Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
File:                     sunaXrOJa-_A39Wn6zDbKTFLuhI.mft (raw, json)
Hash identifier:          im1h0RJuc+s7KcrhkJWVbYpWKBp1RS5hXiAPi9HNlUc=
Subject key identifier:   47:2C:44:0F:6E:C0:56:09:E3:7D:A4:E4:E5:EE:3B:09:18:C8:2B:2B
Authority key identifier: B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12
Certificate issuer:       /CN=A91BA941/serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12
Certificate serial:       010F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
Manifest number:          0105
Signing time:             Wed 25 Mar 2026 05:19:42 +0000
Manifest this update:     Wed 25 Mar 2026 05:19:42 +0000
Manifest next update:     Wed 01 Apr 2026 05:19:42 +0000
Files and hashes:         1: sunaXrOJa-_A39Wn6zDbKTFLuhI.crl (hash: uMOK1/Tjp4otsjUK9Ued+dZuzUsVBOYd3X0/ehIg4kA=)
                          2: 083E1314A0A111EF84620260C4F9AE02.roa (hash: mSukAUMe5Lr3KzZ1M4lKG8ZcBcOq+sE7NJI6nlUpRwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl
                          rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA941, serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12
        Validity
            Not Before: Mar 25 05:19:42 2026 GMT
            Not After : Apr  1 05:19:42 2026 GMT
        Subject: CN=69c3706e-919d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8f:b2:3b:fc:a9:a1:0d:29:8e:0f:16:ea:81:
                    b6:75:f0:5d:25:2d:39:8a:5b:16:62:43:fc:e5:af:
                    0a:fc:ae:e0:eb:d2:10:ab:6b:d8:e0:f4:e6:f0:43:
                    d5:cf:04:48:48:b6:6a:78:37:b8:50:91:38:e1:9b:
                    e1:fe:60:3d:8b:fd:e7:e7:ce:11:ce:81:e2:2f:91:
                    6c:b2:e6:cd:5e:3b:a6:31:ad:a9:64:1e:9e:38:66:
                    ab:1e:c2:67:64:e5:d8:48:3a:fa:71:a3:42:f2:af:
                    93:a8:f1:c5:bc:c2:4d:6e:cb:1d:2f:88:7f:64:53:
                    c6:50:f8:98:07:53:40:4a:8e:06:ed:2d:6b:8e:3f:
                    a5:15:85:35:10:fc:fb:80:e6:3f:f1:58:29:9c:ac:
                    e5:ab:53:55:18:f8:4d:29:da:ac:7a:a6:aa:9b:84:
                    54:b6:19:2d:c0:68:7e:a7:d1:3a:ac:9a:cf:fd:bc:
                    78:8e:76:28:ea:fa:4f:df:00:1b:0c:15:de:9c:83:
                    b8:8d:56:75:3e:28:96:b3:0f:ed:84:7d:f1:86:39:
                    7d:b2:64:57:84:57:f3:d8:52:09:3e:ff:5b:71:0c:
                    8c:10:21:86:44:74:59:8b:f7:30:c2:7e:b3:ac:fb:
                    b1:a6:af:e2:c2:6b:b1:d0:98:2c:94:09:69:c4:0d:
                    c3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2C:44:0F:6E:C0:56:09:E3:7D:A4:E4:E5:EE:3B:09:18:C8:2B:2B
            X509v3 Authority Key Identifier:
                keyid:B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:8a:82:e4:92:28:cc:73:20:d5:58:24:7d:20:ae:78:29:95:
         6f:1f:14:ab:54:ec:04:a6:12:42:23:b0:7d:81:c8:b5:41:c9:
         29:e7:01:7b:e0:68:75:11:f8:8e:e1:be:8e:21:f0:d9:a7:07:
         2f:ae:b2:7e:68:4c:8a:f6:75:69:21:cf:b1:74:14:3e:d9:6d:
         b3:b8:cb:b1:ed:0b:01:4f:9c:93:91:e2:be:4e:21:ce:cb:3b:
         aa:ba:de:25:e2:d0:8b:6e:53:0b:93:01:60:cb:6a:5d:43:65:
         15:8b:0e:e8:ea:0e:36:de:d2:9c:c1:a1:b2:0f:e6:d2:b8:88:
         c0:15:f0:01:fd:d6:df:e4:05:4f:0d:ac:23:a4:10:35:e8:86:
         38:a2:21:e9:45:76:c3:2a:ca:7e:3a:f4:e0:95:1a:3d:cd:e8:
         b3:84:66:4a:96:e1:13:83:91:96:99:a9:2f:4e:5f:df:9a:98:
         bc:3e:76:8c:7c:cc:dd:24:3d:b6:b9:62:10:1f:e6:cd:8c:b6:
         46:86:b9:5f:cb:96:b4:8a:f4:f3:b8:98:ff:ec:4c:b4:49:53:
         20:85:a8:f1:17:f0:a3:46:fd:10:48:50:e5:86:82:3a:59:87:
         ed:18:f3:82:3d:95:2e:c6:2d:02:e3:a8:9b:6d:b1:29:9e:1d:
         8d:eb:2c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:30:14 2026 by rpki-client