Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
File:                     D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json)
Hash identifier:          o+fVGNSuh6ovSQNVMM7E+f3nVEZY/E08EHGXwpkaD1E=
Subject key identifier:   09:E5:D0:34:30:6C:28:EA:0F:3B:65:02:94:27:E1:58:E2:30:B3:AF
Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23
Certificate issuer:       /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
Certificate serial:       0313
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
Manifest number:          030A
Signing time:             Wed 25 Mar 2026 00:52:32 +0000
Manifest this update:     Wed 25 Mar 2026 00:52:31 +0000
Manifest next update:     Wed 01 Apr 2026 00:52:31 +0000
Files and hashes:         1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: krIpMSv/6eVBGaGME6ML1+/kkFeIbmaWHCneSNOsE5c=)
                          2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: 9Ep6t3AG8CiRPlIf3Yv4Y03998NV9+HGAvq1KC0HiaM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl
                          rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:52:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 787 (0x313)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
        Validity
            Not Before: Mar 25 00:52:31 2026 GMT
            Not After : Apr  1 00:52:31 2026 GMT
        Subject: CN=69c331d0-8b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5a:83:d8:7a:8f:fc:e6:87:0b:22:01:ed:05:
                    29:d1:76:78:d3:e6:43:05:c3:6c:83:ee:f3:d5:0c:
                    b7:f7:b5:96:94:b1:80:20:49:59:10:5c:0a:25:aa:
                    1d:ef:3b:1b:c9:af:28:99:fa:06:6d:cd:18:c6:07:
                    d6:7f:28:f4:b2:cd:7b:d6:59:77:1e:35:dc:d1:4b:
                    5e:06:fd:49:f5:2c:2e:88:79:ec:95:e5:9d:71:10:
                    e8:e4:32:59:13:71:0e:d5:e0:fe:a9:5b:dc:3c:4a:
                    3a:29:67:7c:3b:08:6a:7e:3e:1d:54:f7:fa:b2:22:
                    c8:14:9c:24:c0:3f:9b:40:25:fe:7c:b2:17:bc:68:
                    21:14:ba:44:d0:5d:9c:91:d6:8e:89:dd:fd:1b:88:
                    4c:80:27:f4:d0:3e:9f:f0:1f:11:5d:73:59:2f:02:
                    f8:ae:c2:5a:b9:d6:8f:35:3a:24:0f:6c:88:a5:0f:
                    98:30:38:3b:51:99:5f:c0:28:fd:ef:45:86:36:de:
                    8a:cd:84:d1:2d:43:88:31:e1:bb:80:5d:83:da:b1:
                    48:7c:de:9f:14:5a:f8:1c:7b:54:1c:dd:72:44:05:
                    b1:49:b1:87:e2:57:86:6f:f9:5c:78:89:ad:a8:88:
                    6d:cd:d8:07:4b:7b:83:2c:f9:75:d6:6d:cb:4e:99:
                    48:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E5:D0:34:30:6C:28:EA:0F:3B:65:02:94:27:E1:58:E2:30:B3:AF
            X509v3 Authority Key Identifier:
                keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:32:b3:da:2b:b6:96:6b:2b:27:0b:c4:14:2f:93:15:ed:69:
         cc:90:8d:32:99:cd:aa:4f:56:fc:da:01:4d:14:b9:64:f9:5c:
         1b:4c:eb:81:14:92:9f:34:c2:88:ed:2e:e6:6d:d9:2b:24:52:
         59:99:d7:7e:d9:46:89:35:8d:2a:56:08:d1:bf:3a:36:31:3c:
         25:04:d0:dd:ed:db:ad:7c:54:45:2a:78:69:f7:cb:82:5a:f5:
         54:e4:6d:16:3e:b0:80:14:17:af:a9:2d:a3:a6:f5:08:2f:00:
         a9:60:20:ef:95:d4:fa:7f:75:a5:db:fd:d5:54:13:a0:1e:79:
         cc:2b:63:9e:06:13:73:0e:76:9b:8d:06:f6:5c:cb:63:c4:ff:
         e4:df:72:85:a2:e3:a8:8a:77:74:d9:8f:17:ba:1e:a9:dc:eb:
         8d:e6:85:15:39:f5:ec:8d:0d:3f:02:c6:5a:98:b6:d6:a9:6a:
         15:d6:b5:d4:39:cc:e1:c5:49:45:99:ee:3d:b5:b4:15:db:68:
         f9:fd:5a:58:50:1c:bb:d3:d2:a1:1a:f1:ee:dd:83:98:ca:55:
         e7:63:bb:55:9b:00:8c:83:b8:21:d9:0a:46:57:ff:e8:86:5a:
         83:c9:54:74:ea:f4:71:48:ad:1a:fd:f8:fa:41:94:51:1c:87:
         b1:24:8f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:31:57 2026 by rpki-client