Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft
File:                     Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft (raw, json)
Hash identifier:          5skBvtcVRBiZzZeNCp5YF/CrV5pp2nvnThminK5uL3I=
Subject key identifier:   06:7B:54:8A:32:6C:1E:A4:0F:6F:FE:8C:34:92:C7:C0:9A:97:97:E5
Authority key identifier: 56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9
Certificate issuer:       /CN=A91BB246/serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft
Manifest number:          9B
Signing time:             Wed 25 Mar 2026 06:35:42 +0000
Manifest this update:     Wed 25 Mar 2026 06:35:41 +0000
Manifest next update:     Wed 01 Apr 2026 06:35:41 +0000
Files and hashes:         1: Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl (hash: CV3DTqV3tZY6LsdkbmjGEBb56auwCGIMcBzukz9a1oc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl
                          rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:35:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB246, serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9
        Validity
            Not Before: Mar 25 06:35:41 2026 GMT
            Not After : Apr  1 06:35:41 2026 GMT
        Subject: CN=69c3823e-991e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:46:a3:eb:e5:3a:44:4a:70:90:b3:22:21:1f:
                    6d:45:32:67:81:d7:87:1d:1a:41:10:de:e1:de:11:
                    98:40:f6:0e:34:9f:0b:32:13:54:72:1f:50:d8:51:
                    10:0b:98:40:cc:df:26:db:eb:34:f3:cb:ad:54:d1:
                    92:eb:f6:f8:12:1d:b7:f9:43:7d:f0:0e:1b:f1:29:
                    18:8f:69:e2:5a:1b:48:e5:4e:00:7a:b0:94:bc:46:
                    d2:e0:55:8a:8c:b5:2c:a2:fb:9a:9a:8f:20:35:73:
                    3d:8b:44:38:a2:99:fa:d8:a2:11:a0:4b:95:89:1f:
                    8f:aa:b9:4b:19:19:28:d1:02:95:31:e8:4b:8b:74:
                    2b:49:96:9f:6e:ed:9c:a2:9c:7f:25:3f:0c:5a:49:
                    dd:42:e4:25:6a:98:02:17:86:eb:b5:f1:32:d0:15:
                    88:5c:b9:89:90:01:ba:b7:c2:df:38:99:43:dc:3f:
                    1a:6c:b7:96:3a:0d:a4:e5:5b:66:8b:20:f0:22:5c:
                    02:f4:72:5e:29:cd:c8:34:2c:7e:26:31:23:1f:b6:
                    c2:02:0c:6b:96:e6:6a:a0:bd:90:9f:f0:42:c9:4c:
                    41:48:4d:1a:9a:d9:c6:15:c1:5c:61:61:4c:82:9b:
                    bd:ed:5a:4b:1f:12:7f:5e:e5:52:8a:1c:3c:fa:6b:
                    94:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7B:54:8A:32:6C:1E:A4:0F:6F:FE:8C:34:92:C7:C0:9A:97:97:E5
            X509v3 Authority Key Identifier:
                keyid:56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b5:35:75:c7:40:91:5c:1e:36:39:4f:ef:06:4f:2f:f7:b0:
         aa:01:83:b6:33:a7:e8:8e:67:43:6c:e1:d1:c7:5c:f0:38:04:
         25:7f:b1:df:74:0f:42:b8:59:28:7c:8c:23:86:e0:39:46:42:
         6e:e6:67:46:3e:28:07:a9:7e:72:e2:74:24:65:87:30:d7:36:
         ab:47:a3:fd:58:b9:70:6c:8d:31:97:b1:32:d3:ca:95:f2:26:
         f3:40:c5:23:7a:f6:c9:13:00:3a:c8:63:50:cc:5d:5e:e9:39:
         ab:ff:5d:f0:27:d3:4f:fe:3c:8f:00:9d:38:f6:b7:e2:2a:1b:
         fc:8e:c6:dd:a5:b2:38:2a:69:02:6a:c2:c3:cc:25:fa:5d:c9:
         70:93:d8:00:87:15:3b:15:f8:70:f0:6a:65:1b:c4:85:55:c6:
         2f:1b:31:04:1c:c3:6f:21:4b:ba:de:6b:20:3a:9a:d7:a5:35:
         d3:c2:79:7f:80:b0:39:27:c8:97:3b:eb:f3:d0:ea:64:e1:31:
         3d:bb:eb:90:47:7a:cb:ac:d1:32:96:10:0e:ec:27:9f:14:eb:
         37:5a:4d:a6:4f:f5:22:b2:45:82:a5:7e:29:44:ee:fc:58:24:
         71:c2:36:0e:4d:8e:ac:a6:24:c9:9d:a4:bd:ca:ae:d4:4f:9a:
         c6:ab:f1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:57 2026 by rpki-client