Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
File:                     PoReqE4RAwvCoQYTCJefeYoSET8.mft (raw, json)
Hash identifier:          +HEZfgd6xy0Jvd+W86uvBiiy7T/jVJy4BBsigi7TFwY=
Subject key identifier:   0D:87:78:FE:4C:1B:E7:E5:A0:0B:68:5C:CB:6D:FB:7F:3B:0F:7A:D2
Authority key identifier: 3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F
Certificate issuer:       /CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F
Certificate serial:       0C9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
Manifest number:          0C93
Signing time:             Tue 24 Mar 2026 18:22:31 +0000
Manifest this update:     Tue 24 Mar 2026 18:22:31 +0000
Manifest next update:     Tue 31 Mar 2026 18:22:31 +0000
Files and hashes:         1: PoReqE4RAwvCoQYTCJefeYoSET8.crl (hash: qqXED4hwhfv1U3+g+ac09c2aYUqcfgasu2X2f05bTws=)
                          2: 03EE880413F511EA8D120C65C4F9AE02.roa (hash: 2QGfkxbn7M0/GCnbZiSq9uZzzvvClpW7C4zygip+ABU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl
                          rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3230 (0xc9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6BF5, serialNumber=3E845EA84E11030BC2A1061308979F798A12113F
        Validity
            Not Before: Mar 24 18:22:31 2026 GMT
            Not After : Mar 31 18:22:31 2026 GMT
        Subject: CN=69c2d667-10a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d7:31:2f:06:13:36:33:bd:fe:20:c7:d3:15:
                    02:8a:33:50:85:f8:2c:9e:be:87:c2:91:04:e0:74:
                    4a:8c:a1:03:d7:ce:eb:df:ea:a1:e4:9b:00:81:74:
                    98:14:9a:eb:98:a2:59:74:29:f4:1e:a8:9e:3d:db:
                    8e:bd:27:5c:e2:98:56:cd:aa:5a:cc:41:2b:58:65:
                    f5:71:fa:ea:98:33:30:28:8f:63:7d:b4:b8:54:44:
                    8d:e5:62:cc:85:7c:37:51:78:53:79:12:05:58:fc:
                    d4:2e:06:8b:04:7b:3c:8b:c8:ef:a7:86:4b:a6:36:
                    9d:13:63:8c:7e:ac:cb:13:e0:41:cb:2c:8a:67:0b:
                    32:07:81:81:ef:37:ce:c3:14:e3:3f:54:22:c8:94:
                    88:3e:1d:29:e3:b0:28:3a:35:b0:71:93:98:15:26:
                    26:d4:59:3a:3a:48:35:2c:0b:1a:17:2e:db:3a:2e:
                    36:81:cd:2c:b0:91:cf:37:79:a2:5b:e5:cb:ad:fc:
                    49:21:a1:9a:6c:f6:94:be:44:ad:fa:7b:8b:4e:10:
                    76:7a:2a:cb:e3:4d:a4:00:f7:89:a5:a4:48:33:2d:
                    bb:ec:11:9a:73:ad:b8:0d:1b:67:34:e8:37:34:a0:
                    ca:e1:7c:71:f8:d0:d0:4b:cb:14:f8:66:eb:3c:e3:
                    61:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:87:78:FE:4C:1B:E7:E5:A0:0B:68:5C:CB:6D:FB:7F:3B:0F:7A:D2
            X509v3 Authority Key Identifier:
                keyid:3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:2e:bb:44:62:4b:e5:b6:05:a0:73:c0:74:05:99:83:1e:2d:
         fc:48:b9:78:4c:4d:bd:55:ec:4b:bc:02:bc:cc:f2:84:17:b2:
         52:37:b6:ec:07:b4:0a:42:72:7d:59:39:96:94:3b:83:68:e6:
         ec:84:4e:7d:56:7b:d0:cf:36:e0:bc:c8:23:e0:05:d7:58:13:
         6b:ff:7f:c2:a0:40:9d:8b:db:ae:57:5c:97:15:7c:ad:06:1b:
         18:78:a4:b9:0d:7e:0e:9f:85:3a:46:49:2e:7b:aa:2a:b4:00:
         a1:cf:2a:d0:0f:8c:82:b5:49:ce:4c:3d:54:c1:25:78:9a:62:
         96:a2:58:50:3c:be:df:ce:0a:12:6a:e4:22:cc:be:4f:77:e4:
         dc:89:01:16:50:41:b5:f2:c0:39:c6:62:5e:1f:f2:1e:d4:28:
         3b:c4:3a:49:88:02:93:69:c5:e9:97:9f:81:2b:a6:7e:61:b3:
         ce:e9:89:8a:11:69:e5:3c:f9:7b:26:a9:77:15:75:47:6d:99:
         fd:6f:ef:67:80:54:3b:19:fd:fa:98:4c:6e:f0:6f:7e:45:1d:
         e9:3c:4e:d8:f8:26:24:6c:fa:f8:a0:43:21:63:12:b8:d9:e3:
         52:45:d9:c7:3b:8b:37:95:53:1d:a2:6a:10:5c:75:28:c4:e0:
         1a:0f:33:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:46 2026 by rpki-client