Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft
File:                     apjAwIy9NBmpCCuGDSm_qXL98qc.mft (raw, json)
Hash identifier:          bs3rBoDgWtYXhr1Mz/LJGZwz8hzaPrnNNoMPbTfXCyU=
Subject key identifier:   B1:3D:70:5A:B1:0E:0B:8A:8F:EE:9B:4C:5B:C7:96:43:40:0E:98:A5
Authority key identifier: 6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7
Certificate issuer:       /CN=A91A2BD6/serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7
Certificate serial:       04CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft
Manifest number:          04C6
Signing time:             Tue 24 Mar 2026 23:34:25 +0000
Manifest this update:     Tue 24 Mar 2026 23:34:24 +0000
Manifest next update:     Tue 31 Mar 2026 23:34:24 +0000
Files and hashes:         1: apjAwIy9NBmpCCuGDSm_qXL98qc.crl (hash: Ynns0kqlp8k/gaLUJTaWWXSFEDfjKKDAc8EmwrEZgzA=)
                          2: 61B3CBDC631911ECAE6AA33DC4F9AE02.roa (hash: w4vmk0k0tj0CqVbPYlrB/AsgbCIeobBsis6ku1ih1HE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl
                          rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:34:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1229 (0x4cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2BD6, serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7
        Validity
            Not Before: Mar 24 23:34:24 2026 GMT
            Not After : Mar 31 23:34:24 2026 GMT
        Subject: CN=69c31f81-76a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b9:2c:a3:2d:7d:0a:6e:b8:99:20:40:54:72:
                    b2:40:6b:0f:f8:55:a4:8f:df:a8:82:7e:a7:5e:43:
                    e9:8d:4b:73:9e:dd:05:54:e2:2a:c3:94:33:29:92:
                    a8:18:7d:b9:8d:31:ae:83:75:1c:01:aa:ec:4d:04:
                    d3:43:24:79:0e:84:91:0f:21:b3:a7:42:c7:8e:8c:
                    46:2c:a8:18:c4:08:f4:9b:a8:40:cc:cb:b8:67:37:
                    3f:0a:55:50:3d:56:8d:d9:71:50:d2:58:9a:3f:a1:
                    37:41:73:dc:ef:bf:89:2c:c7:0a:4b:5f:19:0c:ac:
                    1b:c8:34:cf:b9:35:75:78:63:a3:33:f1:42:43:fd:
                    ab:41:44:a3:07:8e:08:39:5f:05:a1:28:a1:be:cd:
                    e6:ac:75:a8:8c:30:fb:8d:ea:1b:c2:a0:9f:9f:57:
                    7a:fb:35:ea:71:7e:92:8d:52:ea:a0:9e:6c:53:5c:
                    50:3c:c6:e9:87:5d:22:32:8e:b3:34:cf:e6:1b:ca:
                    92:f7:50:6d:86:c5:66:ff:40:b6:25:2a:bd:7b:e9:
                    30:37:73:14:09:57:85:11:9b:88:ad:0c:bd:2e:e1:
                    7b:55:c4:44:31:fa:7e:fa:d3:d3:ec:cb:91:8d:f9:
                    1c:59:66:a3:74:f0:5e:61:20:db:7f:f6:13:cf:fd:
                    ac:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3D:70:5A:B1:0E:0B:8A:8F:EE:9B:4C:5B:C7:96:43:40:0E:98:A5
            X509v3 Authority Key Identifier:
                keyid:6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6f:91:45:6b:e1:68:62:e1:43:61:20:73:b6:75:c4:67:e3:
         dd:d3:51:49:bf:f7:52:76:c4:ff:ae:03:c9:e7:9d:53:35:1f:
         39:ac:b6:2d:c1:f0:5e:49:6c:da:3c:de:80:36:a7:b9:aa:14:
         d6:b2:45:71:e5:01:be:5a:f2:fb:5b:32:3d:3d:33:55:bb:af:
         78:6c:00:b8:90:b7:bf:73:2d:d0:d3:fd:0e:12:e4:61:34:ab:
         2a:20:0f:81:b4:58:23:be:ee:a2:9e:43:8d:b3:df:c8:4d:80:
         94:96:c7:52:7e:79:de:c1:7e:76:11:2f:35:3f:13:86:d4:43:
         e6:5c:90:0c:55:12:48:25:90:61:b9:07:04:a8:c7:3f:08:93:
         6a:97:08:89:f8:0b:68:53:5b:ae:1e:c5:6e:0b:87:8e:fe:f7:
         6f:6e:bb:e5:1a:50:01:3a:2d:80:34:9d:3b:6b:94:ea:90:7b:
         8c:17:bc:9e:d1:4f:d5:e1:22:7a:57:b4:44:d3:99:63:c0:f9:
         d0:8f:e3:dd:0e:b2:49:b7:3c:85:05:a8:e4:c5:18:2c:0f:1f:
         c9:6c:4b:65:c1:ca:c5:3a:f0:c8:d0:43:5c:87:a6:ac:4f:63:
         cf:95:97:5d:5e:1f:a9:37:17:07:e9:ca:c2:5d:68:70:e9:39:
         9c:cc:bf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:04:14 2026 by rpki-client