Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
File:                     lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft (raw, json)
Hash identifier:          9j+sczZQdGnSgkDejwz0ZmjrzQSi5y/XP5l750AB3ZA=
Subject key identifier:   1F:08:6C:27:56:80:55:AD:AF:E2:6D:58:D2:6B:BA:6F:72:CF:EA:CE
Authority key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
Certificate issuer:       /CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Certificate serial:       050A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
Manifest number:          0503
Signing time:             Tue 24 Mar 2026 23:20:54 +0000
Manifest this update:     Tue 24 Mar 2026 23:20:54 +0000
Manifest next update:     Tue 31 Mar 2026 23:20:54 +0000
Files and hashes:         1: lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl (hash: Ecmy5SvoKIbB+NRisMDkYoFTs0j5WGoUSV4+JjXFz+E=)
                          2: 85A82A144C1311ECB5708257C4F9AE02.roa (hash: GRBe+HaGJO3LMIVblDPWEP89zGECTmdqlQ721jRVqnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
                          rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1290 (0x50a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B075B, serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
        Validity
            Not Before: Mar 24 23:20:54 2026 GMT
            Not After : Mar 31 23:20:54 2026 GMT
        Subject: CN=69c31c56-acdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:b3:ad:65:f4:41:4d:e7:18:21:58:74:62:
                    b8:b8:37:da:b2:4d:27:70:1c:c8:e2:a1:5d:b9:21:
                    e0:7c:80:d8:af:81:4c:53:93:3a:61:a5:ef:c8:b9:
                    71:72:26:ea:8f:84:90:19:7a:1a:f1:89:1d:a3:74:
                    24:80:c1:27:b4:cb:ea:74:e8:2e:16:af:59:09:f5:
                    fb:64:6e:4c:e3:5e:c8:80:02:14:10:52:40:2c:ca:
                    e1:ec:39:44:c7:23:24:0d:89:75:cd:72:35:25:76:
                    8e:4f:34:86:7c:76:c5:88:43:3f:eb:96:5d:2c:c6:
                    7c:81:c5:46:cd:d8:6b:05:ae:36:2d:10:79:b0:b0:
                    1d:b7:3f:e6:49:4b:b4:a4:74:3c:81:42:49:66:50:
                    c8:fb:12:f0:37:44:af:7b:8f:30:89:e1:58:df:5c:
                    22:7c:b0:47:2a:06:48:2f:9e:9b:3d:1b:de:bc:f5:
                    82:57:98:b7:dd:f6:66:8d:5e:3a:eb:77:e9:a5:86:
                    54:75:dd:89:be:36:00:75:ec:eb:44:c5:41:86:3e:
                    21:fd:98:d9:36:03:f1:b1:eb:a1:ba:60:fa:d9:d1:
                    a6:21:97:c4:44:4e:09:40:c4:5f:11:37:e4:a2:b7:
                    fb:eb:8b:08:2f:3d:a9:1f:f3:f2:00:4f:d8:2e:73:
                    ee:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:08:6C:27:56:80:55:AD:AF:E2:6D:58:D2:6B:BA:6F:72:CF:EA:CE
            X509v3 Authority Key Identifier:
                keyid:95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d0:f6:b2:4b:60:df:a9:27:c4:03:55:b4:2a:85:5b:2b:c6:
         f0:86:a7:6c:6f:78:fc:68:f8:c1:d6:b1:f6:9f:ef:9e:45:82:
         48:99:2b:6f:03:57:c4:da:dc:66:d6:a0:c6:c7:79:5a:54:fa:
         11:c6:1f:3f:bc:77:33:a5:6a:a2:f7:7a:e1:b9:ce:c4:8b:10:
         4c:b1:a3:d7:6f:62:11:44:34:20:b4:cb:cf:16:64:15:26:99:
         f1:92:4a:fd:3c:a9:a8:5a:ac:85:bb:50:ad:b4:09:2f:70:1a:
         d9:0d:96:33:50:9a:a2:57:f4:0f:fe:a5:6a:ad:4b:51:20:10:
         d8:46:84:ca:d7:d8:fb:41:0d:df:ff:ad:b6:28:e5:c4:c4:1e:
         bf:b4:08:e5:35:3e:24:57:5f:2f:87:8a:00:ec:d6:88:c2:58:
         3d:83:de:6b:55:97:66:82:4f:6d:9b:1f:54:b0:f0:24:ef:50:
         97:6a:d7:39:3d:68:e4:5f:93:58:20:4b:27:ec:bb:29:1f:4e:
         ff:83:af:3a:46:03:28:62:0b:0d:6a:6e:ab:b9:0c:1a:68:fb:
         93:fc:c9:0a:a8:de:e4:67:b5:be:d0:24:d3:0d:c1:e1:76:ad:
         de:d8:6c:f6:c3:64:33:51:ee:33:67:2d:79:e5:d6:5b:f5:59:
         e5:68:6b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:45:35 2026 by rpki-client