Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/amMZbMzcZmzLXDgP7RbG8O-w-10.mft
File:                     amMZbMzcZmzLXDgP7RbG8O-w-10.mft (raw, json)
Hash identifier:          GZ5YxQp5uAS92yfHHc5rqmqhxT0XVq1gQ6SFP/FjzgE=
Subject key identifier:   00:D4:89:D3:CB:E7:60:82:A4:6E:D3:D7:D1:08:E0:5F:58:1A:49:84
Authority key identifier: 6A:63:19:6C:CC:DC:66:6C:CB:5C:38:0F:ED:16:C6:F0:EF:B0:FB:5D
Certificate issuer:       /CN=A91C175F/serialNumber=6A63196CCCDC666CCB5C380FED16C6F0EFB0FB5D
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/amMZbMzcZmzLXDgP7RbG8O-w-10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/amMZbMzcZmzLXDgP7RbG8O-w-10.mft
Manifest number:          04
Signing time:             Wed 25 Mar 2026 08:24:54 +0000
Manifest this update:     Wed 25 Mar 2026 08:24:53 +0000
Manifest next update:     Wed 01 Apr 2026 08:24:53 +0000
Files and hashes:         1: amMZbMzcZmzLXDgP7RbG8O-w-10.crl (hash: hcB8z3oQOnJQ+aPQB2SQJtzIg2XwmHPbTcZobL/Qds4=)
                          2: 32F3695A24D611F183242288AB833773.roa (hash: cN0LkN23o7Jd+cV1/heAkHiokcHf45cviCoxSSBhd58=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/amMZbMzcZmzLXDgP7RbG8O-w-10.crl
                          rsync://rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/amMZbMzcZmzLXDgP7RbG8O-w-10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/amMZbMzcZmzLXDgP7RbG8O-w-10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C175F, serialNumber=6A63196CCCDC666CCB5C380FED16C6F0EFB0FB5D
        Validity
            Not Before: Mar 25 08:24:53 2026 GMT
            Not After : Apr  1 08:24:53 2026 GMT
        Subject: CN=69c39bd6-fcc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e8:0c:9e:cf:c4:81:28:bf:eb:e9:e5:f6:b8:
                    05:68:1f:a6:65:dd:01:af:c1:99:cb:41:09:7b:18:
                    18:40:0e:b8:6d:2c:68:ff:9f:5e:70:83:5d:e1:eb:
                    39:ba:8c:b8:b1:5d:82:8e:03:c4:16:db:ec:5a:2f:
                    aa:1e:3f:e7:24:ed:1e:d9:b1:cf:b2:c9:ab:3c:ee:
                    40:47:83:3e:4e:d5:94:8e:5b:23:8d:66:42:25:05:
                    bd:92:d2:dd:65:fe:ce:39:20:25:be:a9:41:6e:9b:
                    ff:e2:fd:26:c8:c2:08:3b:66:d7:5f:d4:d2:9a:da:
                    cc:3f:0c:e9:09:a8:86:1a:fc:5c:fa:8f:44:f4:1e:
                    4c:99:64:97:68:a2:6a:5b:4f:e5:9c:2d:48:f6:c7:
                    a9:93:af:4d:97:7d:d7:5a:14:45:e0:2c:e6:4e:48:
                    7d:9d:b8:55:d6:75:20:1e:e7:55:f4:9e:80:9e:74:
                    d3:25:67:aa:15:65:3d:69:40:b7:60:4e:d4:c3:82:
                    98:48:84:22:5a:95:db:7e:00:c0:fe:1d:ff:5b:9a:
                    f7:bd:eb:9e:1e:da:81:8e:3c:f0:64:4d:57:4e:57:
                    b8:2a:b8:b8:ec:e8:f9:b8:43:ad:90:18:8b:31:c0:
                    55:c0:0b:02:5f:3b:e0:f2:7a:9a:9e:47:a0:f4:85:
                    28:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D4:89:D3:CB:E7:60:82:A4:6E:D3:D7:D1:08:E0:5F:58:1A:49:84
            X509v3 Authority Key Identifier:
                keyid:6A:63:19:6C:CC:DC:66:6C:CB:5C:38:0F:ED:16:C6:F0:EF:B0:FB:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/amMZbMzcZmzLXDgP7RbG8O-w-10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/amMZbMzcZmzLXDgP7RbG8O-w-10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/amMZbMzcZmzLXDgP7RbG8O-w-10.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e1:2f:03:0f:10:76:a2:32:06:c7:b6:0e:b0:92:fb:d5:45:
         a5:0c:cc:11:a6:80:10:ff:21:a6:d9:5b:6b:93:8c:c3:f9:bb:
         fe:2c:af:8e:db:7f:ec:24:58:a3:ba:9a:fb:39:40:b4:c6:0a:
         bf:79:a7:a9:78:c2:a2:72:b7:a5:74:fc:dc:8e:f8:3d:0f:04:
         ee:7b:61:67:83:c6:db:23:ad:f8:d1:cd:e5:2e:71:99:97:de:
         9b:ed:a9:d6:bf:f8:60:9e:c8:f0:ae:00:5e:5a:9a:8c:31:7b:
         4a:c7:f0:39:1f:24:b3:d9:3c:44:d5:06:7a:4d:7f:2a:66:b1:
         34:39:3e:4a:94:95:39:3d:52:6e:be:46:d4:44:75:62:fa:21:
         1f:c0:25:c6:4a:c6:65:ed:32:1c:0a:e2:e0:56:c8:85:d1:b9:
         27:be:7e:f7:f1:a6:83:24:ed:23:5e:31:f9:70:1d:8c:54:98:
         ca:42:c5:b6:9e:e2:fb:8f:be:d8:c4:e5:da:9e:a7:6d:39:45:
         be:5e:e5:01:28:23:16:bd:94:ad:ce:1a:87:de:e8:7c:c3:c1:
         33:e7:a1:f4:7f:01:a8:9d:a5:7f:31:80:ce:fc:7f:3d:49:e8:
         ac:15:4e:20:72:c1:b5:cd:54:50:a0:5b:0c:2d:48:88:9f:70:
         59:79:f0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:24 2026 by rpki-client