Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft
File:                     51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft (raw, json)
Hash identifier:          a7DIjFtqVHcfD5nAA0e564AEvKsopQfPTJ5OWJa41vQ=
Subject key identifier:   1E:B9:2B:CE:AF:89:B9:1C:FC:D1:86:30:0B:40:A8:C3:4A:DA:8D:B9
Authority key identifier: E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D
Certificate issuer:       /CN=A91AB063/serialNumber=E7584F959A081A4DD94809353051D235939C391D
Certificate serial:       1C24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft
Manifest number:          1C15
Signing time:             Tue 24 Mar 2026 16:08:24 +0000
Manifest this update:     Tue 24 Mar 2026 16:08:23 +0000
Manifest next update:     Tue 31 Mar 2026 16:08:23 +0000
Files and hashes:         1: 51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl (hash: 70kyfzUbaEBJZo+IRdJpwZ6CF2jpB+l9FP8hdQQIrDE=)
                          2: B6FD84CE54F611E79DF7E643C4F9AE02.roa (hash: 9ImJtWj6yuZgtcmv1bgeujWxq+BLLmLeGu5HgVdDTSg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl
                          rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7204 (0x1c24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB063, serialNumber=E7584F959A081A4DD94809353051D235939C391D
        Validity
            Not Before: Mar 24 16:08:23 2026 GMT
            Not After : Mar 31 16:08:23 2026 GMT
        Subject: CN=69c2b6f8-559a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:64:a8:87:6a:2b:12:28:f7:ef:5d:65:24:
                    a0:12:64:88:7b:14:45:15:cc:60:4e:19:b7:bb:d6:
                    fe:f1:a4:7b:f8:9e:db:19:ee:cd:75:01:72:d3:7f:
                    1e:bb:e5:a7:b6:25:eb:80:84:82:6f:85:bf:18:90:
                    a2:2b:83:39:60:42:65:24:8c:c8:10:1e:09:3d:14:
                    1a:08:50:d5:fe:d1:ef:9e:a8:3d:4a:ef:6d:29:7f:
                    8d:00:79:67:88:b5:1e:1e:6c:93:8a:9b:98:07:0a:
                    cd:c2:24:be:bd:cf:5d:b4:13:21:07:f8:b1:36:2c:
                    da:9b:49:34:70:ea:68:4d:f2:91:48:00:fa:f0:0c:
                    22:10:9c:d6:92:ad:ad:84:b6:d4:55:84:a2:4b:0a:
                    69:fb:f7:1c:7c:4a:ab:2e:88:01:11:5a:8e:be:e3:
                    4c:5d:fb:8a:ad:02:d1:f5:a0:0e:ec:6e:a1:1a:c5:
                    67:72:27:7e:33:92:30:f9:0b:ef:7d:8d:83:c9:02:
                    6a:02:43:ec:ec:ab:0e:61:02:31:f0:10:f3:07:1d:
                    25:0e:9b:dc:3e:cc:e3:3a:8d:91:fe:16:2a:7e:39:
                    73:56:31:7a:11:fc:4f:d4:b7:d7:8d:db:9b:5e:36:
                    33:78:79:a9:0a:f3:50:fc:83:25:0d:c8:0a:17:86:
                    c3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B9:2B:CE:AF:89:B9:1C:FC:D1:86:30:0B:40:A8:C3:4A:DA:8D:B9
            X509v3 Authority Key Identifier:
                keyid:E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:7d:57:07:7b:6a:16:92:23:2d:96:ec:ed:87:21:e5:1a:90:
         6e:c8:7e:b0:c7:97:41:c1:9a:6b:45:2a:af:33:fc:ca:3a:7c:
         1f:26:d5:27:2b:7b:c5:b6:7e:a3:8c:13:88:a8:b5:41:f2:47:
         b2:93:66:c4:9f:ef:ad:e4:11:25:fd:e9:9c:83:a2:e1:99:06:
         52:d6:a4:d0:4e:0e:92:d5:2a:f9:87:43:38:7b:ba:29:64:2e:
         00:d7:b8:07:85:93:32:dc:b8:03:01:48:4c:64:25:99:3b:8f:
         be:10:4d:8c:85:76:45:22:bc:17:2f:51:b8:22:3c:f7:b2:a2:
         ec:c4:b1:55:c1:d4:b6:3f:ef:6a:1a:be:41:ce:52:80:92:0d:
         5e:52:26:29:06:eb:8c:ac:19:5f:07:a9:52:b0:80:71:bc:eb:
         0b:2e:06:0b:2c:61:bb:45:1c:21:88:ef:5f:c6:a7:67:66:6a:
         bd:37:63:f9:c0:25:67:85:ba:16:8c:be:a4:0e:77:75:6a:9c:
         ff:c0:ed:fb:73:5f:97:f4:22:47:55:97:b8:f1:57:ff:f0:be:
         78:ca:f4:87:03:17:41:31:4a:8f:50:87:34:37:74:52:f5:24:
         22:68:1c:49:f6:33:2b:1b:29:31:c9:2a:25:01:04:2e:dd:03:
         20:c0:96:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:43:09 2026 by rpki-client