Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
File:                     m1wSv5mrKIql16PWPDWI906bJtE.mft (raw, json)
Hash identifier:          JUEUV/Wr27Smgj2flJSpJsAuetvOM2LfNUiEuSFCByM=
Subject key identifier:   C1:50:D7:29:D0:6C:D0:16:05:B5:A1:41:A5:AB:B1:32:2B:98:D1:09
Authority key identifier: 9B:5C:12:BF:99:AB:28:8A:A5:D7:A3:D6:3C:35:88:F7:4E:9B:26:D1
Certificate issuer:       /CN=A91BB246/serialNumber=9B5C12BF99AB288AA5D7A3D63C3588F74E9B26D1
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
Manifest number:          9D
Signing time:             Wed 25 Mar 2026 06:35:39 +0000
Manifest this update:     Wed 25 Mar 2026 06:35:39 +0000
Manifest next update:     Wed 01 Apr 2026 06:35:39 +0000
Files and hashes:         1: m1wSv5mrKIql16PWPDWI906bJtE.crl (hash: Fjt6MLFyBZysCAPVCUs1tF4rSAhWAJVw+82mz1xFp5o=)
                          2: 898E9EA83C0E11F093CFD060C4F9AE02.roa (hash: hIbDeET3/by6fmctG3leWRRbgYMUPeaZ9EUswNqsz3k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.crl
                          rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB246, serialNumber=9B5C12BF99AB288AA5D7A3D63C3588F74E9B26D1
        Validity
            Not Before: Mar 25 06:35:39 2026 GMT
            Not After : Apr  1 06:35:39 2026 GMT
        Subject: CN=69c3823b-3b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8d:bf:8a:f7:b9:b5:1e:72:1c:30:4a:36:4e:
                    5e:ae:f2:bb:a9:57:18:e2:27:3c:d8:13:11:b3:7e:
                    cc:20:36:8b:30:7d:76:04:63:59:91:bb:9b:31:a6:
                    94:f1:6c:23:cc:d6:23:98:04:fc:b0:ef:54:23:06:
                    ae:1c:4d:0a:0d:ef:18:10:b7:b8:47:65:05:08:ee:
                    7d:6e:b9:66:a9:40:33:15:97:60:1c:71:16:44:83:
                    90:dc:0f:f3:ba:4a:f8:65:b4:4f:00:03:98:20:2c:
                    33:79:7c:ab:b3:d0:82:95:b4:d2:0f:98:a6:9c:c0:
                    db:ba:c8:88:fb:17:fa:cc:6f:14:36:0f:57:d1:6a:
                    f8:d5:f1:bb:50:9d:ff:b3:10:1b:aa:55:5a:93:da:
                    b5:e1:a0:8b:d1:d5:36:7e:d7:b7:8d:07:90:b6:7d:
                    29:b1:82:2a:92:65:aa:e2:a2:17:ec:ce:b3:af:21:
                    d9:e0:ee:63:98:66:de:d3:2e:dd:f2:6d:59:2e:24:
                    ec:e9:22:d7:d3:b5:bd:fc:1d:1f:66:44:eb:b0:aa:
                    d7:d6:5e:d8:05:74:d0:5a:d5:58:ca:ad:a5:cb:54:
                    42:a9:6f:3d:24:a6:1c:03:98:aa:37:b5:30:7d:a3:
                    6c:0b:6b:08:4c:07:c8:b9:5b:7f:da:47:92:60:c0:
                    88:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:50:D7:29:D0:6C:D0:16:05:B5:A1:41:A5:AB:B1:32:2B:98:D1:09
            X509v3 Authority Key Identifier:
                keyid:9B:5C:12:BF:99:AB:28:8A:A5:D7:A3:D6:3C:35:88:F7:4E:9B:26:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e5:c1:35:6e:8e:56:b3:7f:b3:9d:e9:97:40:03:28:ab:be:
         a0:0a:56:4f:be:f0:d1:ac:79:07:e1:ef:36:93:94:44:db:56:
         9e:a0:1a:7e:d0:c7:1f:4d:a4:97:0b:61:12:77:28:ac:89:31:
         ce:b7:3e:c3:b2:5c:78:2f:32:dd:f1:fa:d3:ac:39:75:78:f5:
         29:a7:58:95:45:0c:59:22:62:cf:a3:31:06:d1:f2:b2:aa:ef:
         a9:2a:8a:0d:72:4b:5f:8c:e0:5c:86:b8:53:d0:19:4a:f2:75:
         17:69:ac:49:31:1c:06:b2:5d:41:f7:21:d8:5c:ec:58:cd:59:
         e9:68:4f:fa:36:9c:ac:06:f4:49:f3:8f:6f:17:89:2a:18:ec:
         c2:98:37:c5:85:0e:19:d7:78:b6:cc:f6:60:41:4d:d8:41:b0:
         33:f8:35:35:4c:08:52:be:e1:1e:17:24:13:a2:3b:88:6b:3e:
         5f:23:10:4a:7a:79:0a:a4:4d:d9:a3:59:f5:8c:26:3c:6b:4a:
         9f:a6:58:1a:ae:2f:5d:a6:36:ad:38:96:df:19:cc:56:ff:ec:
         0e:64:92:e2:31:3e:ba:f0:3b:84:c8:2c:b8:a8:73:43:e4:4d:
         c5:08:48:00:f1:f5:fc:b6:c9:59:ec:fb:8d:c0:bb:ad:73:4b:
         2f:9f:3f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:50:08 2026 by rpki-client