Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
File:                     mK6VbUJuFgLO2LtyWI9io9oSqVU.mft (raw, json)
Hash identifier:          +9Gf3Zy8CF/L8O607yoNiEpco+JpmZmTkxhA79alWCc=
Subject key identifier:   79:8A:A8:06:BA:A1:23:BB:2B:E0:D5:79:A5:19:76:29:3E:5F:28:AC
Authority key identifier: 98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55
Certificate issuer:       /CN=A91A5FCF/serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
Manifest number:          AD
Signing time:             Wed 25 Mar 2026 06:21:48 +0000
Manifest this update:     Wed 25 Mar 2026 06:21:48 +0000
Manifest next update:     Wed 01 Apr 2026 06:21:48 +0000
Files and hashes:         1: mK6VbUJuFgLO2LtyWI9io9oSqVU.crl (hash: UTdD1ml84Pjp41oELqPX5lG72eRkzo3nOmIfLo1KzAM=)
                          2: 301DED0C86F911F08DBDFA61C4F9AE02.roa (hash: vsIGVvlGCJQuRvbSj+mUc0cTXNJknUlsD/Soxx53ucA=)
                          3: 943B92961E6011F0B81D3A54C4F9AE02.roa (hash: 2Zw4KOVcRPZL7NToz0OAHJZCRTk4ni0giRlBSLkkuak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl
                          rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:21:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5FCF, serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955
        Validity
            Not Before: Mar 25 06:21:48 2026 GMT
            Not After : Apr  1 06:21:48 2026 GMT
        Subject: CN=69c37efc-a30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:58:1a:11:28:46:fa:7e:6d:12:97:78:b4:
                    9d:d4:80:d3:9a:ab:37:2d:00:e6:ae:36:b0:88:15:
                    fa:38:62:e8:16:31:0a:ef:e7:ed:12:f2:ac:b1:1f:
                    26:53:1b:36:96:9e:a2:22:f3:fd:cc:38:23:c8:e0:
                    a0:7f:8f:7b:85:12:96:9f:60:3b:2a:40:1c:a1:21:
                    e7:8f:b1:dc:c5:53:95:fd:eb:82:b6:60:88:88:84:
                    c4:ba:f3:06:80:89:a6:89:e7:21:36:df:76:8c:94:
                    55:0e:0f:51:bb:4a:3e:46:49:cb:57:f5:df:3b:80:
                    66:a9:5f:fe:44:67:c0:1f:43:5d:89:61:10:4f:09:
                    c4:06:d5:d1:86:59:21:1c:44:b4:24:fd:c0:95:1a:
                    9a:f0:49:29:2e:2b:08:5f:8a:90:c2:43:39:f2:c7:
                    41:e3:9e:02:29:00:31:7e:f5:2e:9a:93:70:6d:f1:
                    f5:f2:cd:1e:40:62:ac:d4:6a:b2:e4:45:4a:aa:9f:
                    2e:99:71:eb:4d:d2:b9:08:a8:72:11:c9:5f:1d:2f:
                    46:1f:0e:88:c5:d7:81:6d:65:68:6a:46:fc:8b:ae:
                    d1:6d:ba:23:41:ed:81:67:d1:88:53:2b:68:66:f4:
                    bf:aa:44:cb:a9:0b:b1:be:1e:6f:f8:f6:8e:6b:36:
                    74:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8A:A8:06:BA:A1:23:BB:2B:E0:D5:79:A5:19:76:29:3E:5F:28:AC
            X509v3 Authority Key Identifier:
                keyid:98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:9f:02:6a:7f:5b:6c:62:9f:3b:09:ca:23:62:29:70:0b:55:
         ee:b4:64:8f:cb:5a:55:8c:75:77:b4:fa:c2:26:73:42:cf:8c:
         ad:d6:9d:17:0e:21:c4:db:ee:f7:96:8a:06:38:df:1c:72:85:
         77:0f:a1:71:12:ac:1c:9d:be:00:a4:b5:0d:a6:99:98:6d:c8:
         96:27:dc:d0:74:d2:5c:93:aa:bc:30:52:79:a5:a1:6d:99:ec:
         7b:34:12:76:17:36:83:a5:5d:50:68:10:78:5a:2b:b0:98:8c:
         8f:80:64:fb:8b:4c:0c:11:c1:01:aa:8c:85:52:97:eb:01:50:
         bc:4c:b7:94:17:67:16:41:fa:79:db:65:fa:61:a3:21:71:6e:
         61:7e:7b:85:51:0b:97:2f:4a:89:c7:72:ae:dd:3e:98:29:f3:
         87:dc:36:3e:5d:f5:37:a1:89:c5:6a:cf:a5:c9:b5:9b:cb:94:
         fe:3a:49:6d:12:c5:f6:04:67:4e:b4:09:3c:80:41:6f:d5:10:
         54:03:30:4e:8e:50:28:c4:8e:b9:59:f9:a7:4f:62:2c:d0:ff:
         43:f5:a5:1d:94:ef:d5:ec:f6:7e:3b:2f:7c:2f:05:24:e7:de:
         d5:ff:17:eb:b4:1b:40:4d:63:54:b2:c3:02:38:25:88:d3:14:
         c8:57:cf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:19:49 2026 by rpki-client