Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
File:                     N-rtpCQtUJYrh7SiB6xMNEszBgw.mft (raw, json)
Hash identifier:          4DHmC2X1tqPIoNaxwzJnaQzTH9sZW6JvqkcLeK2oGms=
Subject key identifier:   6B:34:E0:70:05:44:88:44:19:E4:BD:38:32:FD:2E:52:38:DB:48:DB
Authority key identifier: 37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
Certificate issuer:       /CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Certificate serial:       0EBA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
Manifest number:          0E7A
Signing time:             Tue 24 Mar 2026 17:39:21 +0000
Manifest this update:     Tue 24 Mar 2026 17:39:20 +0000
Manifest next update:     Tue 31 Mar 2026 17:39:20 +0000
Files and hashes:         1: N-rtpCQtUJYrh7SiB6xMNEszBgw.crl (hash: h/dG0NP4Ym3HsMmZ61xeR2gbUDjyt0zvf9Xox2xnKDo=)
                          2: C65A7B2E2DA511EDABDD0D5AC4F9AE02.roa (hash: prjlduag9q7iGZXJQm/t+NRzRUjYkFDArWSbpx4Ssl8=)
                          3: 571B65E63DB411EEAA68F342C4F9AE02.roa (hash: 2vE/3eamjo4xLkI8OTKapYL2giVJwz1id6mtmN0Ipmw=)
                          4: DF7FD23EE48B11F0B28D676E446F56BC.roa (hash: MvAZpBBfzrvXSC5HnLnuI4m+JdyG6kQTIbtPzd4cNds=)
                          5: 4B058994B18D11EC886B063CC4F9AE02.roa (hash: O6JD/8mrX0Hhe3Xtn4VIawqUBP2ElhNrC07aJjh916Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
                          rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3770 (0xeba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0741, serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
        Validity
            Not Before: Mar 24 17:39:20 2026 GMT
            Not After : Mar 31 17:39:20 2026 GMT
        Subject: CN=69c2cc48-82ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:46:35:96:9a:a0:43:ee:15:71:37:bb:77:1c:
                    90:48:d5:2d:fa:b7:1e:36:e5:3d:bc:17:ba:a5:30:
                    c1:43:15:ae:ec:8d:34:79:6a:fb:ab:ef:88:25:0e:
                    82:20:1e:33:d2:89:8d:59:05:a3:12:8f:42:e2:a9:
                    17:01:b5:bf:87:c8:20:9a:86:68:08:0d:44:24:51:
                    4b:34:3f:a8:04:b1:f9:29:9e:76:41:44:b4:af:19:
                    6d:00:b5:83:5d:4b:aa:13:b3:58:ba:9d:ed:2e:6b:
                    e4:27:d2:d4:e6:3e:82:b1:94:6b:ac:78:e3:02:65:
                    e5:86:33:44:98:99:bd:9f:78:65:59:31:28:67:1b:
                    f4:f5:06:c0:39:05:a7:bb:1e:65:76:b8:d5:f2:68:
                    dd:58:82:a4:fe:50:34:7d:b6:45:c5:e7:12:95:b6:
                    64:47:ab:7e:8b:fd:c9:46:7b:c9:fe:02:51:39:4e:
                    35:1d:52:bd:0e:ec:68:11:58:fa:4a:59:d4:ca:e0:
                    5d:5f:5a:9f:06:5f:08:fe:cb:17:3d:aa:5d:f3:f4:
                    ec:53:6c:42:d0:01:36:af:c5:e2:49:9f:92:9c:e7:
                    3f:21:d2:62:8f:54:09:99:86:bb:a4:96:0d:55:84:
                    56:ee:53:c6:be:44:0e:d7:7c:82:50:9a:2d:e6:b3:
                    1f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:34:E0:70:05:44:88:44:19:E4:BD:38:32:FD:2E:52:38:DB:48:DB
            X509v3 Authority Key Identifier:
                keyid:37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:8f:19:1a:54:71:fc:92:eb:25:1d:c5:9c:37:7d:a8:46:47:
         fa:6b:fd:62:4f:87:5a:95:4e:54:8e:d0:05:74:36:b9:19:18:
         bc:86:9b:ff:fb:8d:3e:1d:16:2b:ac:e2:46:70:4e:b1:c1:59:
         af:59:69:47:ba:fe:45:8e:f0:82:a7:0d:f0:03:65:d4:a5:0e:
         2f:fa:a8:18:53:2a:8f:05:dd:f3:b9:9b:ed:2d:d7:0f:13:b1:
         05:e5:a7:f2:c2:1d:11:59:d8:f2:0c:32:4a:d9:2e:91:3a:7e:
         d7:e8:74:62:bb:dd:dc:c8:6c:8f:9b:ef:6f:ab:46:4b:ac:6f:
         9c:b1:8d:f9:07:77:aa:26:27:33:39:36:c2:57:e0:8f:7b:0e:
         dc:27:e9:16:dc:ff:d2:ea:c4:61:a4:15:fb:92:7a:2c:b0:4a:
         cd:78:8f:80:fe:8a:7d:d5:d8:26:ba:e9:29:ba:9a:90:2e:3d:
         f4:8e:9b:57:91:e6:bc:f6:6b:1a:35:ab:8a:f9:e4:af:04:33:
         a1:e5:84:8f:b8:ad:f1:f3:73:7a:6c:c1:ab:4e:a2:91:c1:a4:
         b6:89:18:ea:ab:33:5e:15:a8:81:27:15:df:01:16:3c:b4:74:
         6a:4c:6d:c2:ec:5c:a4:23:de:18:78:23:66:5d:31:02:1a:b7:
         ab:ac:ca:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:51:23 2026 by rpki-client