Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft
File:                     pVqOdK-92uYpENDGe6Ip1p4eyXg.mft (raw, json)
Hash identifier:          2p4AGFRctx6uC2P/V9a9StYky+cJL2dlx2c9lRaANHQ=
Subject key identifier:   CD:DC:5A:46:6D:11:23:83:38:C0:87:16:E0:4F:69:A6:A8:49:D5:97
Authority key identifier: A5:5A:8E:74:AF:BD:DA:E6:29:10:D0:C6:7B:A2:29:D6:9E:1E:C9:78
Certificate issuer:       /CN=A91A3FC6/serialNumber=A55A8E74AFBDDAE62910D0C67BA229D69E1EC978
Certificate serial:       07A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft
Manifest number:          07A4
Signing time:             Tue 24 Mar 2026 21:13:01 +0000
Manifest this update:     Tue 24 Mar 2026 21:13:01 +0000
Manifest next update:     Tue 31 Mar 2026 21:13:01 +0000
Files and hashes:         1: pVqOdK-92uYpENDGe6Ip1p4eyXg.crl (hash: O/En7iVMSyHqTOnHlLdhe2CfFQW8rnaL1hJvYJ+iBu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.crl
                          rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1957 (0x7a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FC6, serialNumber=A55A8E74AFBDDAE62910D0C67BA229D69E1EC978
        Validity
            Not Before: Mar 24 21:13:01 2026 GMT
            Not After : Mar 31 21:13:01 2026 GMT
        Subject: CN=69c2fe5d-e96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:6f:cf:ae:56:60:d2:2e:98:73:27:f3:e5:
                    c7:38:d1:ad:1d:ec:e2:c9:ea:00:06:43:2d:39:99:
                    85:ec:9c:0f:24:e4:85:2a:e3:b5:bd:38:81:8c:39:
                    b8:13:8f:6e:c3:36:03:47:bb:3e:1a:cb:22:24:e0:
                    38:a3:92:78:be:81:7d:bb:77:9e:99:c5:64:91:56:
                    bc:d6:41:ea:47:33:3f:c4:74:2e:91:43:52:97:36:
                    37:a3:b2:92:13:a3:94:c5:ae:59:00:ce:b4:1f:20:
                    29:a4:e0:24:6f:cf:fd:18:69:8a:fa:58:da:9a:84:
                    18:85:2e:1a:42:80:3e:50:5f:13:33:47:66:1e:b9:
                    ed:35:6f:c5:9c:c2:76:fe:15:5b:f9:dd:a1:a9:aa:
                    f6:9a:ac:7d:3e:32:bf:67:8e:28:cf:9f:44:c8:2e:
                    98:90:25:eb:03:39:40:54:5e:1f:87:0f:8f:84:3b:
                    35:ba:db:b5:63:72:9f:95:bd:02:07:77:cf:64:bb:
                    d7:a8:cc:93:33:cf:2f:ae:90:78:3f:72:b3:59:9c:
                    c2:10:8f:c4:67:41:6e:04:c4:9f:35:58:46:5a:45:
                    e4:7f:ff:03:30:94:25:6f:48:32:ff:e0:33:e7:ad:
                    b5:d0:e0:71:9f:6b:de:4d:e2:0b:cd:65:d9:9e:12:
                    69:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DC:5A:46:6D:11:23:83:38:C0:87:16:E0:4F:69:A6:A8:49:D5:97
            X509v3 Authority Key Identifier:
                keyid:A5:5A:8E:74:AF:BD:DA:E6:29:10:D0:C6:7B:A2:29:D6:9E:1E:C9:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0d:f1:58:b6:9d:76:f1:b5:70:0d:8a:23:46:ac:65:1c:3d:
         6e:d6:83:4a:fa:94:e7:6e:61:58:d6:b7:0a:6c:ad:82:75:5c:
         c1:d4:bd:f3:72:a1:b5:ba:4a:8d:19:82:5c:c7:c3:29:79:65:
         56:d9:34:19:04:e8:88:fe:55:fc:8e:04:9e:b8:b9:53:24:ab:
         a4:16:d1:de:7d:d2:ee:e2:1a:70:6c:68:f9:fe:d9:45:05:fe:
         c3:41:62:46:dd:55:d8:80:ba:52:96:db:37:62:10:af:38:28:
         40:91:70:e9:c6:09:90:52:fb:d6:c0:f0:b4:b2:7e:e5:ec:0a:
         e7:be:a1:5a:09:53:1a:e8:c6:ba:e9:d9:30:0e:64:f9:f2:e1:
         6b:9b:bf:8f:52:cb:99:8e:83:c5:33:ec:11:15:eb:b4:55:fd:
         eb:2b:80:5b:a3:25:c6:ca:ba:f4:bb:b5:db:56:e2:60:a5:f7:
         28:84:bb:9e:1d:12:e9:65:78:79:b0:40:bc:d7:38:97:25:2f:
         99:05:dc:6a:dd:bb:d2:3a:f7:98:25:6d:28:73:7e:dc:77:4a:
         5c:80:1b:96:3e:ed:47:3e:7b:ce:42:0a:57:5b:95:17:77:9c:
         64:ad:65:e2:86:77:a6:1b:ed:7a:69:91:a5:2b:23:81:7e:bb:
         1b:90:31:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:19:51 2026 by rpki-client