Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
File:                     4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft (raw, json)
Hash identifier:          eVDi5F03PwgUpiIb5Ocvn53I1One7dO8aFBWNpahE/s=
Subject key identifier:   4F:23:8A:4A:69:02:46:7F:99:07:B4:3B:79:0C:EB:95:93:3A:98:13
Authority key identifier: E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A
Certificate issuer:       /CN=A91B0367/serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A
Certificate serial:       0E39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
Manifest number:          0E31
Signing time:             Tue 24 Mar 2026 17:40:07 +0000
Manifest this update:     Tue 24 Mar 2026 17:40:07 +0000
Manifest next update:     Tue 31 Mar 2026 17:40:07 +0000
Files and hashes:         1: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl (hash: zzgSp1R+YGcr7Ps+P9lmx+EPSA63GXVgS5tOJK/TgjU=)
                          2: 7321413EC22511E99FB7F225C4F9AE02.roa (hash: QV4VcOWMjw2Q8agZQUCaZHMoZiK398hrWlFAisrLEf0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl
                          rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:40:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3641 (0xe39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0367, serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A
        Validity
            Not Before: Mar 24 17:40:07 2026 GMT
            Not After : Mar 31 17:40:07 2026 GMT
        Subject: CN=69c2cc77-1f13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:e7:47:75:ed:40:d6:b2:54:5b:e8:0d:fb:
                    2a:dc:36:15:ca:89:ef:f2:c1:a5:be:9c:ef:09:71:
                    65:6a:7a:36:c5:62:49:4c:b9:1b:ca:12:c7:f3:65:
                    91:b2:29:2b:6d:8c:36:4c:78:c8:71:af:95:80:7c:
                    3d:a0:d6:d3:de:54:b3:f6:a5:81:24:84:59:0d:50:
                    f6:05:0f:59:a7:e7:f0:d3:4e:39:3c:e6:26:67:a2:
                    ea:14:cf:bd:aa:3b:6d:55:d3:bb:ba:18:98:b7:33:
                    1a:e9:6b:87:44:7c:ba:49:8c:25:9c:05:e4:16:0d:
                    31:3d:64:50:49:f3:8f:0f:7f:46:75:94:86:b0:6a:
                    d3:1b:a8:0b:39:14:0a:50:29:e6:01:ff:1d:da:c5:
                    b4:f4:be:1c:9b:19:1e:98:67:3e:3e:97:a9:77:6d:
                    2a:4b:4f:05:98:7c:b5:c4:be:e8:21:fa:88:92:c7:
                    cd:0f:82:4a:2f:7e:93:6c:16:e1:ec:64:29:c9:8e:
                    20:0a:1b:66:6e:d0:0a:58:14:26:cd:69:47:33:f9:
                    04:1d:a0:1e:ec:95:5d:52:40:18:f2:18:3f:3a:3e:
                    aa:56:e6:65:3e:39:98:79:60:af:76:73:c7:3c:e9:
                    45:80:88:24:d1:c9:b5:0c:29:10:ed:14:ea:7d:b3:
                    d7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:23:8A:4A:69:02:46:7F:99:07:B4:3B:79:0C:EB:95:93:3A:98:13
            X509v3 Authority Key Identifier:
                keyid:E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:ab:f2:fe:8d:b6:39:6f:f5:f5:bf:ae:60:19:cb:74:59:58:
         34:c1:76:2d:50:98:a5:c9:84:5a:d5:64:7a:13:f7:4e:66:06:
         21:19:ad:0f:33:a2:7f:e3:a8:aa:8f:90:61:60:bb:e1:41:a2:
         2e:83:7a:09:60:fc:7e:85:08:cb:a9:7a:95:2b:39:29:6b:6c:
         59:7c:00:46:09:a7:e6:8b:5a:8a:3b:3b:0e:ca:24:f1:fe:5d:
         a8:bb:ed:f5:75:ae:15:4d:7b:e9:2a:dc:ba:0f:01:9e:e6:b6:
         11:22:09:83:d1:91:5f:04:68:20:a9:60:3d:c2:27:4c:31:1d:
         21:74:44:e0:24:5b:21:2b:6b:15:da:1e:0c:d5:3c:96:21:1f:
         10:da:cc:78:5d:76:39:56:6e:37:94:a6:c7:77:92:36:56:16:
         35:5f:b9:bb:d8:b2:52:49:a2:64:c4:d6:4e:08:48:de:8f:6a:
         41:f4:70:57:54:1a:fc:93:b3:d4:e8:65:81:e1:35:62:64:45:
         6d:19:fa:fb:fd:df:9e:e4:57:cd:87:21:c7:fc:63:c6:ed:8c:
         55:98:33:df:da:53:22:96:f0:8c:81:98:1d:71:9f:c5:0b:ec:
         0c:0d:cf:13:f7:40:03:0d:b1:b6:a7:9d:05:14:a1:be:9b:b0:
         e6:0b:23:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:02 2026 by rpki-client