Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
File:                     _i41K0L3TxDVdoNTA6LpeOHEN7Y.mft (raw, json)
Hash identifier:          6vOecDa8tsipdRGJZ2MwYHIrYCF13xKqa8goegB8B6k=
Subject key identifier:   E1:2D:08:26:95:CC:3A:C8:7D:91:FA:86:79:1B:48:B6:72:FF:3B:2A
Authority key identifier: FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6
Certificate issuer:       /CN=A91B5CC0/serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6
Certificate serial:       0298
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
Manifest number:          0286
Signing time:             Wed 25 Mar 2026 01:15:05 +0000
Manifest this update:     Wed 25 Mar 2026 01:15:04 +0000
Manifest next update:     Wed 01 Apr 2026 01:15:04 +0000
Files and hashes:         1: _i41K0L3TxDVdoNTA6LpeOHEN7Y.crl (hash: O0Jibs/farVQjXGBs8owZH1A88Llmi16ux3PWvYDstw=)
                          2: FA13BAAC504611ED9AE40711C4F9AE02.roa (hash: NXGbpmoMOzAZwcgSz2AYwCb8kwzGpslvQ3JE0B3JbOg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5CC0, serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6
        Validity
            Not Before: Mar 25 01:15:04 2026 GMT
            Not After : Apr  1 01:15:04 2026 GMT
        Subject: CN=69c33719-0a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bc:a1:42:b8:74:63:84:60:70:48:21:93:8b:
                    c5:ec:0a:2f:b5:f3:46:3e:9a:d4:d6:08:db:b2:db:
                    2d:a5:54:53:96:3e:aa:10:a5:4c:04:21:1a:df:d6:
                    aa:c9:e7:ea:9b:9c:ab:26:9d:62:4e:3b:9a:a4:55:
                    63:87:03:8a:57:36:4f:09:df:69:51:d3:07:ff:0b:
                    71:6f:7d:cf:98:1a:1a:cd:d7:50:32:b6:1d:76:93:
                    7d:9d:b4:66:29:87:bf:df:93:94:a4:e7:b8:a4:e5:
                    f8:06:36:c4:3a:fd:9e:fb:d3:43:92:21:9d:48:28:
                    e0:c1:60:59:31:dd:55:7c:ce:41:db:6f:18:87:28:
                    bc:b7:9e:67:7e:22:9f:cb:87:69:d1:20:ee:87:55:
                    7c:61:af:f6:1c:d7:00:a0:84:2c:ec:46:88:63:f8:
                    64:06:4e:b2:a1:d2:f3:25:43:59:3c:70:37:09:23:
                    81:74:cf:c4:01:4a:64:35:45:29:fa:bc:51:93:b7:
                    15:47:5e:72:11:7c:2c:1c:35:72:18:87:7b:6a:a9:
                    66:3d:7a:40:00:f7:f1:e4:d4:ab:c2:12:77:37:01:
                    62:09:76:65:59:a2:ef:49:9f:43:f1:51:b5:7e:00:
                    5d:2c:42:9e:6a:21:c9:68:91:ec:0e:14:41:14:c5:
                    99:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2D:08:26:95:CC:3A:C8:7D:91:FA:86:79:1B:48:B6:72:FF:3B:2A
            X509v3 Authority Key Identifier:
                keyid:FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b9:5c:c3:13:9f:7c:1b:9d:f2:c4:12:14:25:f2:e2:5d:6e:
         d7:81:a4:c8:50:45:b6:8e:d2:e4:2d:ad:8f:3c:7d:ac:81:d1:
         7c:7f:a8:66:b9:c2:60:6d:9a:da:59:48:ca:c5:70:7a:37:d7:
         41:fe:e0:76:cb:1c:62:2f:9d:2e:84:08:8b:02:3c:07:9b:1e:
         66:c2:8a:ac:1d:b4:15:42:12:47:18:42:cb:59:f6:4c:c8:1d:
         80:2f:d9:7e:b6:d9:32:de:a7:74:5d:59:dc:5f:2d:52:aa:8d:
         40:3c:e9:3f:4c:41:5c:01:d8:60:53:b2:90:fc:dc:d4:27:26:
         29:aa:41:fd:7f:4a:e1:76:12:8e:cb:0b:7d:b4:de:a9:fe:be:
         cf:82:7d:35:fc:48:74:15:2b:a3:dd:81:fd:69:c2:99:b1:a7:
         29:08:fe:67:48:29:ff:94:2b:77:e3:42:d9:45:62:65:81:89:
         9c:2c:29:01:92:b4:c5:9f:a4:ea:66:6c:d9:53:ce:0b:5a:b5:
         98:89:95:d8:72:e2:2f:46:4e:88:b3:05:5e:09:2c:bb:ee:26:
         b6:46:fa:c3:1f:7b:60:7e:ae:ba:e1:39:e2:32:16:f5:87:39:
         8b:85:cc:13:e3:c9:d3:9b:8a:c9:f8:6b:e3:73:35:17:8b:0a:
         ee:b2:fa:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:07 2026 by rpki-client