Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
File:                     McvtHUoCFwgxgH13RKxKr_JqBuY.mft (raw, json)
Hash identifier:          jt2C8dtKovW4oC9byyxDn6yFlguWLSa36nIJt00LqEQ=
Subject key identifier:   73:AF:DA:26:F2:D4:95:70:C6:8A:4A:EC:DE:BF:0D:41:22:57:B4:0E
Authority key identifier: 31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6
Certificate issuer:       /CN=A91C607C/serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6
Certificate serial:       01DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
Manifest number:          01D4
Signing time:             Wed 25 Mar 2026 02:56:34 +0000
Manifest this update:     Wed 25 Mar 2026 02:56:34 +0000
Manifest next update:     Wed 01 Apr 2026 02:56:34 +0000
Files and hashes:         1: McvtHUoCFwgxgH13RKxKr_JqBuY.crl (hash: vLe2NTZanFKKsOxQdtHaaq4ZoaH060y04LLHl6dgkIA=)
                          2: 6F94DE3C628911EEA2D58C10C4F9AE02.roa (hash: ikPMKuaPv3O9li0UmdRfo3QhOBtyL4n4r3spbr+lypM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl
                          rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:56:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C607C, serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6
        Validity
            Not Before: Mar 25 02:56:34 2026 GMT
            Not After : Apr  1 02:56:34 2026 GMT
        Subject: CN=69c34ee2-e111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:86:36:9e:92:23:c5:0b:de:ec:e1:e3:11:
                    63:d5:76:4f:c6:8b:4c:c1:68:67:0d:fa:57:ee:90:
                    87:7f:0d:71:0b:b2:40:8a:9d:15:7e:b5:4c:cb:b0:
                    06:f4:85:6c:41:8e:08:23:a7:a7:28:40:55:8d:df:
                    e0:69:42:59:67:5d:40:f8:08:e4:1c:de:1b:05:6b:
                    12:27:36:e7:de:55:29:10:f9:43:3f:85:30:b4:9a:
                    dc:55:ee:72:95:2c:9a:e7:db:2f:90:d1:7e:a5:8e:
                    d6:0e:98:45:3f:a7:a2:3b:ba:c6:38:21:41:8e:2f:
                    1e:81:71:4f:b9:1d:27:de:7d:76:62:6f:33:1c:15:
                    c3:cf:9f:e8:11:ef:e9:8b:34:69:30:04:b1:7d:34:
                    db:1b:93:8b:d6:7a:87:db:5b:5c:c7:8b:b5:fd:8e:
                    b3:b8:25:fd:56:d5:be:e0:c9:c6:c1:ec:1b:16:58:
                    af:23:db:e5:1a:c3:31:7c:e0:dd:97:61:d2:a9:70:
                    c4:4b:e5:5e:c2:86:44:9d:8f:60:eb:98:cb:71:75:
                    72:9f:3e:fd:c6:95:33:67:e1:2e:a2:59:df:0c:a6:
                    77:ab:bd:8d:ae:b1:94:23:dc:e8:6d:6a:ce:08:95:
                    f8:55:e1:60:3d:80:f1:fb:e2:96:8a:57:58:71:52:
                    76:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AF:DA:26:F2:D4:95:70:C6:8A:4A:EC:DE:BF:0D:41:22:57:B4:0E
            X509v3 Authority Key Identifier:
                keyid:31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a9:a2:bb:28:c7:91:1a:0b:c5:19:ca:cd:bf:24:b3:08:01:
         8a:22:7f:29:45:19:06:52:25:77:a8:3e:1d:b9:5e:48:23:7d:
         7b:94:b7:07:39:9b:4d:52:e6:62:5d:72:27:d0:e1:19:75:34:
         e8:3f:f1:4c:15:37:55:b6:3a:fc:a0:13:e1:a6:69:70:8b:74:
         ed:9c:4d:7a:10:6c:51:b4:e8:b6:fe:77:e2:0a:d7:41:db:dd:
         58:a8:5a:46:cd:af:fd:a1:b4:cf:f7:24:60:64:cd:97:b4:e7:
         de:ce:4f:78:53:c8:0c:48:30:1b:6a:09:9b:3d:90:6c:37:99:
         ce:6d:78:55:d7:3f:a7:48:4a:dd:c6:59:02:57:2a:23:6f:f4:
         11:5f:cf:98:9e:40:7b:21:e3:1a:00:9c:66:50:03:86:3b:37:
         97:39:5d:9d:9e:58:ca:6b:f2:80:6e:9d:db:cc:4c:4d:e1:e2:
         ef:74:f4:01:81:93:b0:af:6b:78:46:37:d5:bf:62:15:a2:5f:
         1c:61:9e:b9:61:45:e0:c1:5f:59:62:b2:0c:d4:96:be:fd:6d:
         28:85:45:b5:d2:39:f5:e7:42:fe:97:01:f5:6b:52:4b:ff:f5:
         16:f9:23:93:19:91:e9:d2:37:5f:97:3a:02:af:a0:76:65:ac:
         f0:57:54:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:31:35 2026 by rpki-client