Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.mft
File:                     eL6CWbUIjzG0AQuD3na6VM6Xrjg.mft (raw, json)
Hash identifier:          Ie7MigXi+nSwOaeE0u6atMuxhab/3T8a5YXLgTBmLSs=
Subject key identifier:   A5:25:F3:FF:3B:82:0E:C5:A7:00:15:A3:80:0A:18:B0:71:08:94:86
Authority key identifier: 78:BE:82:59:B5:08:8F:31:B4:01:0B:83:DE:76:BA:54:CE:97:AE:38
Certificate issuer:       /CN=A91BCB09/serialNumber=78BE8259B5088F31B4010B83DE76BA54CE97AE38
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL6CWbUIjzG0AQuD3na6VM6Xrjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.mft
Manifest number:          25
Signing time:             Wed 25 Mar 2026 07:59:46 +0000
Manifest this update:     Wed 25 Mar 2026 07:59:45 +0000
Manifest next update:     Wed 01 Apr 2026 07:59:45 +0000
Files and hashes:         1: eL6CWbUIjzG0AQuD3na6VM6Xrjg.crl (hash: StmZWUt5kKrBzqumfPyrBZk3nIMpsO2rw0KFsgwy17c=)
                          2: 5BC28CFEF50011F09A5618CE516F56BC.roa (hash: tFyYjAt8LxXxOLUQN63OQgyZ+oQbtNLtHD7NVqig9oM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.crl
                          rsync://rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL6CWbUIjzG0AQuD3na6VM6Xrjg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCB09, serialNumber=78BE8259B5088F31B4010B83DE76BA54CE97AE38
        Validity
            Not Before: Mar 25 07:59:45 2026 GMT
            Not After : Apr  1 07:59:45 2026 GMT
        Subject: CN=69c395f2-b9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7a:41:aa:89:46:60:85:d1:bb:da:69:f8:c2:
                    d6:c6:9b:52:79:c5:b2:a5:7f:a0:4b:e3:72:03:7a:
                    41:de:6a:3a:17:0b:ce:6a:5b:89:52:66:57:57:70:
                    9a:27:be:23:20:ec:d4:1e:69:b3:87:29:bd:7c:90:
                    94:e0:f1:e1:40:ef:02:4a:bf:16:3b:32:b8:68:a0:
                    2e:95:8b:0a:df:3a:34:68:c2:f4:eb:41:c6:fb:13:
                    c7:ac:6f:8d:4b:88:c6:0e:6e:dc:f0:b4:e9:d3:d0:
                    bb:a9:5f:4a:8c:fe:c9:66:32:df:f6:4c:74:cf:76:
                    67:81:19:10:cf:a1:08:d1:fd:29:57:1e:60:43:9f:
                    a2:50:64:d8:82:a9:a1:6c:28:b2:9d:50:e1:46:60:
                    9d:0a:92:df:7d:d2:ec:62:2c:29:19:2d:3e:a2:f9:
                    ee:67:48:15:39:08:f2:63:1d:96:9b:86:f5:52:a4:
                    cf:5d:12:ed:09:43:15:22:16:17:39:78:29:4d:6d:
                    51:87:87:b5:5f:52:cb:f0:ba:bf:b6:2d:d6:37:ed:
                    67:5d:32:86:aa:4f:aa:1b:f3:1a:99:12:50:c5:17:
                    03:36:55:61:a2:a9:63:43:0c:ea:54:c9:3e:65:e2:
                    c5:2d:4a:88:6d:64:1f:3f:5e:eb:d3:f7:33:34:79:
                    f6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:25:F3:FF:3B:82:0E:C5:A7:00:15:A3:80:0A:18:B0:71:08:94:86
            X509v3 Authority Key Identifier:
                keyid:78:BE:82:59:B5:08:8F:31:B4:01:0B:83:DE:76:BA:54:CE:97:AE:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL6CWbUIjzG0AQuD3na6VM6Xrjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:aa:05:03:bb:32:31:8f:80:b7:96:57:29:20:2e:2c:94:ca:
         41:5f:a5:58:40:fd:78:29:a1:11:10:9d:3b:bd:5d:55:b8:0f:
         88:d9:32:cb:ad:dd:4e:06:ac:43:98:c8:a2:a3:89:a6:d5:ff:
         3d:9a:3f:be:a8:8f:ae:10:18:6e:70:74:2b:70:c6:0f:08:82:
         c1:59:cd:9c:8d:0d:58:48:fe:fe:f4:b5:df:54:b4:55:97:bf:
         00:04:c5:26:96:a6:68:86:7e:56:1f:a1:2e:75:5f:46:0e:0c:
         d4:be:f9:a4:c3:7e:75:5f:fe:1d:71:0d:b3:79:ee:e7:e2:e3:
         b0:29:d9:48:55:01:68:89:fd:00:b1:dd:26:cb:b8:ba:bd:7d:
         3b:96:db:de:48:b5:65:c6:a0:8a:45:d1:23:b2:1b:fe:f2:a2:
         c7:d3:9f:61:66:9b:6c:b5:94:12:49:39:43:85:7c:c5:2f:ab:
         d1:27:19:da:15:60:26:04:a0:4f:bc:fb:f6:41:ef:08:69:3f:
         eb:de:9b:aa:1a:2e:7c:c7:43:2d:ab:63:29:4c:45:43:73:12:
         8c:4f:98:67:5d:54:36:74:ce:8a:03:9c:54:1d:e1:5b:a6:fa:
         2b:27:57:41:fe:04:a7:f0:32:c1:07:05:ae:45:d3:bd:4c:fb:
         9a:9d:cd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:16 2026 by rpki-client