Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
File:                     O6JVjKXxoDfZaW9WeugTZ8buNeY.mft (raw, json)
Hash identifier:          uWZxR4nVH0cwE1ca13IrWoYnVR51cMa2bn4ybxt4uyg=
Subject key identifier:   5E:E1:0D:BC:40:F1:8E:A0:52:54:EA:7D:05:3D:D2:A3:61:A2:19:08
Authority key identifier: 3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6
Certificate issuer:       /CN=A91C022C/serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
Manifest number:          E2
Signing time:             Wed 25 Mar 2026 05:46:09 +0000
Manifest this update:     Wed 25 Mar 2026 05:46:09 +0000
Manifest next update:     Wed 01 Apr 2026 05:46:09 +0000
Files and hashes:         1: O6JVjKXxoDfZaW9WeugTZ8buNeY.crl (hash: QoBRp7P7yEr9tDuoCRr65+6/gT/5UNmyPiYeQCNxObY=)
                          2: A6C2BD2CDC3D11F0BD1F8D86696F56BC.roa (hash: kF6cYr4gPkZuSsvaTwk6W2D01uZagSmV+qItraclSQg=)
                          3: 7229FDDCDC3D11F08C062F6F696F56BC.roa (hash: ds7dDCTSCzhkVPcLD8GUON/3AW1ttpCQoU0Ff89LGuU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl
                          rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C022C, serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
        Validity
            Not Before: Mar 25 05:46:09 2026 GMT
            Not After : Apr  1 05:46:09 2026 GMT
        Subject: CN=69c376a1-4aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:90:68:50:89:db:6f:6a:34:c2:28:be:5a:55:
                    c6:1a:c6:e1:9b:a8:6b:4d:d0:21:b3:52:46:e6:d7:
                    34:d0:32:74:b2:75:f5:bf:d1:3c:0a:06:01:6c:15:
                    e0:fa:75:af:b9:91:c6:9c:d0:ea:f1:14:c0:92:34:
                    9e:4b:85:af:bc:fe:89:69:9b:2f:0c:4a:a5:2c:92:
                    a2:85:ff:f3:ed:7c:ba:05:d7:ac:17:8a:b6:fc:bb:
                    1e:d4:d7:a8:96:8f:95:01:60:ae:95:2e:c8:47:dd:
                    5a:7f:d0:4e:2a:4d:fb:f5:a6:7a:31:81:3a:20:1b:
                    e6:ff:3b:8f:8b:1b:bc:d2:b9:53:d7:a4:43:f9:90:
                    53:0f:b1:ed:44:37:c7:88:dc:c5:0f:aa:7b:93:37:
                    ee:74:63:f6:ac:5a:c8:69:28:e9:04:42:d0:8d:35:
                    2b:91:4b:da:b7:b1:98:69:3c:bd:6a:cf:e0:b6:ae:
                    35:43:73:de:dc:f7:5a:15:fb:e3:e5:1d:84:a0:97:
                    2f:bf:c0:50:9f:ca:1a:73:35:dc:3b:ad:53:d1:ab:
                    69:e0:64:68:10:a8:88:2e:64:e6:7e:96:75:24:32:
                    94:f7:8b:6e:65:f7:21:be:1f:69:4c:a1:1f:af:c8:
                    a5:0f:c8:84:18:54:ae:26:6f:a2:22:d4:39:ca:ac:
                    59:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E1:0D:BC:40:F1:8E:A0:52:54:EA:7D:05:3D:D2:A3:61:A2:19:08
            X509v3 Authority Key Identifier:
                keyid:3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:35:f1:80:88:dd:0d:01:31:45:3f:6a:3b:44:c0:9f:f4:ed:
         6d:ec:ba:b9:60:f2:07:24:b1:a9:6e:e6:0f:fb:ac:8f:00:b6:
         68:ce:7c:c3:4f:9a:39:00:14:99:9b:05:47:19:5e:3e:52:b1:
         1d:fa:99:39:98:03:26:94:3c:88:f8:f1:69:cb:8c:9e:fd:a0:
         ec:64:3c:91:48:ac:1f:fc:21:0c:3e:72:4b:a9:f7:3a:1a:09:
         9e:cd:87:56:1e:11:fd:f2:49:87:89:27:87:7c:d4:59:e2:00:
         81:50:13:9d:98:00:98:0e:89:56:93:9e:20:d2:dc:4e:4a:cf:
         f7:35:a3:b3:45:de:b2:a5:62:ea:25:75:1f:16:83:a0:63:24:
         b2:19:67:d4:a9:46:97:4d:73:53:e2:38:a9:28:bc:24:1d:d2:
         18:f8:f2:d9:c2:08:ec:3f:af:d7:86:6e:d5:0a:32:2c:67:9c:
         15:b7:38:e2:47:d9:ad:36:5c:72:23:05:28:b7:bb:68:ee:39:
         97:95:0b:2e:36:66:dd:79:93:d0:b0:bd:1d:72:6c:de:8a:0a:
         76:36:54:6d:6e:7c:b5:29:09:26:c2:1b:5d:e3:04:46:7a:96:
         57:f0:10:21:9e:d2:c3:ca:74:b5:26:e2:a4:c0:32:a4:ad:5a:
         47:8a:4e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:23 2026 by rpki-client