Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
File:                     9iXmzAOQJv9byda9xC2NHBir8zs.mft (raw, json)
Hash identifier:          wOJc6BdzqtuU4WPAQWtrZtFqAT4oVD/SY88MBI+utgg=
Subject key identifier:   7D:A3:0F:40:C4:B0:99:75:A3:0F:52:1A:9A:87:50:07:CF:4A:31:15
Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B
Certificate issuer:       /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B
Certificate serial:       01A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
Manifest number:          0176
Signing time:             Wed 25 Mar 2026 04:26:40 +0000
Manifest this update:     Wed 25 Mar 2026 04:26:39 +0000
Manifest next update:     Wed 01 Apr 2026 04:26:39 +0000
Files and hashes:         1: 9iXmzAOQJv9byda9xC2NHBir8zs.crl (hash: teN/Mbsmi+ygug1MI6o2bnr+H3X2nbPnkRLFO60/3EI=)
                          2: E16E7E38BB8211F0B31D1B65C4F9AE02.roa (hash: wCGfC4BD+WaSxmo3hc+r7hIlBChOqs70L8QHRte2kxE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl
                          rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B88CA, serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B
        Validity
            Not Before: Mar 25 04:26:39 2026 GMT
            Not After : Apr  1 04:26:39 2026 GMT
        Subject: CN=69c363ff-4484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:64:70:52:d0:2b:68:ce:f4:a0:3e:79:39:70:
                    bc:a1:1e:d8:5a:bd:54:be:0c:a2:35:58:7a:5c:3a:
                    b2:92:ae:56:41:e9:55:bc:11:2e:63:08:25:bc:dd:
                    44:8c:4c:b5:26:76:c2:7d:f9:6a:94:26:32:d1:7d:
                    88:de:0b:de:34:c6:dc:28:7f:a9:cc:fb:42:09:fc:
                    82:e0:8b:58:5b:be:e2:f8:ba:80:eb:30:97:33:93:
                    d3:8d:82:c0:81:d4:a7:8d:46:8d:3f:91:49:57:e4:
                    27:b5:07:62:8a:bc:fa:98:d2:a6:23:96:dc:db:26:
                    b9:bf:c8:fc:f9:2d:99:34:78:96:22:19:4e:06:50:
                    d6:a7:f1:45:1b:e9:e6:44:da:a1:3f:df:b1:66:0a:
                    89:a7:da:80:b4:88:b5:d4:5e:ae:22:1c:23:a7:4d:
                    6f:35:56:1d:fd:29:61:5f:c7:f6:27:5f:c6:20:2a:
                    1e:85:c2:c5:97:3e:2c:25:0d:ea:74:a1:3e:78:e7:
                    3f:92:16:86:f7:f4:39:8d:30:8f:0b:f9:ab:ef:9e:
                    60:af:e2:c4:be:68:ce:d4:1f:40:b9:64:b4:0b:8a:
                    80:3c:48:fd:cb:4e:26:f7:c9:6e:38:3b:7d:92:b6:
                    fd:00:81:73:37:56:dd:ea:81:b9:50:77:42:de:15:
                    8b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A3:0F:40:C4:B0:99:75:A3:0F:52:1A:9A:87:50:07:CF:4A:31:15
            X509v3 Authority Key Identifier:
                keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:63:c4:8b:68:e5:ad:f1:aa:7b:dd:08:d9:99:48:18:c0:65:
         49:c5:10:83:1f:c9:80:77:3a:f4:f0:6e:16:93:3f:bc:d5:98:
         9b:0f:69:51:30:ec:ad:c0:cb:8c:13:b0:e7:c9:ba:31:62:79:
         82:13:a9:d9:17:60:80:4c:36:2f:52:f9:bb:6b:db:9b:f8:86:
         d4:df:a2:04:bd:b7:17:f5:cc:26:10:49:09:0b:5b:1b:02:60:
         b3:29:6e:c2:27:74:ef:0e:ba:80:7d:ef:48:db:84:30:c3:a7:
         9e:d3:e5:7b:61:8a:53:b4:64:86:26:c6:6f:51:77:af:cb:ea:
         39:37:ef:53:11:d1:2b:1e:02:d7:33:1e:b7:3e:b8:c4:e4:8d:
         0e:76:0f:7d:f6:95:b4:2f:f9:65:da:7e:c6:33:b9:10:f7:cc:
         b1:4d:2c:6e:f3:bd:6e:96:f8:b7:da:00:36:65:e1:9c:9c:68:
         13:63:0f:96:6a:98:c0:9e:39:c6:55:bb:98:0a:68:ef:a9:85:
         16:d6:90:3c:30:27:63:5c:e1:5c:a0:54:0f:53:92:aa:03:77:
         7b:34:a3:f9:4d:61:31:0c:fe:29:8f:a9:c1:b0:5e:76:4b:9e:
         33:ef:b6:8d:dd:62:d1:41:f9:95:a9:ea:0f:29:dc:69:52:2c:
         1e:06:cf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:27:31 2026 by rpki-client