Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
File:                     a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft (raw, json)
Hash identifier:          wgsLjQ8WFFl/YIs2YJD0BHFYQoRzLxXZ3QeCCDykIs8=
Subject key identifier:   23:EF:EF:51:C6:C4:9C:1E:6A:31:D4:42:AB:A5:C1:83:7D:5D:79:E4
Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
Certificate issuer:       /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Certificate serial:       0D82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
Manifest number:          0D47
Signing time:             Tue 24 Mar 2026 17:55:41 +0000
Manifest this update:     Tue 24 Mar 2026 17:55:40 +0000
Manifest next update:     Tue 31 Mar 2026 17:55:40 +0000
Files and hashes:         1: a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl (hash: TJHFYBbJzNkY5VO+YP5fGhhAbfRvCwGKpLEZn5vlILU=)
                          2: 0D036EB680BC11EBAF2A1C0EC4F9AE02.roa (hash: K6WOyiHvvhQ2yYoD0ohmtBrVGKSiJZncskkyUn8X98o=)
                          3: 7545D7688D6C11F0AB7BFE70C4F9AE02.roa (hash: zyHK6GN9WSyGoWDluo7AVH6SrUtiuqWiDlrfnmpJRyo=)
                          4: 7617F5408D6C11F0AB7BFE70C4F9AE02.roa (hash: nIKfzAgzUb2dGOIfIQvN5e0XYQnfrd0mIjum9+sbKoo=)
                          5: 584733B48D6C11F09980DA5EC4F9AE02.roa (hash: Frbh9w7E8qMbGRFFRMtBoKbLFRxK1RbRIkZTszSHs8k=)
                          6: F8C3F402870A11F0A015612EC4F9AE02.roa (hash: ZicVZdpAu/EiTz6PgI0d8YWIQYHihLcbNzD+voQ25wU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl
                          rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3458 (0xd82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
        Validity
            Not Before: Mar 24 17:55:40 2026 GMT
            Not After : Mar 31 17:55:40 2026 GMT
        Subject: CN=69c2d01c-9437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3a:6e:88:d1:b8:a4:7c:69:c2:4c:25:c7:f2:
                    13:d1:d3:91:61:8b:50:07:d6:16:ca:6a:60:e7:e2:
                    85:62:19:cb:02:f4:2d:c6:51:ee:30:88:b5:66:28:
                    de:47:f5:92:42:d0:91:f9:db:1a:ea:43:b9:89:44:
                    99:44:71:c0:40:0c:fa:8a:45:5c:d0:44:f2:40:d4:
                    fe:1d:41:03:a7:7a:8e:08:f2:ad:82:5d:5d:48:69:
                    95:2a:9d:30:63:9a:4c:ad:3a:cc:6f:82:c6:83:b4:
                    d2:25:18:68:f8:8f:d8:a3:ec:0f:91:8f:6d:0f:84:
                    aa:4f:9a:0d:f6:d3:13:ae:37:cb:13:62:2d:70:f5:
                    01:d5:da:6d:18:b4:bb:bd:60:43:ac:ae:b2:a9:38:
                    b9:47:e4:bd:6d:d9:e2:07:d1:f4:d1:e1:47:8a:3f:
                    06:f9:ee:67:db:17:02:f5:27:de:2a:c5:08:3e:3e:
                    72:b1:93:a9:54:b8:a4:1c:30:1b:af:f8:29:d5:ea:
                    48:42:05:9b:6c:9e:6b:00:85:15:6d:d8:90:ce:22:
                    2a:92:98:a7:af:4a:7b:83:bc:9f:b5:57:10:fd:14:
                    71:1d:61:94:7b:36:e8:f1:b5:41:88:59:de:b5:03:
                    c1:33:05:6b:9c:2e:c4:fb:75:54:ab:2f:d8:82:95:
                    4b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EF:EF:51:C6:C4:9C:1E:6A:31:D4:42:AB:A5:C1:83:7D:5D:79:E4
            X509v3 Authority Key Identifier:
                keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:01:47:ec:21:75:4d:1f:b4:ac:da:8d:fb:2a:a7:9f:85:75:
         8f:83:a6:a8:7d:24:9c:d5:7d:89:5b:f2:f0:4f:b7:09:99:44:
         12:7d:26:e3:7b:57:09:11:2e:37:07:98:fc:45:56:87:59:a1:
         d9:43:83:92:52:0c:0c:28:05:78:37:fb:ad:9d:81:14:f3:1b:
         0d:d4:6a:fe:18:46:4b:59:85:cc:0b:d5:2d:35:c5:58:51:57:
         13:3f:85:50:84:7a:4d:c8:19:dc:d0:f0:55:4b:31:50:ac:a1:
         73:6d:60:ca:12:db:ce:1b:a0:74:c6:ce:fa:14:5c:17:a3:db:
         06:49:d6:67:51:79:d1:f5:42:cf:72:90:8e:84:23:17:2e:10:
         b5:53:84:b6:9c:61:4c:3a:63:33:62:af:6c:8f:53:03:a3:18:
         a4:cd:61:41:55:5f:4b:16:b2:82:64:98:e5:fa:f6:82:05:84:
         86:19:e7:b7:7a:c3:28:56:fc:ce:65:b4:8a:63:91:f9:09:4d:
         cc:ff:34:fc:d6:39:fc:ce:21:37:71:d0:7a:fc:85:0f:41:4e:
         55:13:f3:68:8d:75:6f:5f:75:4b:4d:f9:81:ce:f4:6c:b7:00:
         d7:1d:7f:bb:41:80:bb:9c:d4:04:f6:cc:c9:5f:84:70:09:56:
         ae:89:5a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:14 2026 by rpki-client