Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft
File:                     9MT8daUGjJJYmWQTrre3ORUC8J4.mft (raw, json)
Hash identifier:          2lp1kzxWUiNFF0D7zydckyfgXPVUa0OO/ykMMeDLWPM=
Subject key identifier:   01:56:ED:D3:30:84:93:7D:19:46:29:9A:74:A5:8D:33:4C:51:F5:D9
Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E
Certificate issuer:       /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E
Certificate serial:       027B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft
Manifest number:          0275
Signing time:             Wed 25 Mar 2026 01:21:15 +0000
Manifest this update:     Wed 25 Mar 2026 01:21:15 +0000
Manifest next update:     Wed 01 Apr 2026 01:21:15 +0000
Files and hashes:         1: 9MT8daUGjJJYmWQTrre3ORUC8J4.crl (hash: aDryQZxy8Oc2OZZQWnB66xHdkSOS9rvVvreO0W/AYrA=)
                          2: 5026F90264B211ED88A2A380C4F9AE02.roa (hash: TY+42nSG6nPIUiuSiCcpnQzJo+Ss4QVY3rFCGRIL9ek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl
                          rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD8C2, serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E
        Validity
            Not Before: Mar 25 01:21:15 2026 GMT
            Not After : Apr  1 01:21:15 2026 GMT
        Subject: CN=69c3388b-2a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:0a:b4:c7:bc:68:36:7c:9f:be:3b:a0:5e:
                    78:73:b8:91:96:bf:e9:7c:a0:f1:91:c0:b0:f5:e1:
                    55:78:1e:28:c0:94:41:4d:9e:e2:79:30:1a:2b:9f:
                    b1:d4:65:87:37:89:af:52:6d:0f:f4:18:0b:cb:84:
                    62:4b:13:c5:65:d3:6a:ef:d1:cf:ff:98:a1:16:07:
                    90:c0:49:8b:33:8f:c6:1d:9b:99:10:55:4b:9a:9e:
                    6d:8c:55:5d:d6:5a:4b:8f:02:fe:93:6a:5e:9f:ac:
                    7f:33:8f:b7:6d:94:51:67:1f:1c:88:5a:bb:59:15:
                    0b:34:ed:0d:91:cd:00:7a:54:86:12:d5:9b:f8:f8:
                    69:18:68:3d:61:a2:19:04:b1:0c:1a:76:9f:a2:c7:
                    1e:4e:9e:2b:8d:45:a7:b8:a1:b7:d6:13:36:49:4b:
                    d6:9d:c1:9c:6c:4d:e0:8e:49:9a:8e:02:6d:bc:ee:
                    59:f6:cc:38:82:80:c5:36:3f:48:17:20:b3:30:b6:
                    6a:b0:aa:9b:a4:77:d1:1f:56:fa:c6:eb:8d:b1:f7:
                    79:72:6b:e9:15:b5:8a:1a:dc:d7:f4:00:95:09:9e:
                    cf:0f:22:4c:8e:65:00:59:5e:01:53:cd:0e:7f:b8:
                    8d:04:50:9b:f0:72:44:37:d3:9f:de:8f:f3:1e:d7:
                    7f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:56:ED:D3:30:84:93:7D:19:46:29:9A:74:A5:8D:33:4C:51:F5:D9
            X509v3 Authority Key Identifier:
                keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e7:6d:33:20:1a:19:fc:18:93:07:69:8d:f9:fc:e7:b7:11:
         1a:f4:9f:6e:6d:9f:db:7f:55:bc:8d:5d:ab:1a:79:f7:92:58:
         7c:e6:32:a3:85:e8:b2:30:47:cf:36:5f:5a:68:1c:73:53:84:
         cd:d6:35:24:6c:58:1b:30:b1:0b:c0:b0:53:cf:60:bb:25:9c:
         a7:10:67:fb:ca:43:d0:7d:74:a5:83:9d:c3:f3:0d:32:4b:8e:
         e0:4b:bb:4e:66:10:ff:87:db:31:8f:4b:22:cf:70:e2:a9:f6:
         98:2a:f3:1a:02:6d:6f:64:fc:0b:5a:37:4f:03:83:7e:f7:ec:
         54:37:f8:fc:9a:96:5d:97:bb:3a:b4:41:f0:ab:14:0d:a1:d9:
         57:18:4f:29:26:0c:67:6e:59:d6:7b:2b:64:d0:35:86:b4:9e:
         13:68:7c:46:6a:c5:44:28:11:72:60:4c:de:c4:cd:e4:97:89:
         d4:9f:8c:90:98:90:e2:65:eb:e7:e2:20:33:cb:ea:13:8f:21:
         3f:1e:4c:a4:22:d3:a1:c0:46:11:c0:16:25:54:56:19:96:a0:
         97:93:db:39:88:66:f6:37:91:9e:8a:80:ee:df:00:74:d6:f9:
         2c:bd:a5:60:77:76:29:c5:57:e0:a7:e8:60:bf:18:64:c5:3e:
         aa:e9:2f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:28:18 2026 by rpki-client