Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft
File:                     g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft (raw, json)
Hash identifier:          h9KkGbB6MljPOdY1+dRYWNOdhfE+Cp1HtPYqxA1nmN4=
Subject key identifier:   57:22:59:7B:FF:D9:49:31:11:AE:0C:E7:4C:61:BF:6B:F8:BC:32:1B
Authority key identifier: 83:8A:94:ED:25:24:09:59:AA:6F:15:49:10:03:AC:6E:6D:03:95:7E
Certificate issuer:       /CN=A91A7CDD/serialNumber=838A94ED25240959AA6F15491003AC6E6D03957E
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft
Manifest number:          017F
Signing time:             Wed 25 Mar 2026 03:50:24 +0000
Manifest this update:     Wed 25 Mar 2026 03:50:24 +0000
Manifest next update:     Wed 01 Apr 2026 03:50:24 +0000
Files and hashes:         1: g4qU7SUkCVmqbxVJEAOsbm0DlX4.crl (hash: NcwINnHLddEVB9DHqBCMKYusCB7Uwrh/qLb4aBIoH7E=)
                          2: 1E595AE8DD0E11EE9833196BC4F9AE02.roa (hash: wOdLJIpHlnEyWAzSPv9+zZxUu2MA92YWWlK509a7alM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:50:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7CDD, serialNumber=838A94ED25240959AA6F15491003AC6E6D03957E
        Validity
            Not Before: Mar 25 03:50:24 2026 GMT
            Not After : Apr  1 03:50:24 2026 GMT
        Subject: CN=69c35b80-8707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:bc:66:07:9a:98:7a:f4:c6:48:9e:d6:dc:
                    8b:68:f6:e5:39:cb:e0:b4:af:5e:23:e0:a2:dc:5f:
                    8e:87:9b:77:e7:53:fb:4c:61:18:c6:2e:ab:86:6d:
                    ff:2d:91:cc:35:f5:5a:84:a5:e9:39:53:4b:01:cf:
                    4a:c1:53:6f:2f:db:8a:ad:98:cc:e8:fe:13:da:c8:
                    26:51:03:85:da:d6:55:24:18:a5:0c:d8:ea:1e:d1:
                    96:8d:fd:a5:00:dd:7d:6c:ef:c6:65:6f:2c:58:04:
                    02:bb:a3:f4:60:6a:fc:4a:11:08:f0:d5:ec:32:8c:
                    6f:06:3f:c3:e8:7e:0c:d7:d2:e2:04:ae:79:5d:da:
                    3c:d2:33:a5:9c:9f:00:55:fe:89:c5:8b:30:91:04:
                    b8:a4:a3:c8:c7:4f:1d:01:d3:c1:46:b8:f5:8d:da:
                    e5:bd:c7:0f:b9:ed:b9:a3:3e:ec:64:73:7a:ed:54:
                    f6:a6:11:ad:12:7a:b7:e2:62:bd:7c:a9:49:10:63:
                    bd:c8:24:9d:ea:52:f9:68:5f:34:dd:e5:22:9f:d7:
                    b2:89:bd:be:e3:27:85:ef:0a:5d:1f:87:e1:fa:47:
                    e4:d9:f5:44:20:f4:2c:d5:2e:39:cd:c6:01:ae:8c:
                    bd:6f:61:f4:b1:c7:c8:11:11:48:68:e8:57:a0:d4:
                    7b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:22:59:7B:FF:D9:49:31:11:AE:0C:E7:4C:61:BF:6B:F8:BC:32:1B
            X509v3 Authority Key Identifier:
                keyid:83:8A:94:ED:25:24:09:59:AA:6F:15:49:10:03:AC:6E:6D:03:95:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:6f:9d:cc:c4:ef:f8:bb:43:fe:be:0e:c3:65:cf:91:63:b9:
         c4:14:9f:d8:f9:e7:98:27:a7:b0:31:75:16:49:2c:61:86:7b:
         85:fb:89:20:96:84:8c:de:ab:1d:86:0e:3c:02:c8:49:80:d4:
         8b:aa:4e:96:25:66:ab:66:2b:28:e6:34:8b:2e:5e:02:df:15:
         d7:94:05:74:67:75:ff:ff:c5:7b:e7:d7:dd:3c:97:41:50:70:
         d7:6e:0d:4e:50:b9:f1:eb:ee:09:6c:7d:8b:3e:a9:30:e4:d6:
         31:61:e3:77:5f:0c:7c:3b:54:1b:e2:79:42:8b:da:0c:57:c1:
         49:c6:05:bd:4d:a0:15:9e:87:2d:6a:98:98:61:55:a6:6e:cf:
         b6:32:f7:0e:d1:c9:ce:3f:50:3e:ce:1b:44:99:b1:41:e3:a8:
         cd:88:11:f0:a6:d6:6c:33:e3:e6:d7:65:0e:ff:eb:7f:84:36:
         e6:2a:65:7f:2c:e4:6e:dd:af:61:84:b7:29:6a:32:1d:fb:6f:
         79:df:d4:e8:66:85:ab:2b:8a:bd:74:88:6a:e4:64:3d:28:ae:
         f6:ab:83:2c:e6:29:26:70:7d:5c:e4:a7:92:b1:c2:97:bb:b7:
         aa:5b:f8:ed:31:31:62:fb:84:3e:96:53:48:c6:ac:60:6a:40:
         39:f0:cf:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:29:33 2026 by rpki-client