Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
File:                     9JSW-V35WIgb9LfpcuUbbzylnfo.mft (raw, json)
Hash identifier:          7+G3tN0qsopwHUt0ydsoAkvuDN1waPZ8dKaX7pfrKh4=
Subject key identifier:   53:D3:F7:33:C8:F2:08:71:67:6C:56:F7:BD:D2:83:7C:CB:56:5C:61
Authority key identifier: F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
Certificate issuer:       /CN=A91ABA84/serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
Certificate serial:       E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
Manifest number:          C7
Signing time:             Wed 25 Mar 2026 06:10:33 +0000
Manifest this update:     Wed 25 Mar 2026 06:10:32 +0000
Manifest next update:     Wed 01 Apr 2026 06:10:32 +0000
Files and hashes:         1: 9JSW-V35WIgb9LfpcuUbbzylnfo.crl (hash: UYn9xghVR/KAMRLZcVASUAC0MTnxHI+pGBfZHlV25Y0=)
                          2: 25C80478053A11F08A0D6F31C4F9AE02.roa (hash: hjlB+aB6tVZtBmOR1311n7Du0s/A2ct9E2kTQriis3g=)
                          3: E11B4E9E051F11F0AD77753FC4F9AE02.roa (hash: lTs4KJOgOTvzw9aKQ/IYKy0OU3CuwvNSelWl5UOPyos=)
                          4: 78B92D76052E11F0A9CDFD7AC4F9AE02.roa (hash: IL7V0fAfJ20CzSs+8gJtBNu5MEW6nOBLoAc46/26Fn8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
                          rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABA84, serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
        Validity
            Not Before: Mar 25 06:10:32 2026 GMT
            Not After : Apr  1 06:10:32 2026 GMT
        Subject: CN=69c37c58-fb16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:75:50:73:34:71:a0:30:27:12:d0:52:d6:af:
                    0d:1e:f5:09:53:3a:df:cf:8f:40:d7:ad:ca:c6:cc:
                    0c:2e:a2:4f:38:ad:b1:15:6c:8d:e6:73:47:0a:da:
                    98:98:6d:4b:b4:76:11:ce:73:93:ed:bd:b3:76:d3:
                    bd:e9:e9:d5:94:64:1d:58:34:fe:a1:c0:25:eb:9c:
                    3d:f7:2c:e0:cc:39:5d:7b:6c:81:70:0a:67:33:40:
                    10:0e:47:2d:91:f3:91:47:61:9d:fa:85:1d:da:30:
                    f8:3f:84:be:ab:55:c6:27:ad:14:e0:b5:f4:39:a7:
                    cf:3f:13:9b:ba:95:2e:ef:6c:b4:39:6d:fa:7a:28:
                    cf:3e:b9:79:0a:dc:a4:52:2f:05:62:5c:c8:d1:43:
                    88:60:7e:c8:f6:4e:c0:6e:b7:13:42:71:0b:c1:aa:
                    36:8d:9e:fd:23:65:4f:da:0f:bc:b5:08:f1:8a:4b:
                    a7:b8:97:1d:2c:ab:ea:74:dd:c0:cc:6f:94:f7:2e:
                    ae:70:2b:23:d0:22:79:41:6d:94:60:eb:24:15:22:
                    2f:4e:c5:f0:c2:e7:dd:58:93:82:8f:64:09:02:ea:
                    54:c9:1e:06:c8:d3:32:ce:8d:b7:12:b3:6b:6e:1b:
                    5d:7f:8c:18:e7:ed:a1:0b:d9:7b:44:80:fd:94:b1:
                    ac:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D3:F7:33:C8:F2:08:71:67:6C:56:F7:BD:D2:83:7C:CB:56:5C:61
            X509v3 Authority Key Identifier:
                keyid:F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:4a:88:72:5a:e3:d5:8c:a5:6e:81:24:13:c3:47:47:f5:5a:
         2d:62:d9:64:9c:41:60:75:03:82:2d:3d:d6:fd:f0:26:13:36:
         55:fb:1d:b3:ad:13:23:df:ef:4a:a9:4b:c3:d8:ed:e7:69:2a:
         b5:66:27:fb:ac:b5:c6:4e:f9:e3:cf:52:32:03:06:1b:59:31:
         a8:6d:f1:50:4d:1b:cb:7d:c5:6c:1d:f2:9a:c4:3e:e1:fe:c7:
         12:41:67:58:4d:18:bb:8b:2f:a2:6d:c5:90:d3:ef:da:32:9c:
         06:13:82:94:21:c4:f6:c6:7b:cb:24:36:83:4d:99:da:e4:fd:
         e3:a2:32:5d:9e:bb:92:eb:b1:bd:c8:36:08:5d:65:97:fe:cf:
         0d:f2:b7:aa:6f:41:ba:0f:43:c3:d5:9f:21:2b:29:57:ef:84:
         28:64:a4:e6:c8:3e:89:98:da:59:06:79:bd:c3:ac:43:7e:2c:
         76:19:01:8c:a0:91:71:55:e0:6b:c9:5a:b5:74:a3:0a:0c:24:
         92:f7:1c:62:f1:60:95:a3:c0:5b:c7:2b:57:f5:ab:3f:16:2d:
         98:f7:34:0d:97:c2:4c:9e:6c:f6:7e:d6:94:7d:27:26:ab:eb:
         60:39:8c:47:80:44:27:dc:4e:21:e3:db:46:06:91:4c:1b:b4:
         ac:3c:7f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:20:54 2026 by rpki-client