Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
File:                     -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json)
Hash identifier:          7wj+023UnwFDlXRaLG7JM2AbBqaHJbA8JsCrkxJQDcU=
Subject key identifier:   1A:93:F7:08:50:D9:60:05:E0:3A:28:38:8A:DA:24:5D:8F:EF:E7:DD
Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38
Certificate issuer:       /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
Certificate serial:       0148
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
Manifest number:          0127
Signing time:             Fri 27 Mar 2026 05:12:00 +0000
Manifest this update:     Fri 27 Mar 2026 05:11:59 +0000
Manifest next update:     Fri 03 Apr 2026 05:11:59 +0000
Files and hashes:         1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: Op7sl+5/g/bRzsIjmfn+gYEV3D5rMF/rgExp2lMHkLw=)
                          2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: QHT2EqJHyPujaDEriJMd/9h9fPZLETh+MJuliPGlg9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl
                          rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 05:11:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
        Validity
            Not Before: Mar 27 05:11:59 2026 GMT
            Not After : Apr  3 05:11:59 2026 GMT
        Subject: CN=69c611a0-5bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3a:b0:c2:67:a8:17:94:ba:d8:1f:ac:ac:41:
                    2a:30:40:91:b9:fc:c0:08:31:bd:52:2f:fb:95:51:
                    90:3d:68:41:9e:31:54:d3:c2:8b:19:9b:77:c5:7b:
                    38:1e:08:49:6a:66:a8:28:9c:2d:14:a3:2b:da:6c:
                    a7:f2:4a:e0:9e:35:f6:97:fc:96:7b:20:0a:51:4d:
                    4e:49:fd:8a:4b:f4:27:b0:4f:05:64:db:8e:54:8c:
                    f5:4f:58:f0:44:cf:5d:aa:5b:e8:91:16:01:93:29:
                    9e:a1:ab:4a:77:4c:8a:23:aa:e8:c3:c1:6e:93:b6:
                    df:70:fa:66:78:35:e3:5e:03:32:a2:1d:37:9f:b6:
                    0e:56:6f:ed:dc:96:27:d6:86:a6:ec:ec:a5:e5:03:
                    10:b5:1d:23:3e:dd:2a:6f:12:91:c3:7c:dc:69:88:
                    f6:bb:ec:82:e4:ec:9f:c3:cd:66:85:a4:83:35:c9:
                    4c:37:03:87:3c:0a:74:f4:f7:9d:ba:cf:91:9c:7f:
                    b0:34:81:7a:31:ac:9a:31:87:6f:ab:50:a0:e1:c2:
                    b4:d5:aa:46:8d:78:01:f7:79:b7:a8:17:0c:b3:0b:
                    f8:f7:2e:cf:c4:9e:ee:3e:13:62:85:92:ae:76:af:
                    6f:8f:74:54:8f:4c:e0:7f:f4:6f:bf:ff:33:c9:58:
                    42:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:93:F7:08:50:D9:60:05:E0:3A:28:38:8A:DA:24:5D:8F:EF:E7:DD
            X509v3 Authority Key Identifier:
                keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:95:58:de:3e:ef:05:41:b7:8d:4b:77:54:d6:30:9d:87:11:
         79:09:4b:90:e2:5d:82:f3:ef:2e:96:14:4d:d8:57:4a:d5:c4:
         bc:e3:dc:d3:04:d4:72:f2:a5:14:41:2f:1f:d9:c7:d5:0f:8b:
         83:d3:a1:63:4e:00:2f:33:1c:8f:c7:c7:07:19:7c:50:a7:37:
         1f:4d:7e:38:fa:21:43:db:8c:b8:67:51:a8:9b:cf:f8:b7:ab:
         74:21:eb:67:6d:b8:48:6a:6c:3b:36:fa:99:3e:c9:ba:7d:2f:
         e3:64:e2:b8:81:db:d6:97:35:76:ce:f1:da:41:2a:1c:8a:b6:
         4d:d2:54:56:38:dd:54:39:d1:2b:a6:b1:24:f5:00:df:7e:de:
         f6:a2:be:a3:25:79:78:8a:97:c1:f1:f4:7a:85:03:93:18:fc:
         10:f2:8f:19:19:cd:7d:d6:61:45:05:ec:e6:00:8a:99:b1:57:
         32:19:51:8b:44:44:5e:e5:be:5f:81:8c:4c:fe:6b:5b:1c:93:
         fb:a4:31:20:28:a1:1f:50:67:b2:6d:03:52:dc:40:ce:5d:27:
         e8:8f:e1:a8:c9:fb:08:2b:8e:ed:ac:18:d9:d5:03:02:7c:6d:
         60:a2:3c:3a:71:43:bd:e9:bb:21:1d:bc:30:19:d9:2f:5a:3f:
         76:e7:62:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:10:01 2026 by rpki-client