Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft
File:                     k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft (raw, json)
Hash identifier:          IpbhY+1F3tp9e0QWWarORfzV8J7otyNPvv9/TEoV+sI=
Subject key identifier:   A0:9B:4D:20:E5:A0:5B:9C:E3:38:E0:E0:C9:04:A0:EB:AF:72:79:E9
Authority key identifier: 93:57:44:41:B4:16:9F:5C:BE:33:1C:2E:ED:56:E8:83:DC:EF:45:23
Certificate issuer:       /CN=A91C4EE6/serialNumber=93574441B4169F5CBE331C2EED56E883DCEF4523
Certificate serial:       2726
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft
Manifest number:          2723
Signing time:             Tue 24 Mar 2026 15:36:25 +0000
Manifest this update:     Tue 24 Mar 2026 15:36:24 +0000
Manifest next update:     Tue 31 Mar 2026 15:36:24 +0000
Files and hashes:         1: k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl (hash: T6AT2gMO5Oyp9peoc37CGjdHH3UokBHr7T7RsTvdLoE=)
                          2: 2E078068008111F0AB00F337C4F9AE02.roa (hash: 1O9i+4aaj1PcrX+9nzv3nBPdlnTa7H6SASSFADMZ5OA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl
                          rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10022 (0x2726)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4EE6, serialNumber=93574441B4169F5CBE331C2EED56E883DCEF4523
        Validity
            Not Before: Mar 24 15:36:24 2026 GMT
            Not After : Mar 31 15:36:24 2026 GMT
        Subject: CN=69c2af78-9f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d5:54:7a:15:86:8f:44:e2:10:e0:87:59:ec:
                    c4:1d:4f:ed:95:ea:f1:41:09:d8:02:23:ce:2a:c4:
                    75:00:05:53:79:24:4f:1f:d7:df:f9:77:b4:c4:e5:
                    19:8c:06:05:58:a4:e6:87:8c:a3:62:7c:61:58:82:
                    62:20:4a:42:b4:86:0f:0d:3c:c1:5d:12:9f:10:72:
                    28:ad:c1:1e:68:f0:d2:4e:62:41:87:3b:ee:76:a0:
                    45:be:0d:73:58:b3:d3:65:61:18:5f:61:70:15:ee:
                    cf:bb:44:1e:0c:04:30:13:a5:0d:2b:00:0f:57:40:
                    6b:20:4a:bc:ec:4b:d1:8b:fd:55:20:ae:37:12:3a:
                    53:77:4e:e9:07:38:21:27:55:25:c7:4d:eb:68:0d:
                    c2:3d:da:10:4d:b3:9f:a2:e6:07:eb:a1:6c:af:f8:
                    ef:06:5b:d2:e2:52:b4:7a:f9:ca:30:1f:99:4a:20:
                    49:1b:e6:c0:91:80:0f:4a:40:c6:b8:f6:7f:df:6b:
                    6d:3f:b4:27:15:09:92:7a:7f:24:9b:aa:f7:86:9c:
                    70:31:99:c8:63:9d:7e:92:b7:7e:6b:6e:34:f7:23:
                    77:3f:50:82:38:52:6a:6a:13:a9:28:d1:c9:bd:65:
                    f7:43:b0:b7:65:e8:47:fb:73:78:5a:e9:6e:86:88:
                    53:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9B:4D:20:E5:A0:5B:9C:E3:38:E0:E0:C9:04:A0:EB:AF:72:79:E9
            X509v3 Authority Key Identifier:
                keyid:93:57:44:41:B4:16:9F:5C:BE:33:1C:2E:ED:56:E8:83:DC:EF:45:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:36:dc:2c:1c:6d:27:ce:9e:4e:e0:ad:e5:9d:de:1c:93:db:
         12:32:68:c2:b0:d3:5d:19:a1:7d:ed:5a:ed:3f:07:d1:ff:a9:
         82:09:a1:02:88:2f:83:c6:b5:98:ae:08:bb:45:ab:97:cb:40:
         dc:da:fb:c7:49:83:70:5d:c5:6c:72:7b:30:da:b1:f1:e7:62:
         5b:e5:1c:53:57:69:17:05:57:d1:94:a1:40:ec:99:13:0a:1f:
         73:8d:b3:c7:12:39:c9:4c:e3:b1:58:54:68:fc:a0:7b:ce:10:
         1a:85:81:1c:7e:9e:62:ea:e8:d4:3e:57:02:18:36:18:f0:cf:
         cf:3b:42:fb:c6:be:8b:06:26:5a:d4:a4:81:3b:23:3a:f5:a0:
         8e:8c:55:94:30:d7:10:7a:88:3b:76:4e:81:97:79:dd:fb:34:
         8e:36:e6:56:95:b4:f8:36:b7:a7:fa:b1:6d:e5:b9:c3:0f:52:
         38:3c:74:68:f2:e4:ac:8e:7b:30:93:bf:c5:46:8f:3b:4b:ad:
         44:1e:57:0a:f7:58:16:4b:c6:1e:76:55:1f:4f:41:26:71:2c:
         c7:54:a1:c9:44:fd:9f:6f:01:e6:a7:0e:59:73:63:af:54:99:
         9a:1e:e2:81:6b:fd:0c:fc:a3:79:35:a7:84:ba:e0:5a:7e:ee:
         85:99:49:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzRFRTYxMTAvBgNVBAUTKDkzNTc0NDQxQjQxNjlGNUNCRTMzMUMyRUVENTZFODgz
RENFRjQ1MjMwHhcNMjYwMzI0MTUzNjI0WhcNMjYwMzMxMTUzNjI0WjAYMRYwFAYD
VQQDEw02OWMyYWY3OC05ZjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt9VUehWGj0TiEOCHWezEHU/tlerxQQnYAiPOKsR1AAVTeSRPH9ff+Xe0xOUZ
jAYFWKTmh4yjYnxhWIJiIEpCtIYPDTzBXRKfEHIorcEeaPDSTmJBhzvudqBFvg1z
WLPTZWEYX2FwFe7Pu0QeDAQwE6UNKwAPV0BrIEq87EvRi/1VIK43EjpTd07pBzgh
J1Ulx03raA3CPdoQTbOfouYH66Fsr/jvBlvS4lK0evnKMB+ZSiBJG+bAkYAPSkDG
uPZ/32ttP7QnFQmSen8km6r3hpxwMZnIY51+krd+a2409yN3P1CCOFJqahOpKNHJ
vWX3Q7C3ZehH+3N4WuluhohTHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKCbTSDl
oFuc4zjg4MkEoOuvcnnpMB8GA1UdIwQYMBaAFJNXREG0Fp9cvjMcLu1W6IPc70Uj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVFNi85NTcwQjJFNkRD
RDkxMUU0OEQ3ODlBNTRDNEY5QUUwMi9rMWRFUWJRV24xeS1NeHd1N1Zib2c5enZS
U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2sxZEVRYlFXbjF5LU14d3U3VmJvZzl6dlJTTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NEVFNi85NTcwQjJFNkRDRDkxMUU0OEQ3ODlBNTRDNEY5QUUwMi9rMWRFUWJRV24x
eS1NeHd1N1Zib2c5enZSU00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASjbcLBxtJ86eTuCt5Z3eHJPbEjJowrDTXRmhfe1a7T8H0f+pggmhAogvg8a1
mK4Iu0Wrl8tA3Nr7x0mDcF3FbHJ7MNqx8ediW+UcU1dpFwVX0ZShQOyZEwofc42z
xxI5yUzjsVhUaPyge84QGoWBHH6eYuro1D5XAhg2GPDPzztC+8a+iwYmWtSkgTsj
OvWgjoxVlDDXEHqIO3ZOgZd53fs0jjbmVpW0+Da3p/qxbeW5ww9SODx0aPLkrI57
MJO/xUaPO0utRB5XCvdYFkvGHnZVH09BJnEsx1ShyUT9n28B5qcOWXNjr1SZmh7i
gWv9DPyjeTWnhLrgWn7uhZlJ/w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:39:43 2026 by rpki-client