Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
File:                     NPs4YMs0-seCIJnB-5kfzfY8hs0.mft (raw, json)
Hash identifier:          bi6wFW66k6ZAlIx+6jgwZK9I+Suy0ZZgW2pEZZYQ1lU=
Subject key identifier:   8D:D0:B7:56:95:B7:6B:B5:30:49:C1:71:8E:34:B6:83:13:7F:C7:88
Authority key identifier: 34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD
Certificate issuer:       /CN=A91C1710/serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD
Certificate serial:       0482
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
Manifest number:          090B
Signing time:             Tue 24 Mar 2026 23:45:10 +0000
Manifest this update:     Tue 24 Mar 2026 23:45:10 +0000
Manifest next update:     Tue 31 Mar 2026 23:45:10 +0000
Files and hashes:         1: NPs4YMs0-seCIJnB-5kfzfY8hs0.crl (hash: XSRvIIfgLa5FKekDyHvWDj6fAd7GXICMjJy+nO94rAQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl
                          rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:45:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1154 (0x482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1710, serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD
        Validity
            Not Before: Mar 24 23:45:10 2026 GMT
            Not After : Mar 31 23:45:10 2026 GMT
        Subject: CN=69c32206-2944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ec:aa:e5:ee:73:7c:a2:96:76:22:f4:63:72:
                    90:43:64:2d:cd:db:a3:c5:7b:25:ca:8a:22:c9:5a:
                    ad:97:b9:39:2c:2c:18:c9:40:75:8c:90:0c:2f:1e:
                    6b:6e:2e:1e:83:22:2c:d7:2e:a3:55:fb:3c:da:05:
                    ee:ea:9d:bf:70:ce:ce:a5:ba:c7:57:95:16:a2:0a:
                    bf:c9:fe:b2:ed:0d:b1:5c:24:3d:bd:5e:e6:e1:6c:
                    2d:b6:4e:73:e6:6c:00:03:71:75:10:45:85:11:cb:
                    00:77:e6:a8:ac:51:52:e1:53:c8:88:3e:69:4e:09:
                    7f:7b:c9:2e:ca:4d:ed:51:28:13:df:6a:26:44:db:
                    8a:5d:89:f0:60:89:aa:01:fc:f7:8b:3f:c6:d3:e4:
                    2e:ce:d8:6c:96:b2:8b:a8:4b:77:b0:73:03:59:66:
                    d9:6a:4a:00:d6:ec:76:f8:17:76:f9:f8:ef:15:d8:
                    25:27:7c:21:47:91:ba:c5:65:a8:bd:04:76:12:af:
                    99:62:9d:41:df:2d:2f:8c:c3:a9:2b:bc:17:6f:10:
                    26:61:fa:d1:ff:68:28:13:58:06:a1:8c:e0:8c:de:
                    66:e7:03:4e:ec:48:05:90:ae:77:9b:93:72:ca:5a:
                    98:00:32:7d:cf:14:13:e1:86:a0:60:28:53:4c:76:
                    ee:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D0:B7:56:95:B7:6B:B5:30:49:C1:71:8E:34:B6:83:13:7F:C7:88
            X509v3 Authority Key Identifier:
                keyid:34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e4:f8:5b:ce:94:1a:d6:6a:92:77:4c:b4:6e:d7:52:bf:cd:
         4b:8c:8f:67:bc:58:0d:c8:c0:32:ca:bf:f1:9a:25:b1:97:fa:
         17:3e:2e:75:45:70:98:8e:f7:06:70:6b:90:cc:ee:df:18:d6:
         76:ab:25:54:70:56:17:4d:fc:5a:5d:e0:51:3c:b7:fb:05:28:
         da:2c:66:9b:ec:74:20:9a:29:0b:86:c4:57:2e:a5:39:b7:1b:
         d7:16:f0:cc:9f:f2:00:aa:6d:eb:ee:08:2a:b1:e7:4a:78:9f:
         b8:ec:d1:d5:e4:99:76:39:86:3e:0c:03:ac:7c:c5:db:8b:b3:
         ed:8b:27:10:9d:b8:d6:d1:ea:0a:83:93:30:d8:eb:6f:fe:c0:
         5b:2f:7a:de:47:c3:b2:53:fd:40:07:99:74:c3:3b:5a:13:34:
         7d:e9:ed:60:d8:b2:93:b6:9d:a4:11:aa:8e:66:e8:c3:eb:99:
         1a:04:3a:38:d1:74:77:fa:11:72:da:7c:88:e8:0e:cd:07:d1:
         3f:0e:37:68:a5:95:3d:04:e4:26:75:b5:eb:fb:81:d6:6b:0f:
         47:cf:08:49:36:30:6f:3a:84:96:9c:41:01:b1:5f:e1:0e:c2:
         96:97:70:88:58:aa:ca:35:12:0f:00:97:45:42:94:dd:be:01:
         d3:60:3f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:04 2026 by rpki-client