Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft
File:                     UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft (raw, json)
Hash identifier:          WY0b21uU4bRMgmrNqchrSEonP7Bx6rpZxjS3NJuahbc=
Subject key identifier:   E8:6B:12:49:FD:CD:5F:68:70:67:D6:00:A7:75:85:E1:14:A5:22:82
Authority key identifier: 51:3E:CE:73:EE:9E:A3:25:EA:44:29:31:B0:06:2B:D8:BF:30:4A:76
Certificate issuer:       /CN=A91C575E/serialNumber=513ECE73EE9EA325EA442931B0062BD8BF304A76
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft
Manifest number:          6C
Signing time:             Wed 25 Mar 2026 07:07:45 +0000
Manifest this update:     Wed 25 Mar 2026 07:07:45 +0000
Manifest next update:     Wed 01 Apr 2026 07:07:45 +0000
Files and hashes:         1: UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl (hash: qg25KSqMcGIcSw3RG3RfXrhl0iS5+poCh53vcOXVNI0=)
                          2: 3FD60CEC896B11F0A99C2258C4F9AE02.roa (hash: Znxli92ke42bUcuO4y2MWt6186ap7JgRI1qPxtQiAUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl
                          rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C575E, serialNumber=513ECE73EE9EA325EA442931B0062BD8BF304A76
        Validity
            Not Before: Mar 25 07:07:45 2026 GMT
            Not After : Apr  1 07:07:45 2026 GMT
        Subject: CN=69c389c1-1f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:00:ae:46:33:7f:42:2c:40:44:d2:28:c7:
                    b5:9e:98:6e:ca:cc:3e:65:74:14:b0:32:64:da:a3:
                    65:14:7a:56:c8:a0:0b:5f:90:6b:65:dd:06:15:f4:
                    a5:da:d9:c6:ac:97:08:d5:13:13:64:e2:31:39:cf:
                    8d:2e:9b:eb:c4:df:f6:84:6d:91:e2:53:18:18:89:
                    ff:49:0f:2c:f8:ff:98:c3:43:57:4b:ea:e1:7d:44:
                    14:89:b2:85:2e:83:5a:1f:ce:c6:30:a0:fa:34:1d:
                    7f:18:dc:ce:6a:58:7b:1d:68:5b:a9:2f:90:45:1d:
                    d6:e2:10:0a:5f:0a:2b:8b:c4:00:83:db:d2:18:51:
                    c8:67:1a:78:11:cf:a7:38:dc:57:53:84:db:e9:ca:
                    27:0f:51:59:5e:c8:86:4f:41:66:b7:f1:37:e8:30:
                    f4:90:2c:6b:2c:25:14:bd:1f:1f:82:ec:fe:4c:bf:
                    fb:42:dd:f4:bf:22:2f:2a:63:35:15:4f:f2:9c:85:
                    13:0b:23:d6:8e:85:2d:a4:ae:38:ee:a1:fe:0e:c7:
                    e6:c3:17:93:c9:e7:d3:2f:72:cd:cb:94:fe:e8:73:
                    4e:f4:32:34:86:58:01:ca:fa:c2:28:84:2b:38:93:
                    8c:e0:48:69:d9:12:69:a1:d9:82:fd:aa:2b:72:de:
                    7d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6B:12:49:FD:CD:5F:68:70:67:D6:00:A7:75:85:E1:14:A5:22:82
            X509v3 Authority Key Identifier:
                keyid:51:3E:CE:73:EE:9E:A3:25:EA:44:29:31:B0:06:2B:D8:BF:30:4A:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:fd:90:65:f6:23:e3:e4:a5:99:1c:51:72:b2:7f:9d:89:1e:
         76:d6:f0:26:68:af:bf:d6:88:da:b1:84:42:02:3f:ec:38:ea:
         d9:e0:89:e0:5f:20:2d:f9:85:07:33:25:92:57:cb:e7:f5:b5:
         01:89:28:e7:f2:f4:a1:14:85:ea:0c:af:0a:a6:34:bc:0f:de:
         11:29:74:70:0f:69:3e:45:b4:47:4b:b8:5e:c1:63:e6:e9:f1:
         0e:cf:41:91:62:c0:8e:3a:28:49:35:50:a6:ac:2d:dc:ec:cc:
         4e:99:de:27:db:ee:ac:0b:04:4f:3f:7b:03:6b:cd:c5:ba:de:
         5b:17:07:2c:9e:71:33:3a:55:7c:c5:e4:d9:a1:a4:db:20:f3:
         bb:14:b8:4b:01:9a:f3:c5:01:37:e0:2e:35:41:5e:6f:3a:ae:
         18:f0:d5:4a:32:3b:3b:5f:a7:95:8a:ce:08:31:e7:92:dc:e0:
         a4:60:48:87:09:02:65:c5:56:13:3e:c6:eb:dd:c7:2d:02:81:
         55:27:95:1b:13:48:0d:c0:94:78:3e:f6:7a:62:dd:9e:b9:cc:
         fb:99:a2:68:86:ef:07:43:6a:f3:9a:4a:66:18:49:91:08:7a:
         44:d0:3c:d1:2d:3a:2e:29:e7:b1:f4:de:8a:d1:51:62:46:13:
         cd:44:24:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:35 2026 by rpki-client