Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
File:                     a4KWpYFUMCeOwxG16cvrf_CpDcY.mft (raw, json)
Hash identifier:          dZanqHwFFDL4dKksFHPwF8iNT9jRJEXZx9Aw20QnIag=
Subject key identifier:   50:D4:2C:E9:8D:D5:0E:1E:61:05:B0:99:99:D2:43:4D:51:3B:3A:AB
Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
Certificate issuer:       /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Certificate serial:       88
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
Manifest number:          85
Signing time:             Wed 25 Mar 2026 06:51:51 +0000
Manifest this update:     Wed 25 Mar 2026 06:51:50 +0000
Manifest next update:     Wed 01 Apr 2026 06:51:50 +0000
Files and hashes:         1: a4KWpYFUMCeOwxG16cvrf_CpDcY.crl (hash: wNx2suPl5dPZDII8M1YW1YXIuQNohMRg3N0t4a0tufU=)
                          2: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (hash: oCr3aQd1HSJF91DdiESRPlphTmJf2c8Lshvn2EKkib4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl
                          rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
        Validity
            Not Before: Mar 25 06:51:50 2026 GMT
            Not After : Apr  1 06:51:50 2026 GMT
        Subject: CN=69c38607-b4a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:23:c1:cc:c2:c6:12:3c:aa:91:5f:66:73:27:
                    c9:2c:56:1a:d3:8b:ba:06:7a:c1:b3:09:57:01:5a:
                    16:71:c8:ac:e0:7c:5c:f8:b3:7e:6f:43:63:55:9d:
                    e1:bf:23:48:1b:4f:8e:ab:1a:63:05:b1:60:53:ff:
                    97:1f:0d:b0:05:e4:ea:fd:d7:06:1b:55:43:1c:48:
                    e1:50:0e:20:80:8d:06:18:99:d2:98:48:41:99:b3:
                    3e:05:d0:c4:1d:19:92:56:66:c1:46:a9:e0:95:ac:
                    a7:0f:6b:e1:1a:03:ab:40:cc:2c:9f:12:03:91:f3:
                    87:52:92:04:8c:fc:75:4c:ef:97:39:1d:d6:1f:9c:
                    cb:f1:d5:4f:a9:ad:ba:8d:df:03:5f:44:2b:f5:b0:
                    b8:b5:3d:57:75:9a:d1:bb:e3:3f:42:3f:03:47:ab:
                    a4:09:75:7b:41:ba:8e:7f:1d:69:ac:f9:97:17:a8:
                    c7:74:6c:97:89:47:a5:c4:48:56:58:3d:18:1b:32:
                    ed:38:62:6e:f2:96:2b:70:4f:0b:43:c3:9a:6b:e9:
                    37:0a:94:eb:d7:8f:27:e6:6d:56:e8:23:3b:71:2f:
                    08:d2:77:f8:37:4b:de:b7:30:81:d3:bf:2c:3e:9d:
                    48:58:2e:61:4f:3d:17:3d:ea:d8:20:33:ec:00:46:
                    93:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D4:2C:E9:8D:D5:0E:1E:61:05:B0:99:99:D2:43:4D:51:3B:3A:AB
            X509v3 Authority Key Identifier:
                keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:3f:16:8c:9e:8f:0c:8f:a3:30:20:ee:9d:6b:13:9c:c3:66:
         d0:e8:a1:ff:96:d7:12:c6:bb:0a:c5:5b:d4:1b:1a:9f:17:d3:
         f7:0e:39:1e:43:66:51:70:3a:cc:c8:c7:6a:07:61:fc:62:88:
         ff:f0:c6:d2:05:4a:76:65:72:f1:68:1a:3f:6e:2b:c7:54:96:
         37:87:bf:72:72:f6:a5:ab:5b:22:d7:9e:4e:11:0b:48:15:fe:
         76:4d:cd:ae:8c:46:e7:8b:a7:2a:52:0a:d7:83:e0:fe:35:3b:
         95:ec:1a:26:f8:45:a2:a8:ef:ee:08:72:c2:47:62:a8:05:d9:
         01:d7:44:0b:7f:46:30:6f:37:17:c0:50:ba:81:94:7b:70:08:
         2a:2a:74:d9:7a:63:62:27:ac:59:17:5a:34:98:c3:55:91:e1:
         0f:4d:3f:dc:e8:0e:a5:0c:56:20:5c:3f:89:53:95:ca:eb:35:
         a3:4a:59:22:53:62:8d:02:7d:94:e1:0f:cd:8c:36:52:18:d4:
         95:db:e1:15:76:93:a9:48:fa:eb:08:62:b6:e2:1d:6d:d0:00:
         f6:02:79:ea:59:73:8a:e3:d2:53:e5:83:9b:f7:47:b4:c0:e9:
         de:0b:f6:56:e7:26:9d:d1:79:13:76:e9:fb:a1:03:e8:78:3f:
         5b:f0:ca:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:30:34 2026 by rpki-client