Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
File:                     57QbPSVuxr0M5xIbNw3kdBuDXmE.mft (raw, json)
Hash identifier:          G55s3PIzCZRu0iI+cl0pI+6cRMptCd4x/JCmvyne9lg=
Subject key identifier:   04:2F:F6:E3:56:09:6E:C6:4F:AB:A6:C9:B9:C5:7F:5B:31:D7:3C:F0
Authority key identifier: E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61
Certificate issuer:       /CN=A91C6A39/serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
Certificate serial:       0EA2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
Manifest number:          0E8D
Signing time:             Tue 24 Mar 2026 17:36:40 +0000
Manifest this update:     Tue 24 Mar 2026 17:36:39 +0000
Manifest next update:     Tue 31 Mar 2026 17:36:39 +0000
Files and hashes:         1: 57QbPSVuxr0M5xIbNw3kdBuDXmE.crl (hash: K5MJFZ1rRg8FFV+0pdiPPfYfjvb4m3Bun9y2lMOA5yk=)
                          2: 032B593EB1C511E9A4B3CE25C4F9AE02.roa (hash: 00zBsBKgY45h9leLMrh5bnhoj9xQVpyWuZdsxJiXRmQ=)
                          3: 0F56E156828C11EDA6BCA176C4F9AE02.roa (hash: euR0nP+kaFd6kQu0agN5nMyxfPmJbVXruQJYUEGKZTU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:36:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3746 (0xea2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A39, serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
        Validity
            Not Before: Mar 24 17:36:39 2026 GMT
            Not After : Mar 31 17:36:39 2026 GMT
        Subject: CN=69c2cba7-0159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a5:3b:d9:74:d9:ad:4e:b6:1e:d4:ee:e6:26:
                    5f:bd:3e:43:3f:e4:ef:e9:6a:fd:98:c8:b7:78:fb:
                    3f:33:cf:f2:18:1b:6d:bd:cc:ba:60:e6:66:91:35:
                    42:2d:6b:b3:99:2e:38:d2:c5:2c:c8:96:59:7d:3e:
                    b5:c5:a0:cd:6d:97:e9:a5:e1:c3:b1:d9:35:40:6f:
                    18:12:2c:9e:93:90:a6:9d:7d:6a:ae:f3:3b:ba:f1:
                    5a:c8:23:0e:f4:45:80:33:41:76:dc:f8:39:48:62:
                    1e:0c:b4:ac:25:bb:6c:42:44:eb:13:23:27:8b:1e:
                    25:2d:31:59:39:25:34:04:3d:35:bc:97:ed:1c:37:
                    4f:21:86:c7:65:b9:37:47:1e:a8:54:94:95:b6:b3:
                    73:47:af:38:28:82:2e:1b:b7:98:ec:11:5f:e9:a9:
                    39:94:7f:38:bc:66:41:25:90:cd:0b:2c:07:b2:08:
                    ef:6e:68:c7:cf:47:f8:8f:64:ce:77:fd:71:0a:ba:
                    f6:01:d5:b3:4d:7a:cf:4d:f7:64:30:ce:f0:ba:65:
                    73:90:9a:2d:3a:c7:01:b2:8e:c5:f9:48:b7:0f:29:
                    22:b5:b3:38:27:1e:a0:fc:cc:9e:76:f2:cb:ed:52:
                    cc:5c:0e:1b:79:51:47:91:d5:41:7e:fb:c3:2d:c1:
                    ca:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2F:F6:E3:56:09:6E:C6:4F:AB:A6:C9:B9:C5:7F:5B:31:D7:3C:F0
            X509v3 Authority Key Identifier:
                keyid:E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:71:a0:3a:f3:60:71:2c:bc:5e:4c:6e:f4:b2:f7:fa:44:fd:
         51:1e:a8:bc:47:cf:4a:df:87:d3:50:08:5b:f9:fd:62:2d:2b:
         5f:fa:37:f9:44:01:fb:7f:5c:30:29:57:c5:3a:f7:d4:b2:ed:
         a0:84:49:81:3e:56:70:00:57:a6:2f:d0:22:d7:e1:36:0b:a6:
         93:f6:c6:12:9a:13:ad:e0:c4:0a:9b:e4:ef:e6:82:70:27:8f:
         ba:63:31:25:45:55:08:4a:37:b7:4c:c7:5a:ad:94:ca:1e:92:
         75:76:f4:8e:8c:f8:33:d9:c2:59:4f:19:98:02:c3:97:11:a0:
         5a:40:10:4f:dd:bb:44:f7:5c:37:39:c5:b9:a3:c4:8f:51:7a:
         a1:09:46:a3:fe:2b:3c:80:58:8b:62:b0:2e:6f:69:fa:b0:95:
         42:31:75:cc:10:7a:04:4d:7e:53:25:14:ce:bb:18:35:6a:aa:
         b2:f4:6c:98:fa:17:75:6c:d7:79:93:e2:e0:9e:fd:9a:dc:f4:
         2a:81:c7:ce:0b:31:99:46:38:dd:af:9f:b5:5b:fe:9d:73:bc:
         66:d9:c9:90:97:e7:1e:6e:e4:ca:8c:b5:0c:c6:62:7f:f6:2e:
         b2:d9:90:14:10:b2:8a:98:f6:c8:c9:6a:18:ea:6b:0a:52:9d:
         e8:14:80:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:03 2026 by rpki-client