Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
File:                     T90ck6E8upG0-LfyxlGPSLoXC60.mft (raw, json)
Hash identifier:          lkP9UIn9Tgum2GwQXWgrcNKBJjVPTVUoaJZ6/UnhPQs=
Subject key identifier:   E4:DF:7C:1B:72:21:70:58:1C:7B:33:F0:72:9F:0C:5A:2C:B2:55:37
Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD
Certificate issuer:       /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD
Certificate serial:       092E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
Manifest number:          091E
Signing time:             Tue 24 Mar 2026 20:01:51 +0000
Manifest this update:     Tue 24 Mar 2026 20:01:50 +0000
Manifest next update:     Tue 31 Mar 2026 20:01:50 +0000
Files and hashes:         1: T90ck6E8upG0-LfyxlGPSLoXC60.crl (hash: X0DZsArqiZnTqD/WqrqZKmKPMT1nhaP3btxk7rZoVUg=)
                          2: F61502A4C0F511EA854EE45FC4F9AE02.roa (hash: 1ObA6vWWZfou57i0NqJQ0Vk2OQ0dMJY2iFn6E5+aKSY=)
                          3: DB175658E9D711EBA3549B09C4F9AE02.roa (hash: Pa82efULVCkq/fPGo97ybHbZdFtjjIOE9/jdMV1NbUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl
                          rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2350 (0x92e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC6DD, serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD
        Validity
            Not Before: Mar 24 20:01:50 2026 GMT
            Not After : Mar 31 20:01:50 2026 GMT
        Subject: CN=69c2edaf-1852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3a:0f:67:85:85:3c:09:f5:79:79:8b:7b:41:
                    49:31:b5:76:35:9b:4f:f7:97:b6:3f:5b:e6:83:11:
                    c1:2f:ec:64:9a:f8:aa:49:f7:f5:77:4d:d2:b5:9e:
                    7f:d8:43:1f:50:29:6e:f0:a6:81:0f:4b:ad:ad:b6:
                    2e:8e:06:ae:6f:54:7f:3c:bd:be:eb:82:a3:ef:8e:
                    e4:9d:f4:5b:7c:8b:60:1b:7a:e0:ff:47:85:4a:ce:
                    e3:af:0a:a7:53:31:93:0a:28:fa:e4:64:95:84:62:
                    a2:67:f9:b6:f6:7e:d6:3c:78:97:74:ce:9f:69:08:
                    fe:bb:e7:a4:0a:94:e0:63:43:0d:19:ff:28:8d:a9:
                    4c:45:1c:61:86:15:84:f8:6b:49:99:f4:ec:8c:1f:
                    78:16:5f:56:ec:ef:be:9a:f4:32:5a:49:ef:0c:c6:
                    b2:4f:08:e7:54:88:f0:e5:10:e2:d4:3b:9a:45:3f:
                    de:7c:9d:fa:7f:88:06:ec:65:4b:b8:75:a8:01:2e:
                    5e:9e:4a:2b:14:44:8d:37:bb:b9:49:e9:de:d1:30:
                    7d:bc:d1:a1:df:22:95:3c:ea:18:8e:20:49:8a:ab:
                    6a:b8:8e:cb:85:17:e5:3f:e3:d3:e8:51:99:bb:6e:
                    48:d7:25:e8:1c:85:f2:0b:8c:3a:46:1b:6d:38:39:
                    ba:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DF:7C:1B:72:21:70:58:1C:7B:33:F0:72:9F:0C:5A:2C:B2:55:37
            X509v3 Authority Key Identifier:
                keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:4a:ad:ef:db:31:49:32:ce:36:df:93:7a:c6:8e:f2:db:4a:
         04:4b:9d:6b:dd:2c:cd:6c:9c:02:b1:3f:fc:57:7b:fd:55:5c:
         3a:56:87:45:9e:56:06:1a:c4:4d:8f:8d:5a:fa:8f:fa:72:be:
         f5:dc:3c:36:86:e2:3b:07:09:25:fe:08:44:aa:08:23:97:21:
         b4:c3:30:a4:eb:a5:d5:92:67:01:be:96:f5:c0:e8:31:c4:1b:
         ae:4f:9a:6f:fd:c7:9a:64:f6:8d:55:e6:f6:d3:76:37:f2:9d:
         44:56:76:7f:95:06:3b:65:e0:97:1b:75:70:2b:3a:c0:10:8f:
         44:eb:7a:49:22:a5:ab:2b:4a:06:ff:21:97:49:57:88:6c:1e:
         b6:72:31:96:a1:46:e4:e1:b7:34:96:37:60:26:2c:1b:34:dc:
         83:0f:bb:56:67:3e:dd:7b:3a:a9:42:40:d7:7b:0f:ef:87:a7:
         7e:d8:ca:98:fd:ae:ce:3d:42:3c:5f:1a:eb:2a:b4:74:c1:d8:
         14:a5:23:de:81:bd:03:7f:a4:d8:26:ff:ab:6b:e6:b3:6e:32:
         49:bc:d2:68:35:34:61:23:61:30:ab:bf:af:98:31:ed:15:e5:
         fe:10:dd:b8:77:29:76:43:1f:e6:1e:15:7b:a2:63:46:7a:bc:
         f3:7d:8b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:35 2026 by rpki-client