Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
File:                     3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft (raw, json)
Hash identifier:          15CzrdKT7JvfN2vCCs6h/kQt6QHU9mC3j/lUhqX7Cds=
Subject key identifier:   15:D4:74:35:9A:7E:81:BF:5D:E2:A2:17:92:F8:50:86:5A:12:F5:6B
Authority key identifier: DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0
Certificate issuer:       /CN=A91A5201/serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
Manifest number:          AF
Signing time:             Wed 25 Mar 2026 06:20:04 +0000
Manifest this update:     Wed 25 Mar 2026 06:20:04 +0000
Manifest next update:     Wed 01 Apr 2026 06:20:04 +0000
Files and hashes:         1: 3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl (hash: Hj3bYPZEBNxyUs8o9HmHkLIVbPlzeub1ENVJRjiISlw=)
                          2: D0CA23541BC611F09FDAC047C4F9AE02.roa (hash: 0ABnHn0tYQYE8SzbXPlx35zELqu/1VmLMO+AifbeoVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl
                          rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5201, serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
        Validity
            Not Before: Mar 25 06:20:04 2026 GMT
            Not After : Apr  1 06:20:04 2026 GMT
        Subject: CN=69c37e94-d39a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:55:92:9e:2a:51:4b:30:b4:7c:c4:99:db:76:
                    67:90:e2:64:de:c3:c4:10:3b:11:d0:1f:1d:f2:ed:
                    1e:36:51:17:f7:2b:68:bc:eb:a6:bb:15:06:1f:1a:
                    9c:a1:06:0c:96:51:5b:1b:93:ef:24:98:65:9c:88:
                    03:30:41:8b:a2:09:86:66:59:71:30:4f:1f:1c:f4:
                    ad:76:0c:e2:07:f7:59:e1:b1:76:72:cf:49:ed:6c:
                    4f:21:fa:b9:6f:79:88:f3:23:6b:dc:7b:cd:92:5e:
                    85:9c:d7:71:9c:cb:5b:53:27:d0:0e:6e:b8:a3:da:
                    df:a1:53:1e:22:e8:a4:47:f5:9b:fc:da:2b:e5:1f:
                    8e:fb:15:cf:a4:e6:6d:b7:76:f0:1c:41:77:ea:f4:
                    3a:79:25:fc:2d:27:59:61:79:85:1b:63:4d:f0:0f:
                    50:59:47:73:91:8e:de:56:2d:41:f4:ba:57:af:3c:
                    ee:03:39:4e:29:82:d6:81:7b:6f:3b:58:37:c1:26:
                    61:26:5e:bb:01:77:1e:5b:57:fb:e1:be:3b:66:6f:
                    c3:dd:bc:1b:ad:d4:7c:16:f6:7a:13:9b:a9:ed:34:
                    9a:2e:2b:c1:f8:40:93:10:8c:30:ee:1d:b9:5c:a0:
                    8d:5d:e8:49:f8:64:a8:7a:a7:f2:3d:ae:4d:4c:4a:
                    6c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D4:74:35:9A:7E:81:BF:5D:E2:A2:17:92:F8:50:86:5A:12:F5:6B
            X509v3 Authority Key Identifier:
                keyid:DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ec:91:2e:c5:67:b3:10:78:91:a4:61:b4:85:37:a2:ab:45:
         c9:a0:1d:33:ad:dc:8f:af:a1:cc:03:66:61:8c:ee:b0:22:8e:
         4a:f5:15:d2:66:c7:f5:a6:87:e8:8a:1f:44:ff:cc:d9:f1:91:
         f9:29:db:aa:02:f8:f4:7b:b0:9c:1a:ab:77:40:0a:3a:fc:f4:
         91:a1:e0:fd:65:5f:1e:a1:48:6c:41:64:4d:61:30:65:82:4f:
         c9:b0:bd:12:e4:93:2f:9e:91:bf:bc:82:62:32:ef:48:b3:b0:
         64:12:56:81:29:66:dc:ae:c6:08:d1:b0:ed:44:6f:0f:26:fa:
         6d:af:b2:df:14:87:f6:ee:73:12:5b:9f:2d:5c:b2:44:2f:3d:
         76:31:76:5c:cc:30:60:8f:c7:eb:97:ba:3b:35:8c:81:6e:51:
         84:c0:95:63:e1:be:61:22:23:82:97:a4:cc:26:d3:29:47:c5:
         69:b1:e5:1e:b0:3e:9e:34:5f:83:08:fe:52:45:44:42:32:e7:
         72:db:b3:30:a7:97:ba:69:47:66:03:5b:4a:0e:ed:94:dc:12:
         84:22:e3:85:6b:00:5c:88:1e:0c:10:08:de:95:7c:c9:ac:aa:
         15:79:f1:1c:6c:45:69:95:34:e0:aa:db:02:6d:ef:fb:06:a4:
         88:81:12:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:12 2026 by rpki-client