Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
File:                     0Ll9wB2J8jqAX75YYe43vwmcP_A.mft (raw, json)
Hash identifier:          DPkUOkQutX8Q44SBrJfBCP2SZmynmwwwCFOI72fQkLc=
Subject key identifier:   A7:55:1A:94:4B:D3:48:AE:D5:22:BB:67:0A:A9:DC:27:A6:C0:B4:D5
Authority key identifier: D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0
Certificate issuer:       /CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0
Certificate serial:       0CCC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
Manifest number:          0CB7
Signing time:             Tue 24 Mar 2026 18:19:44 +0000
Manifest this update:     Tue 24 Mar 2026 18:19:44 +0000
Manifest next update:     Tue 31 Mar 2026 18:19:44 +0000
Files and hashes:         1: 0Ll9wB2J8jqAX75YYe43vwmcP_A.crl (hash: KSx8j7c/cEIAsisBNnZJfhnf84mI/FmXZT/fJh+Rhho=)
                          2: 498ED6046FD011EDA007D478C4F9AE02.roa (hash: T2Q8vs9Q4/vusWLhI7xi4dCID8hH0Wl+tGrUP4Dj1Po=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl
                          rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3276 (0xccc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B62BF, serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0
        Validity
            Not Before: Mar 24 18:19:44 2026 GMT
            Not After : Mar 31 18:19:44 2026 GMT
        Subject: CN=69c2d5c0-3a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0a:cb:fa:1c:ee:75:9b:1e:2c:5b:20:24:7f:
                    a3:d5:43:61:06:d5:a2:ab:65:d3:41:e0:81:8a:82:
                    fc:b9:5a:45:c5:ee:fe:0a:cd:82:1d:f1:96:91:cf:
                    45:31:fe:3e:c0:eb:c5:7a:03:e4:03:78:18:5b:0f:
                    40:5f:42:97:0d:c8:3b:42:72:99:15:9f:d4:e6:4e:
                    3b:5e:35:90:cb:d8:1f:6d:29:6f:e3:2d:4f:07:d3:
                    78:c9:5e:a8:02:7b:63:41:8a:c5:48:a6:c5:5d:2c:
                    4f:8a:e0:8d:c8:7a:b0:d9:87:59:45:d1:b6:1c:16:
                    ee:a8:ba:d9:17:ed:98:e1:9a:5c:85:34:c5:c0:85:
                    b3:48:f0:88:dc:93:d9:58:de:45:4e:8c:7f:09:0b:
                    08:fc:52:ac:1e:b4:b3:2f:e3:77:6b:a1:2b:22:e2:
                    08:b7:10:d0:53:54:02:90:57:f6:6e:f0:f0:07:48:
                    53:1c:aa:47:98:1e:39:a2:65:13:4c:4b:24:63:e9:
                    60:eb:65:55:61:5b:fd:69:31:ba:62:67:be:9d:55:
                    13:f7:ea:4a:64:48:93:eb:2a:51:bf:3d:85:4e:a7:
                    1e:63:c9:5b:de:90:5c:2b:de:e8:99:1b:43:05:98:
                    c6:30:fb:60:bc:f2:e0:75:99:e3:98:61:06:fa:19:
                    88:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:55:1A:94:4B:D3:48:AE:D5:22:BB:67:0A:A9:DC:27:A6:C0:B4:D5
            X509v3 Authority Key Identifier:
                keyid:D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:68:f8:9a:97:91:95:34:16:e4:4e:bf:56:4f:99:90:9d:7e:
         8c:66:57:09:01:ce:30:a3:0f:e3:07:a9:06:51:55:f8:66:fa:
         99:4d:f3:13:02:ff:23:4d:b9:b5:36:9a:3f:7d:77:a5:36:e2:
         b4:2e:6e:9c:74:c2:9b:c8:d3:83:fb:4e:56:ad:7c:ea:2e:51:
         bd:e9:62:e1:c4:00:7e:31:c8:7f:51:4c:35:0e:4d:a3:32:17:
         8b:44:ac:b3:96:53:68:49:ff:cb:3c:37:11:9a:61:df:01:13:
         41:52:12:cd:a9:26:01:74:db:85:3b:dc:cb:b7:8f:69:01:96:
         63:8d:3a:4a:b7:f1:e1:8c:30:22:6e:6c:95:3f:c2:8a:a0:bf:
         ac:fd:79:f6:e8:ad:a8:66:38:41:14:d5:2a:68:e0:2d:28:6a:
         37:97:d7:cf:f8:2c:e3:36:5f:b5:29:ff:17:f3:86:30:f8:24:
         4b:c3:60:28:73:71:f3:75:c3:de:0b:f5:9d:40:a1:45:93:3c:
         24:8a:f2:dd:89:ee:bb:f4:15:4c:3b:e4:7c:3c:6a:69:b7:e1:
         d5:12:2f:ba:e5:a1:e7:5c:52:5f:63:2a:58:ea:77:be:13:21:
         ec:a4:cd:c5:6b:25:87:b0:98:42:4f:9f:33:e6:93:99:ba:a6:
         81:5b:ab:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:24:03 2026 by rpki-client