Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft
File:                     _CT1OQdHh-zqsAwkJgbCvWiBmg0.mft (raw, json)
Hash identifier:          yRcGNiKW6yc8Tp1eZ2BdCGnu5kB4koe7Leow9UryC8s=
Subject key identifier:   43:EA:78:10:AE:5A:4E:BD:56:47:BF:DC:42:89:13:6D:8E:3D:9E:FD
Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D
Certificate issuer:       /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft
Manifest number:          B4
Signing time:             Wed 25 Mar 2026 06:18:04 +0000
Manifest this update:     Wed 25 Mar 2026 06:18:04 +0000
Manifest next update:     Wed 01 Apr 2026 06:18:04 +0000
Files and hashes:         1: _CT1OQdHh-zqsAwkJgbCvWiBmg0.crl (hash: TrFkRmgmEP55g2APkuxdVhtos2uht0C58HO+97L0eCc=)
                          2: 2A8C8F02198E11F09D302145C4F9AE02.roa (hash: P98MLa//N/AtsKsIaeAkQnM7+Sh5w9q7o4QngCybDKA=)
                          3: 947AB09E459C11F0BF881335C4F9AE02.roa (hash: /savhlBX8yuqhwBG9bwr+ymXN5AO8aEM3V2xkRwTRxI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl
                          rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D
        Validity
            Not Before: Mar 25 06:18:04 2026 GMT
            Not After : Apr  1 06:18:04 2026 GMT
        Subject: CN=69c37e1c-6cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:2c:43:9f:d1:cc:23:4d:e2:4c:e2:9a:86:
                    59:5b:87:ef:8c:a8:0a:cb:cc:7f:45:db:0e:00:e0:
                    a2:23:b4:26:30:31:a0:cf:6a:8a:ba:e8:9c:68:45:
                    4a:5a:72:b7:06:4c:31:b7:9c:70:67:6f:e3:49:1f:
                    c6:bf:fe:65:ff:c5:5c:a7:76:67:95:86:06:3c:6a:
                    bb:76:24:3d:57:0e:b7:76:0f:e1:59:aa:9e:58:8b:
                    8b:ab:29:5d:c7:07:9c:2a:1a:32:16:d4:31:40:61:
                    20:09:10:01:9c:4b:af:c6:43:a9:0b:00:9a:55:f5:
                    73:84:1b:a8:5b:04:0a:fa:e2:ec:66:2f:d7:d4:97:
                    e2:ae:18:9a:b1:70:55:d7:9e:fc:0f:25:b6:87:12:
                    95:bd:19:1e:9f:7e:3d:bc:dc:86:1e:f0:69:18:ff:
                    6c:83:b3:92:2b:28:b9:4c:39:f6:12:8d:be:4f:0f:
                    7e:7d:15:09:5b:96:a7:2d:1b:d6:56:e4:58:b2:d9:
                    e2:7c:89:72:e2:5a:76:01:77:f0:37:c3:79:64:64:
                    32:d9:98:20:de:77:3c:e6:74:59:26:ed:5a:5b:51:
                    c1:09:88:25:f8:0d:85:ef:2c:93:ee:80:6c:ec:86:
                    8d:49:47:74:2b:79:8e:62:c2:1c:4c:cf:0d:8d:3c:
                    af:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EA:78:10:AE:5A:4E:BD:56:47:BF:DC:42:89:13:6D:8E:3D:9E:FD
            X509v3 Authority Key Identifier:
                keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:76:9d:84:8a:5f:05:ad:f1:d7:ba:f4:52:52:f6:ba:24:8d:
         f5:30:5a:5c:f2:ff:e8:38:f9:ff:6e:dc:a5:ff:66:90:9c:7a:
         74:82:0c:ef:05:a4:49:12:26:3f:96:8e:79:0c:7f:58:6c:32:
         60:a3:f1:2b:0a:0b:48:f5:65:b7:4d:e9:bf:94:5a:65:5b:f2:
         32:6f:a8:c1:e1:5a:54:b8:0d:08:8a:68:af:a1:e1:dd:2f:84:
         b4:98:bb:bf:4b:1f:e0:22:39:d7:37:77:d8:68:36:ac:ff:bf:
         e3:1e:6d:7e:80:2b:cb:ab:13:e9:21:3b:71:d6:1b:b0:a6:6f:
         d1:dc:ac:3d:fe:6b:c8:63:53:7b:75:97:59:78:d2:e0:15:76:
         b1:28:17:54:4a:b2:d3:09:5b:0e:f3:7b:ca:db:7e:5a:db:92:
         8b:07:94:01:11:ab:b5:cd:95:03:73:c1:c9:5f:87:27:01:20:
         3d:e3:ed:55:e7:c9:95:03:ae:87:b6:4b:36:65:24:5d:55:0b:
         72:a9:bf:e8:22:d3:0b:93:33:64:09:6a:24:0d:b4:f1:59:1a:
         cf:01:ab:e8:c2:48:ef:f4:cf:2a:8d:69:0b:72:6b:ea:9d:39:
         fe:38:e3:30:bb:40:e2:1c:69:05:04:ff:08:2b:d9:3c:46:87:
         6d:1f:ac:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:10:28 2026 by rpki-client