Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
File:                     nbJYwXCyMilNhj9g0twBI82q54k.mft (raw, json)
Hash identifier:          ZrCPuKFB+kpaxwl5Pl8qGVyK9UEazdvqLf9ZdV3QDaA=
Subject key identifier:   F8:9D:46:EC:31:BA:B4:73:92:C2:23:BA:32:DA:05:35:47:BC:8C:46
Authority key identifier: 9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
Certificate issuer:       /CN=A91B2EDE/serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
Manifest number:          B4
Signing time:             Wed 25 Mar 2026 06:20:26 +0000
Manifest this update:     Wed 25 Mar 2026 06:20:25 +0000
Manifest next update:     Wed 01 Apr 2026 06:20:25 +0000
Files and hashes:         1: nbJYwXCyMilNhj9g0twBI82q54k.crl (hash: oVxRv2ApDQVZO6TOOCBHUNmcDMyYanQ3FGdGM2R5J04=)
                          2: 2A28A576FDA111F08BC1F4B75F6F56BC.roa (hash: PGiX+wx067z9cwIv48GLAtfIhUtJveteXDe5HO2XbGw=)
                          3: 2B1F9250FDA111F08BC1F4B75F6F56BC.roa (hash: nnqJ8G7VjssukS+0G1GxoQBw1mxaaAbrJ8au5Om0Jj4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
                          rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2EDE, serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
        Validity
            Not Before: Mar 25 06:20:25 2026 GMT
            Not After : Apr  1 06:20:25 2026 GMT
        Subject: CN=69c37ea9-cad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:df:b0:db:65:a2:7f:9b:db:4e:4b:54:f2:81:
                    56:ce:6e:28:d1:e7:c8:05:74:4d:ae:f1:17:52:00:
                    fe:ef:8f:c8:50:d9:3f:0d:be:8a:7b:66:6a:6f:73:
                    9c:27:0f:28:9a:00:2c:8c:cc:35:e0:7a:0c:21:14:
                    16:e4:8e:27:55:00:0e:7d:84:cf:a2:04:bc:29:9b:
                    5e:9e:b2:c5:4a:06:2b:43:df:82:dc:32:1b:0c:68:
                    96:e8:82:d9:b7:22:6d:74:9a:7a:67:a3:10:b5:a0:
                    3c:f2:2a:27:63:af:eb:41:de:ad:ce:fd:70:29:96:
                    73:12:3c:3a:07:46:9d:53:d5:c7:9e:5f:09:26:26:
                    66:e8:f3:65:5f:2f:60:dd:3a:a7:63:72:04:ac:15:
                    0b:47:1c:7a:11:52:cd:be:b2:f1:9a:9a:ea:9f:39:
                    e7:fd:e5:2f:05:ad:8a:dc:e1:25:91:de:13:7a:2e:
                    bd:49:86:05:77:f2:09:83:66:17:32:3e:08:60:0a:
                    96:e0:b5:09:a1:a2:52:ef:20:09:9d:b4:3f:06:d8:
                    7a:94:21:52:ec:6b:5b:bc:b2:a1:be:ba:32:a1:18:
                    f0:be:14:bd:9f:29:4c:1a:04:c6:d0:06:d2:4c:2b:
                    b8:85:fb:78:2e:4d:74:96:4f:0b:c3:aa:10:48:52:
                    1a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9D:46:EC:31:BA:B4:73:92:C2:23:BA:32:DA:05:35:47:BC:8C:46
            X509v3 Authority Key Identifier:
                keyid:9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:a4:f9:76:4b:63:65:07:90:e1:06:80:96:83:6e:67:aa:cd:
         f1:ba:63:36:6d:cf:15:90:1d:0c:86:5e:bb:16:a6:d3:ed:6f:
         03:d5:06:a3:b6:7b:ef:b4:2a:6b:d0:4d:29:66:a9:c3:39:c1:
         7a:1c:1f:89:a3:87:53:41:df:08:6c:c0:07:81:a8:63:8d:ce:
         05:d7:55:83:6b:e9:d0:5a:c2:65:38:a5:41:63:c9:00:c0:e2:
         ab:4c:3f:ed:ca:d4:4f:82:9d:f8:e3:34:b3:75:82:9e:20:84:
         0d:6e:c2:ac:55:c6:d3:23:27:20:20:e5:b5:4a:e0:03:6d:3d:
         8f:71:39:0d:8d:b1:c7:87:b1:4e:76:ba:7d:0c:7f:ca:fa:a3:
         74:c6:aa:ca:80:91:50:ef:48:9d:a9:a8:0b:b8:42:4e:36:f6:
         90:02:75:6e:e6:49:00:1d:87:96:00:94:57:a7:57:ea:83:17:
         b7:23:39:8f:6e:86:2e:94:88:36:0e:ab:c6:17:9f:38:d7:d7:
         b4:02:e5:20:79:25:15:8a:4f:b4:19:7c:48:49:72:54:38:c1:
         49:47:c2:0d:6e:8f:b3:4f:2a:90:d5:7f:d1:0e:92:a5:64:13:
         84:54:df:ab:f3:c8:be:98:52:7b:af:12:f4:e2:d0:52:47:f0:
         5b:b9:6f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:09:13 2026 by rpki-client