjEty0.mft (raw, json)
Hash identifier:          xfPKRPGs+IwU+tyxECI139B3uGxQhFMZj33jU+J1Dy4=
Subject key identifier:   9A:5B:62:D3:4E:88:E3:E7:B1:95:CF:02:5A:01:A4:BC:77:8E:C9:03
Authority key identifier: 53:B9:2C:2D:A2:D5:49:E8:14:70:40:7C:C8:FF:0C:75:B8:C4:B7:2D
Certificate issuer:       /CN=A91940AE/serialNumber=53B92C2DA2D549E81470407CC8FF0C75B8C4B72D
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft
Manifest number:          2E
Signing time:             Fri 27 Mar 2026 08:18:26 +0000
Manifest this update:     Fri 27 Mar 2026 08:18:25 +0000
Manifest next update:     Fri 03 Apr 2026 08:18:25 +0000
Files and hashes:         1: U7ksLaLVSegUcEB8yP8MdbjEty0.crl (hash: TaLa2j92N+xMYWgFWZ7JJdQUSWqisnZeNeACIq8HZjo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.crl
                          rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 08:18:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91940AE, serialNumber=53B92C2DA2D549E81470407CC8FF0C75B8C4B72D
        Validity
            Not Before: Mar 27 08:18:25 2026 GMT
            Not After : Apr  3 08:18:25 2026 GMT
        Subject: CN=69c63d51-bcb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b1:a7:ca:b1:8a:c4:8e:09:ef:91:81:3e:37:
                    94:d3:74:07:6f:b9:8a:ed:c1:a8:3f:a4:42:22:7a:
                    19:94:4f:78:5c:39:53:15:24:62:ea:8b:8a:2a:cd:
                    48:eb:c6:bf:56:ad:a7:35:ef:de:a2:f7:ce:09:7f:
                    43:ce:31:69:88:da:b8:3e:7a:a2:c1:d2:22:60:70:
                    07:87:ca:e4:37:86:35:a5:3c:3c:a9:c1:66:17:f6:
                    29:ad:ec:ae:02:fb:12:a8:12:f5:a6:93:1b:5a:aa:
                    49:6e:f1:30:5f:8b:a6:36:21:c1:d4:6e:7d:e5:9e:
                    1f:50:d5:36:dc:96:ac:2e:ce:70:cd:3e:ed:fe:cd:
                    19:ab:5d:f8:dc:22:99:39:ba:1f:44:8b:9f:24:29:
                    dc:4b:64:60:df:2d:d5:16:d1:df:09:15:19:53:88:
                    f9:c0:e0:70:7d:6d:b0:aa:40:8a:c1:28:a7:da:c6:
                    a9:4e:53:54:2f:fd:9c:e5:f4:71:4b:80:59:7c:26:
                    44:4f:5e:c5:89:e0:b6:bc:c9:d7:a8:e6:5e:70:1a:
                    bd:fb:f9:98:cc:2a:10:a6:5d:aa:d1:c1:b2:f5:62:
                    ca:6f:21:fc:36:bd:8b:d0:f5:f0:c1:74:cb:9e:3b:
                    f2:ac:64:c5:83:f9:c9:d2:d5:fe:14:0c:41:22:4f:
                    ac:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5B:62:D3:4E:88:E3:E7:B1:95:CF:02:5A:01:A4:BC:77:8E:C9:03
            X509v3 Authority Key Identifier:
                keyid:53:B9:2C:2D:A2:D5:49:E8:14:70:40:7C:C8:FF:0C:75:B8:C4:B7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:37:d6:a1:0a:d0:03:7e:77:79:c6:e9:5c:39:16:1d:1f:85:
         29:3e:26:14:29:d9:e9:e5:4b:14:4d:39:8a:fc:6a:78:b1:1a:
         3c:0f:ee:df:2f:af:67:ed:39:67:a8:08:00:6f:e3:8e:ce:b4:
         06:d8:12:e5:89:38:1c:c5:ed:32:00:31:39:30:9c:2f:75:df:
         bd:52:01:12:39:9e:34:53:b0:6e:97:46:55:0e:2f:2f:c6:78:
         6f:b4:81:80:07:25:ac:eb:73:c5:50:7c:40:8f:02:c6:7d:34:
         2e:ac:10:bc:36:7a:b8:bd:68:b1:fd:81:b7:c2:b0:59:d9:3d:
         1f:62:72:7b:60:76:08:4c:9c:e9:2b:d1:27:ce:cd:21:79:ba:
         4b:cf:8b:91:1a:80:b0:4f:59:26:fd:27:ec:a2:72:8e:0a:5d:
         ba:a7:29:7a:c8:2d:36:cc:e7:37:66:f6:95:57:90:85:81:eb:
         f5:a4:56:08:93:fb:e9:3d:87:0a:ea:1e:a2:3b:b0:12:9d:1e:
         1b:c2:e3:0f:bb:46:1d:c5:21:80:c7:7d:ad:ec:81:69:23:d9:
         25:e1:cc:ec:09:13:9c:4f:bd:84:8e:e7:81:b1:bf:66:d5:33:
         69:94:c3:25:60:79:ce:7c:06:45:56:67:44:52:0a:29:5d:e4:
         1d:de:be:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:31 2026 by rpki-client