Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
File:                     FYuWZk-xya7us9KHB_h3_iN7Atw.mft (raw, json)
Hash identifier:          TGcA2mGNqjtgR8cLoFaAxKpWz07fhcKE9tTumRFREcs=
Subject key identifier:   91:0A:62:74:5B:6C:28:6F:1E:15:C3:32:32:C2:0C:E0:C2:AE:DC:63
Authority key identifier: 15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC
Certificate issuer:       /CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
Certificate serial:       02BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
Manifest number:          02A3
Signing time:             Wed 25 Mar 2026 01:10:23 +0000
Manifest this update:     Wed 25 Mar 2026 01:10:22 +0000
Manifest next update:     Wed 01 Apr 2026 01:10:22 +0000
Files and hashes:         1: FYuWZk-xya7us9KHB_h3_iN7Atw.crl (hash: tfoSbvt7kp++EBhG7gteaCLM1JzzUc/Zgx1x2CSH2MA=)
                          2: 378FB0D25B9211EEB8E7453DC4F9AE02.roa (hash: 9JCyRgRs6j+igw+gtUtxDvzUhWBvN1Zyyhk+gm4t+MI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl
                          rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699 (0x2bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C08EE, serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
        Validity
            Not Before: Mar 25 01:10:22 2026 GMT
            Not After : Apr  1 01:10:22 2026 GMT
        Subject: CN=69c335ff-c5a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:e0:72:87:e9:c6:d6:8f:be:c3:58:e6:50:
                    6b:b7:09:d5:89:bb:43:56:c9:4d:43:fc:34:55:13:
                    78:9b:18:0d:9d:de:c6:bc:71:5b:53:4f:87:d7:ee:
                    a7:7e:89:78:0c:b7:fa:54:a8:c1:47:64:8c:c9:c1:
                    0d:5b:84:3d:0b:77:c7:82:4d:70:cb:94:79:3f:0d:
                    e4:27:d7:1e:46:45:5e:e7:20:ca:a3:9c:04:b7:89:
                    d4:f3:60:6c:57:96:2e:c6:e6:f7:70:14:8e:1e:71:
                    bc:bc:56:1d:cf:2b:e7:3e:87:e9:0f:3a:36:3a:cd:
                    5d:ed:9c:b7:c2:0a:ed:11:09:18:6a:e2:3e:bb:2f:
                    70:3b:4c:0f:4e:79:5f:73:13:d6:26:a0:94:40:2f:
                    7e:f8:fe:ba:21:e7:90:4b:b7:b6:9d:ce:6a:81:6e:
                    b1:00:15:75:11:45:e6:3c:a8:51:57:db:ae:96:fb:
                    2f:4c:b4:67:fc:f2:bc:f2:32:74:08:ae:3f:ae:06:
                    b0:17:d2:4d:9a:88:20:0d:f7:be:b1:94:75:03:23:
                    db:43:10:93:5b:06:ba:3d:70:23:84:2a:3c:92:b8:
                    c4:c8:a5:79:66:41:1b:03:1d:08:e9:a8:04:8b:b1:
                    5c:21:d1:d1:5f:47:ac:00:ee:49:3a:52:d7:b6:6e:
                    12:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0A:62:74:5B:6C:28:6F:1E:15:C3:32:32:C2:0C:E0:C2:AE:DC:63
            X509v3 Authority Key Identifier:
                keyid:15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:38:82:1d:f8:24:2f:7a:2d:56:8a:04:08:82:ce:99:f8:b4:
         d8:32:2b:a9:ed:cf:41:f3:07:47:cb:11:70:06:98:2d:39:04:
         68:7c:55:4b:39:fc:7e:a7:aa:3a:ef:8d:67:a8:3a:35:49:0d:
         64:12:c5:d5:8c:77:f7:92:95:72:48:f8:1f:d1:7e:49:35:50:
         ba:8c:cd:a2:30:2e:6a:20:8d:62:34:2c:a2:57:d6:a7:e0:96:
         6c:f4:28:86:f8:35:05:27:7b:ca:02:21:f8:75:1c:0b:cd:34:
         54:44:b0:2e:63:dc:d8:11:6d:1b:8d:45:6a:ec:27:2d:c9:a5:
         f3:da:af:6a:73:f2:04:cc:e9:65:4c:16:7b:7a:4e:f3:56:fc:
         57:53:b3:a3:f7:bf:12:fe:8c:c6:8a:b2:2e:d0:06:26:85:13:
         45:1c:6b:e4:68:36:b5:f8:5e:c7:5f:a5:7e:8b:15:2f:81:47:
         e6:39:19:97:b2:05:d1:0c:a3:d9:0c:bc:a3:e3:62:2e:0b:8a:
         00:9d:1b:e7:35:e8:f1:67:b9:9a:fc:11:51:eb:16:df:43:07:
         68:0c:bf:56:eb:32:95:98:5e:35:1f:8a:d5:13:b8:2d:75:ef:
         bf:7a:ae:08:57:bb:8a:9c:0f:43:4d:ef:0f:41:ba:88:e0:2f:
         ab:c5:d6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:06 2026 by rpki-client