Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
File:                     MJHb_j66tWY-h63G6ZX4gtOyZMo.mft (raw, json)
Hash identifier:          w2uPTH5Ms5Gwo5BJBQ81hQv68/QcxndNnXIl53Vr44Q=
Subject key identifier:   DB:2F:47:10:55:FD:35:67:0D:5B:4F:06:C3:0E:C9:7B:AD:1E:C9:9E
Authority key identifier: 30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA
Certificate issuer:       /CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA
Certificate serial:       0CB9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
Manifest number:          41D2
Signing time:             Thu 26 Mar 2026 15:04:10 +0000
Manifest this update:     Thu 26 Mar 2026 15:04:09 +0000
Manifest next update:     Thu 02 Apr 2026 15:04:09 +0000
Files and hashes:         1: MJHb_j66tWY-h63G6ZX4gtOyZMo.crl (hash: ugPu9WDI48MVY2Xfw7U7wNFSADUrX6UtUbGKFJ7r5/Q=)
                          2: 8941689CB44911EA92F1F886C4F9AE02.roa (hash: TEur0qITEPg5x6Wpffov2L2nrpJe0RCHF8zhwpKPkvg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl
                          rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3257 (0xcb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1C49, serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA
        Validity
            Not Before: Mar 26 15:04:09 2026 GMT
            Not After : Apr  2 15:04:09 2026 GMT
        Subject: CN=69c54aea-050e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:55:b0:56:d3:53:21:0e:43:2c:7a:52:54:d3:
                    b9:09:82:62:0d:f7:cf:32:d6:de:4e:c9:f7:3c:55:
                    92:99:3d:11:93:34:e8:99:be:6b:06:e5:58:0e:58:
                    fa:3c:96:df:90:00:17:2b:88:df:d8:76:38:a1:cd:
                    04:d3:14:d4:7e:e7:d7:6c:5c:08:01:52:a0:35:93:
                    31:49:df:f4:6e:08:03:9d:e5:01:42:58:83:b8:0f:
                    50:40:63:e0:30:aa:1c:3b:a6:fe:5e:60:0e:77:69:
                    ab:57:22:7e:e7:cc:e3:2f:aa:50:8d:60:43:60:73:
                    b8:62:3d:05:98:2b:83:63:0f:81:5b:10:f0:cc:76:
                    b5:d7:91:95:cc:af:3c:f3:eb:6e:97:55:84:02:70:
                    d0:5e:7d:b6:3e:c9:c4:bd:ea:66:d6:97:19:9f:5c:
                    47:ef:8c:82:af:5a:35:4b:fb:13:89:c8:8a:2e:8b:
                    4f:2d:2d:1e:1c:61:0a:fe:c5:1f:64:88:ee:69:a1:
                    2a:47:64:d1:bd:f6:5b:c8:0e:bb:6c:c9:c7:bc:2b:
                    b3:99:85:25:97:a0:36:93:2f:63:86:dd:f9:60:17:
                    c1:12:55:7d:1e:b2:a8:51:81:9a:66:e0:3b:5e:f4:
                    0d:43:39:e5:a7:06:54:34:16:81:7f:cc:d6:e5:88:
                    9c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2F:47:10:55:FD:35:67:0D:5B:4F:06:C3:0E:C9:7B:AD:1E:C9:9E
            X509v3 Authority Key Identifier:
                keyid:30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:2f:d6:27:20:43:a8:6d:2c:f1:49:7c:dc:ce:06:c6:18:1a:
         dc:de:bb:2e:86:b4:78:a5:77:5d:e5:ec:57:1a:34:cd:46:cb:
         50:f5:24:d6:bc:d1:fb:50:b4:0b:a3:23:39:bd:6d:06:90:10:
         79:63:3d:08:65:ac:18:53:af:7b:26:21:e4:26:43:57:c2:97:
         19:22:2b:1a:33:7d:22:75:bb:2e:21:39:21:e5:cb:6f:97:8c:
         4c:ba:39:26:15:f9:7a:aa:c6:84:69:c0:09:a7:7a:50:0f:14:
         42:b0:ef:4e:08:4e:5d:40:cb:c5:b3:d9:0c:11:0f:53:ff:66:
         9f:37:19:21:0b:15:ae:88:22:c9:17:22:05:a9:eb:e9:1d:1b:
         14:fc:aa:00:14:c6:02:39:e7:68:a6:03:2e:41:6a:c2:3f:c8:
         1d:30:e4:99:6d:6c:96:7e:d5:78:73:a0:04:ac:e9:44:bb:b8:
         07:49:51:f3:0f:64:2d:2f:d3:01:ed:b3:1a:18:ac:7a:4b:fd:
         55:8e:64:95:9e:4a:43:a2:3e:5c:e2:62:14:61:53:43:c1:c5:
         94:6b:68:9b:a9:0f:04:64:ba:2e:fe:6e:4c:b8:71:28:61:f7:
         18:6e:94:b4:f8:e2:5d:1d:ed:8b:6d:b0:a6:b9:54:1c:ec:83:
         6e:e9:a6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:58 2026 by rpki-client