Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
File:                     mZsvZTnCPq60aeZ1OfstyTPZgEA.mft (raw, json)
Hash identifier:          0RVXMaQGe6DI7Dnms08oNNCCQWE5Lcxs7mFODyLqqiI=
Subject key identifier:   95:E1:ED:F7:CE:8E:5B:6E:94:BA:85:78:41:5E:E7:89:19:64:C4:4C
Authority key identifier: 99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40
Certificate issuer:       /CN=A91AB055/serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
Certificate serial:       017A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
Manifest number:          0171
Signing time:             Fri 27 Mar 2026 04:13:08 +0000
Manifest this update:     Fri 27 Mar 2026 04:13:07 +0000
Manifest next update:     Fri 03 Apr 2026 04:13:07 +0000
Files and hashes:         1: mZsvZTnCPq60aeZ1OfstyTPZgEA.crl (hash: W6MBWLUGwaJcJDZmtEU9t3PVd4oRfLtjFWUr9RKK6nI=)
                          2: 83CA613CF55611EE8CE6274DC4F9AE02.roa (hash: AJJ92VGVLucsvsIdaZU0nKfuQXZ8cJi9IfizP5I2ais=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl
                          rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 04:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB055, serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
        Validity
            Not Before: Mar 27 04:13:07 2026 GMT
            Not After : Apr  3 04:13:07 2026 GMT
        Subject: CN=69c603d3-ce01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b9:0b:ab:e6:e3:96:c1:66:76:5e:3f:f7:3f:
                    3d:c9:44:80:47:ae:68:28:28:1f:d1:f2:00:58:97:
                    96:7a:a1:e4:15:2d:9f:29:11:6a:ae:64:0b:0f:2c:
                    ed:c3:82:86:04:8f:5e:56:a9:ab:27:2a:c5:d7:8c:
                    6d:62:ce:d2:47:c4:69:5d:77:16:11:6f:c6:10:75:
                    31:d8:38:09:28:a4:dd:db:88:57:b4:96:a1:16:d8:
                    a9:87:10:a2:95:db:cb:0b:7d:4f:41:8a:c8:88:db:
                    9e:52:89:b7:65:93:df:8f:be:70:2f:e1:ad:60:83:
                    3e:86:d8:18:c2:db:56:ad:ef:e6:e8:66:2f:1a:6a:
                    7b:aa:74:fe:b8:db:11:9f:5d:f6:d4:35:40:bc:90:
                    8c:4e:17:02:05:39:87:02:c4:38:a3:1e:0a:2b:f2:
                    b7:ec:67:29:2a:08:60:65:60:55:25:28:22:4e:34:
                    36:c7:79:06:94:0a:b8:92:6b:ad:b0:81:e8:ce:54:
                    be:aa:89:3c:01:a7:54:a2:f0:ec:02:96:54:6e:2f:
                    1a:1d:10:43:23:99:cd:58:fa:a2:4b:5c:3e:8f:8d:
                    9e:f9:a5:58:b3:bb:d9:36:f0:82:b6:8f:c1:e7:2c:
                    a0:93:39:42:99:40:7f:fe:59:65:3f:a7:d5:dc:f4:
                    13:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E1:ED:F7:CE:8E:5B:6E:94:BA:85:78:41:5E:E7:89:19:64:C4:4C
            X509v3 Authority Key Identifier:
                keyid:99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:9e:39:02:a5:91:41:4f:e3:c9:ec:28:ee:75:5a:b2:b3:43:
         ea:aa:d7:7d:48:55:e9:9d:88:ef:eb:fd:ef:e2:46:6e:de:91:
         61:59:8d:6b:fb:7d:dc:96:da:bd:be:5b:d1:f1:e1:97:ec:e5:
         44:3f:49:50:8e:e7:39:99:a5:61:a2:2f:fc:d0:61:c3:48:6f:
         22:7d:18:3d:4d:df:1b:6b:c8:53:b4:d0:4c:0c:2f:56:69:8f:
         35:c0:da:9f:70:b3:db:4b:96:bf:ac:37:b4:0f:fd:d5:4d:25:
         2a:ad:ec:35:76:b3:28:ad:13:6e:d7:52:80:44:bc:24:93:ef:
         37:74:6a:f6:18:b1:e5:2b:a7:46:bf:77:11:f1:06:b9:87:2b:
         7d:24:20:8e:d8:be:d6:40:77:86:e0:cf:85:f3:f9:92:2d:a6:
         4e:20:15:77:a0:62:74:73:a0:d9:19:f8:fc:d8:9f:7a:da:72:
         07:6e:6b:80:aa:99:0e:ec:b8:eb:9f:21:0d:80:79:39:c4:3a:
         67:45:4f:5f:50:93:1b:fe:c7:32:0d:6e:f8:a6:25:0c:38:b3:
         73:8f:9e:16:d4:91:70:0a:6e:41:9d:65:3e:63:0f:d2:a0:53:
         df:11:6f:f4:72:bf:77:50:af:d3:fe:c5:d6:69:e9:eb:25:30:
         12:1b:d6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:38 2026 by rpki-client