Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
File:                     -APDcY8OgSDUPrA0gJ9qiziE15s.mft (raw, json)
Hash identifier:          jnMNRXyzs7dA2/gzfN7WEHbBOh98cITdmPkPTSEdVl4=
Subject key identifier:   4D:17:A0:0D:BD:DD:A5:55:AB:2F:23:2B:0B:C1:66:3D:A9:64:E3:E5
Authority key identifier: F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B
Certificate issuer:       /CN=A91A36B8/serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B
Certificate serial:       02D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
Manifest number:          02CD
Signing time:             Wed 25 Mar 2026 01:02:28 +0000
Manifest this update:     Wed 25 Mar 2026 01:02:27 +0000
Manifest next update:     Wed 01 Apr 2026 01:02:27 +0000
Files and hashes:         1: -APDcY8OgSDUPrA0gJ9qiziE15s.crl (hash: WHMetaSgADxgj9hYA8dJQn9YKnuz0jj2YlDJHl4HJKM=)
                          2: 0C04EFB43C9811EDB6A25D4FC4F9AE02.roa (hash: 3EomuYTOYpdRonmxsDgyICA/moRstX6OW0zEPClInuY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl
                          rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724 (0x2d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A36B8, serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B
        Validity
            Not Before: Mar 25 01:02:27 2026 GMT
            Not After : Apr  1 01:02:27 2026 GMT
        Subject: CN=69c33424-cf4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f2:bb:b8:6a:59:f9:c3:b2:96:08:60:a6:5a:
                    72:27:89:a2:e7:15:6b:5a:ec:fa:08:2a:59:6c:03:
                    a9:89:10:39:80:7a:80:77:f2:85:27:32:5c:58:09:
                    36:86:e2:8c:91:3e:db:b6:7c:a0:e4:ba:ee:4f:0a:
                    f6:66:07:4b:d6:81:97:da:07:74:f8:e5:73:0e:cc:
                    47:d4:53:b1:b9:ea:6e:7d:5f:09:67:bf:af:d1:8f:
                    65:b8:8b:d1:3e:63:f9:4b:f2:2e:32:3f:24:87:a2:
                    a9:b3:a4:a2:62:19:47:dd:ef:cd:b9:f7:ac:9c:a4:
                    37:aa:17:39:a3:dc:07:94:2a:99:3e:ff:15:c1:8b:
                    f0:4b:6e:7f:b5:22:be:39:d3:c7:2d:8c:9a:42:e3:
                    71:4b:a4:22:0e:45:0e:de:4d:9a:80:c1:a0:13:2c:
                    fb:f2:e7:11:4e:9f:26:e4:be:7c:8f:76:aa:35:7d:
                    26:7a:eb:3e:44:e3:ab:48:c2:90:af:04:e6:e0:ac:
                    eb:d0:0b:a5:98:d0:dc:f9:20:08:6c:43:fd:0e:55:
                    a7:97:28:76:19:a4:aa:56:2b:b7:5c:4e:11:dd:e0:
                    1b:37:29:cc:55:82:64:dc:53:07:c4:bd:5b:c7:77:
                    58:86:5e:6a:57:5d:9f:d4:6c:a0:29:b6:9e:b1:2a:
                    f0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:17:A0:0D:BD:DD:A5:55:AB:2F:23:2B:0B:C1:66:3D:A9:64:E3:E5
            X509v3 Authority Key Identifier:
                keyid:F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:39:32:31:e4:45:e0:83:1f:25:e6:14:04:c5:6e:3b:4e:e9:
         be:1d:b2:43:dd:39:e6:09:00:0f:c2:31:f4:7c:ef:7b:dc:b8:
         49:d4:73:52:56:8e:ae:28:49:82:67:24:ae:17:33:8b:7d:1d:
         cc:3c:02:88:b5:e7:f7:e1:cb:02:a9:6c:a6:63:37:b4:c1:e5:
         b2:7a:31:d2:63:60:31:63:aa:af:58:4e:5f:7c:1d:91:53:f5:
         43:7b:c2:e9:fc:39:51:a1:ad:56:fd:c5:0a:b0:46:1f:14:51:
         a4:82:14:1a:11:bb:fd:98:9c:01:5e:55:b9:ed:b5:bb:5f:09:
         df:f1:84:5b:1f:3e:9f:60:43:21:c0:82:c5:e0:08:2d:16:b2:
         2b:ce:00:6e:09:d0:07:c5:40:44:f4:9b:63:99:f9:64:78:12:
         ea:c5:57:0f:54:28:82:c8:c7:dc:d0:0a:33:fe:d0:e9:75:a0:
         38:23:20:b7:d9:ac:46:56:c8:08:2f:8c:27:f6:d4:b2:0d:c5:
         e6:98:2c:53:4b:c0:68:97:bf:02:6f:d7:dd:64:a2:85:85:67:
         ab:52:8f:9d:9f:06:24:5d:f4:e7:72:5f:77:67:e6:63:f4:a0:
         59:be:82:00:b5:de:42:6f:ca:b0:dc:07:6b:23:5a:4d:f2:b5:
         8b:43:2e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:37:08 2026 by rpki-client