Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft
File:                     asoRKbI4x6HxeRt1zUmta9at-nc.mft (raw, json)
Hash identifier:          sZ44KP8vNTqbu7X3W2mtePB2h/jrD6yX3yZBYqPLOkg=
Subject key identifier:   E5:34:D1:1F:FA:11:4A:FC:E9:60:8C:FB:0C:AD:68:6D:53:64:04:65
Authority key identifier: 6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77
Certificate issuer:       /CN=A91A6F56/serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft
Manifest number:          7E
Signing time:             Wed 25 Mar 2026 06:58:32 +0000
Manifest this update:     Wed 25 Mar 2026 06:58:32 +0000
Manifest next update:     Wed 01 Apr 2026 06:58:32 +0000
Files and hashes:         1: asoRKbI4x6HxeRt1zUmta9at-nc.crl (hash: 3m1frhzoNYYzXiJjpCs3BKXg27QJAGiiWL8RHRQ/btc=)
                          2: 234A6D0E6E8911F0AEEA0B14C4F9AE02.roa (hash: n5o+gpjxSM1mfGq/OK/47I4GgkJ3B65F/QWpVAxrvm0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.crl
                          rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:58:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6F56, serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77
        Validity
            Not Before: Mar 25 06:58:32 2026 GMT
            Not After : Apr  1 06:58:32 2026 GMT
        Subject: CN=69c38798-9713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cf:75:0b:54:c1:d8:3e:8e:3b:6e:90:86:0d:
                    6b:0f:6c:6f:ae:06:0f:16:f3:55:e4:4a:61:74:c2:
                    4f:63:cb:2f:09:ee:d8:83:4a:d5:65:35:3a:83:50:
                    cd:ac:db:11:1f:eb:15:f4:64:d1:02:ce:da:a9:98:
                    c1:33:48:9b:6d:eb:b1:a7:e0:f1:37:3d:87:76:02:
                    a8:4a:dd:28:b3:51:18:e1:79:36:06:63:d3:38:09:
                    c3:31:be:86:e8:a0:34:30:10:05:1e:fb:2c:27:39:
                    f4:9b:3d:25:2c:c0:c7:d9:8a:68:09:eb:3a:00:2e:
                    6c:4c:a5:bf:1c:6b:c6:b4:bd:36:83:a3:7c:09:4b:
                    06:fd:d8:06:2f:12:5b:f8:77:f0:2c:63:db:96:37:
                    f5:df:f1:21:b9:53:80:96:6e:65:ad:80:a3:ac:ba:
                    9c:90:7f:aa:da:15:0c:db:a3:6f:57:6a:d0:36:08:
                    dc:0a:d4:06:7b:88:95:0e:2b:0e:50:40:46:30:07:
                    ce:86:e9:51:48:8a:72:80:92:41:19:4f:38:7d:f5:
                    4a:db:33:2e:cf:69:1c:33:9f:f8:57:c4:6d:9f:1f:
                    bd:f5:3c:49:48:26:9f:f2:22:6a:ca:72:17:1b:a7:
                    de:9a:c0:7c:d6:bb:15:ca:34:53:26:3b:bf:5e:a9:
                    b3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:34:D1:1F:FA:11:4A:FC:E9:60:8C:FB:0C:AD:68:6D:53:64:04:65
            X509v3 Authority Key Identifier:
                keyid:6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:a5:6d:80:d5:4e:82:7c:dc:e3:59:88:a6:1c:ca:23:84:42:
         d0:b5:e7:1b:0f:3c:bd:f4:bd:d5:f6:e6:7e:29:1a:34:b4:5a:
         0d:e9:5c:19:5c:8e:6e:0a:cc:c7:b5:85:17:1a:66:c1:0c:73:
         ab:fb:95:e4:2e:5e:f3:3d:19:dc:c1:e2:ec:4d:7b:fc:60:77:
         05:7e:51:cd:b9:ff:78:32:f7:b9:cf:37:c8:61:56:fe:f5:a3:
         68:b7:9a:73:31:cb:a5:55:94:e1:d1:d9:52:cb:05:9a:0a:66:
         db:2f:70:d9:8c:c7:03:33:c5:1f:e5:1f:8a:a4:c9:e8:d5:d2:
         ee:73:64:63:f1:15:7e:b5:96:69:78:14:7b:d7:5c:70:c4:01:
         22:52:a2:ce:0f:a7:26:ae:d6:bb:34:20:59:f6:a1:e1:ec:55:
         f5:5b:1e:4c:c4:27:0c:82:ca:1d:0e:71:b2:f4:92:5f:fb:03:
         f9:48:c8:c2:59:67:05:d0:8b:16:47:54:8b:bb:78:66:cd:f0:
         78:bb:ab:d1:56:9b:ab:81:7b:85:ed:ce:f5:cb:b0:c3:39:43:
         fc:34:36:f5:f7:3d:e3:60:b5:b7:54:3c:5d:af:6b:9b:f3:65:
         3f:f5:e1:db:bb:bb:5a:fb:4b:af:07:0b:5e:32:1b:31:b3:b2:
         26:31:6e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:44:17 2026 by rpki-client