Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft
File:                     dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft (raw, json)
Hash identifier:          kzxD6QUey2XYgwJ0If3E9WiFHPl32V7cQMAV760fL2U=
Subject key identifier:   2A:F0:B4:A9:EB:58:A1:B1:EE:15:D8:DD:90:7D:A6:7B:B8:43:2A:B3
Authority key identifier: 76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F
Certificate issuer:       /CN=A91B7E17/serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F
Certificate serial:       06F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft
Manifest number:          06ED
Signing time:             Tue 24 Mar 2026 21:48:59 +0000
Manifest this update:     Tue 24 Mar 2026 21:48:58 +0000
Manifest next update:     Tue 31 Mar 2026 21:48:58 +0000
Files and hashes:         1: dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl (hash: vSPaCiCxxPx3JDR9UfgU7rNdXTUSeUJG8BswQ93usvU=)
                          2: 87F6FDDC880911EB96D8882DC4F9AE02.roa (hash: nya9dv0nfdtT56zwG/wSYGtmj0pyX/94TyasLPF8tJU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl
                          rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1781 (0x6f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7E17, serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F
        Validity
            Not Before: Mar 24 21:48:58 2026 GMT
            Not After : Mar 31 21:48:58 2026 GMT
        Subject: CN=69c306cb-556e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:01:e9:ca:54:23:97:29:96:e9:be:b1:b1:a7:
                    8c:67:db:7d:e7:71:ec:b9:23:3a:fa:b9:0b:38:5b:
                    f4:bf:71:0f:58:2e:94:bd:b3:b5:14:e6:95:30:44:
                    20:34:23:ce:2d:dd:d0:90:b0:50:d2:5e:ab:5e:20:
                    fe:c4:79:9b:6a:dc:2c:11:99:a2:49:f0:57:f8:1c:
                    f8:71:cc:f6:9c:f8:12:65:6a:ea:4d:d0:ed:bf:27:
                    36:54:da:50:6d:b6:b2:8d:b0:af:dc:c3:fd:bd:b1:
                    72:83:85:05:a4:1d:a6:c5:2d:50:f2:99:d8:1f:c4:
                    0f:58:79:f2:59:48:96:3c:6e:af:69:34:d5:c5:2c:
                    cc:f6:51:f1:2e:27:e2:d3:6c:2f:4c:90:49:db:e3:
                    37:05:ff:b5:82:d4:53:ba:1f:e4:96:74:32:c1:af:
                    6e:0e:51:4a:92:7d:25:74:00:89:46:21:c0:3c:4a:
                    2c:a6:fe:94:b0:c0:6b:cf:2f:b5:58:97:2f:05:f2:
                    cc:97:33:71:29:8c:90:fa:96:d2:d3:ec:a2:41:77:
                    00:a4:d6:6a:27:fc:9f:b8:60:68:23:b8:a3:ea:73:
                    2d:56:07:a9:0f:6c:49:3f:71:0b:7d:42:08:cd:0d:
                    67:40:ec:1c:53:f4:bb:ad:86:ff:ae:8d:04:ea:f0:
                    de:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F0:B4:A9:EB:58:A1:B1:EE:15:D8:DD:90:7D:A6:7B:B8:43:2A:B3
            X509v3 Authority Key Identifier:
                keyid:76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:9b:ca:03:19:60:f8:8b:65:3b:78:43:18:ff:dd:e2:b7:02:
         b1:7e:fb:13:35:4f:99:47:43:04:9f:29:be:ba:af:b2:29:17:
         d1:84:9d:86:ec:0f:66:f3:f3:37:7f:41:c1:51:0d:ce:8e:72:
         99:dd:cc:14:03:91:f8:b6:8f:a8:ce:a1:9c:e8:4a:62:9f:bc:
         6a:05:45:2e:ef:65:01:b3:fb:a1:6f:1b:14:ce:dc:6e:3e:4b:
         8f:da:1f:d7:4e:c5:9b:5e:5d:24:ec:a6:22:ec:72:f0:30:9b:
         3c:c8:1d:62:58:72:d1:33:2c:25:8f:63:52:c0:3d:85:95:6f:
         b6:73:6c:c5:58:5f:24:bd:5a:b0:14:9a:2a:6b:47:ff:ac:30:
         bc:67:49:6a:2b:4c:b2:48:47:f1:6f:22:75:24:8e:81:b3:93:
         c7:a3:ef:c6:ae:ef:f9:71:75:47:e2:af:a5:db:ca:4f:ec:55:
         95:6e:0a:d6:07:88:f1:3c:d6:3d:dd:e8:b1:b5:0e:e9:18:41:
         54:ff:49:9c:8b:97:dc:c4:98:fa:b6:04:ca:6f:b2:ad:1f:2d:
         29:75:bb:89:48:d5:90:11:6e:6f:d9:6b:fe:36:02:4e:38:04:
         53:91:aa:bf:56:d4:a4:7f:5b:61:20:7b:da:e0:dc:5a:44:d4:
         96:7a:c7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:00 2026 by rpki-client