Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
File:                     e5n41rlBPOKiluscfX7-bUfQy6Q.mft (raw, json)
Hash identifier:          mDSXsFF4xHVKdH93CwwxFoBBvS1HTGoJL+NypOavKOQ=
Subject key identifier:   74:5C:00:FD:77:D5:06:C9:46:21:58:09:3D:36:C5:EC:C1:05:53:02
Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4
Certificate issuer:       /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4
Certificate serial:       0949
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
Manifest number:          093B
Signing time:             Tue 24 Mar 2026 19:58:28 +0000
Manifest this update:     Tue 24 Mar 2026 19:58:27 +0000
Manifest next update:     Tue 31 Mar 2026 19:58:27 +0000
Files and hashes:         1: e5n41rlBPOKiluscfX7-bUfQy6Q.crl (hash: KIx1HaWQfE45HE3cqnxQVy/ohMdsvf7ha9cB1do6ND4=)
                          2: 7E854EB2BEEF11F084D11C58C4F9AE02.roa (hash: kASRi8HRtxo9EGCHWYidF8DVFzVcSA6wyPyYECd/naA=)
                          3: E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa (hash: t7muwLVVJ/1UT9mWtEBwl7n0rZZHTrn0w2q9yPkjVWw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2377 (0x949)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4F1B, serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4
        Validity
            Not Before: Mar 24 19:58:27 2026 GMT
            Not After : Mar 31 19:58:27 2026 GMT
        Subject: CN=69c2ece4-336d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d5:29:90:79:fd:bc:e9:6b:5b:8f:aa:13:10:
                    5f:31:f1:64:d1:67:8c:5f:22:86:f8:66:e3:70:e7:
                    2e:06:97:10:a7:98:81:f7:f5:9b:ba:30:89:9e:c6:
                    35:af:29:df:25:b1:fd:6e:fd:ab:a4:8b:38:78:cd:
                    13:09:be:60:01:e2:27:66:96:5a:78:19:d4:f9:fc:
                    b6:e1:07:eb:15:35:15:61:61:b9:e8:7f:39:6d:33:
                    02:43:b7:70:9a:0c:27:5d:4b:c2:8e:b0:02:fb:90:
                    52:b9:fe:3b:8e:8c:24:a7:a2:db:54:fc:fa:a6:e6:
                    c9:60:14:ed:6a:4c:f6:6a:c9:d0:87:3a:1f:10:7e:
                    1b:35:80:12:62:71:16:39:e6:4f:7d:63:3c:54:d4:
                    1d:a4:d7:eb:71:04:97:bd:73:32:45:f8:b0:70:f8:
                    62:d4:47:2c:b4:97:64:ae:3b:b3:b3:07:3c:02:ab:
                    c2:25:ab:bc:2f:7d:a4:fb:54:9d:93:0c:fe:cb:b0:
                    14:39:0b:01:48:21:71:4b:87:b2:cf:cd:4d:14:3e:
                    9c:98:a6:7f:30:5f:64:ae:d9:41:d1:26:02:3e:86:
                    b4:75:8d:03:1c:3a:f0:cd:59:7c:0a:a2:20:96:46:
                    8f:73:d9:7c:e0:73:c7:0e:14:9f:cb:84:12:18:29:
                    0c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5C:00:FD:77:D5:06:C9:46:21:58:09:3D:36:C5:EC:C1:05:53:02
            X509v3 Authority Key Identifier:
                keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a1:3b:ff:32:fa:53:29:fc:0f:e9:12:15:8c:cb:3a:fc:7c:
         3e:1c:bd:03:ac:69:b6:43:ec:68:1b:60:a5:97:e8:44:c3:9f:
         3c:5b:08:a3:d9:55:7c:6e:7f:0f:c8:14:c5:d9:e3:82:6e:2d:
         3b:22:f7:cb:5d:56:6a:02:74:a6:b2:85:a0:22:a6:3b:b5:66:
         44:2b:85:a0:ad:1c:f1:74:83:c9:6a:2a:3d:07:d3:49:ec:76:
         08:cd:75:92:12:74:92:2c:88:92:0c:fc:0d:00:b0:de:27:2a:
         a5:2c:6b:a3:b8:89:9f:c3:f2:b5:77:9b:2d:58:58:25:27:32:
         ec:1b:97:13:8d:b6:87:0c:d0:86:39:17:f3:ad:cc:71:8b:20:
         d2:fe:d1:01:9e:78:54:ed:93:cd:2f:17:31:0f:09:b2:2b:e0:
         df:4f:95:88:ca:12:5a:dd:0f:d6:82:6c:30:c0:27:60:82:dc:
         bc:8e:17:e1:b7:54:a3:bf:31:bd:60:81:69:69:4e:d4:46:e1:
         15:c5:2e:8f:dd:82:26:58:33:12:87:b6:c0:1d:d3:4a:5d:f1:
         8f:e3:94:ce:77:93:e0:c1:ee:81:6a:08:a7:a1:e4:2f:ce:2d:
         92:55:72:e7:d6:bf:46:e3:69:f5:a6:39:6d:03:c0:c3:82:fa:
         e3:b3:18:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:34 2026 by rpki-client