Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
File:                     m1pTZdorJfppi3Awk8-9wqLCP88.mft (raw, json)
Hash identifier:          Y2m5/MtKcYLvjN7LIi/y6w7xyCfH8MuGIiLSLuinAD8=
Subject key identifier:   9A:BA:32:2F:E1:82:4C:F8:3A:5F:CB:4F:D2:B7:70:37:31:42:1E:43
Authority key identifier: 9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
Certificate issuer:       /CN=A91C7B68/serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
Manifest number:          0B7E
Signing time:             Tue 24 Mar 2026 19:51:32 +0000
Manifest this update:     Tue 24 Mar 2026 19:51:31 +0000
Manifest next update:     Tue 31 Mar 2026 19:51:31 +0000
Files and hashes:         1: m1pTZdorJfppi3Awk8-9wqLCP88.crl (hash: oYsYf8v8UHEuLqnbs1FZqK36te3h7uvYED8dIqmcrqI=)
                          2: 05287CD492B611F0841D2F21C4F9AE02.roa (hash: O5VX5p+22vMD3sqEB7suLw7mcxw1FAJJlGIyd6isaQY=)
                          3: 048E963C92B611F0841D2F21C4F9AE02.roa (hash: 9QN47A/xiyVIjZhqkG9Ma9dyQH6r8QDrfXfIFF2/lM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B68, serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
        Validity
            Not Before: Mar 24 19:51:31 2026 GMT
            Not After : Mar 31 19:51:31 2026 GMT
        Subject: CN=69c2eb44-585f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2a:36:87:7f:3f:30:35:81:4b:b6:7c:39:40:
                    59:9e:e0:8d:15:65:c2:1f:c2:e6:b7:01:4e:6c:08:
                    1a:cb:35:23:51:8d:38:18:a6:56:81:80:02:09:67:
                    02:eb:7b:43:7f:05:2a:aa:9b:19:e1:ce:2e:d9:6c:
                    d0:d7:42:62:4a:3a:da:ae:ff:06:ea:e6:68:15:78:
                    a3:1e:42:f4:02:20:6c:6f:99:dd:0f:4a:95:4c:13:
                    8f:7f:36:e4:21:2d:80:07:58:e7:d0:48:6f:44:f0:
                    85:98:c4:56:ac:36:96:45:00:60:7f:51:20:51:70:
                    bc:04:dd:2e:15:1a:ee:8e:dd:52:41:9a:29:c0:13:
                    fb:bd:5e:ea:7a:6a:c7:02:6a:4e:40:d7:1e:4f:f8:
                    b5:c0:f7:1d:c9:88:bc:9a:49:02:19:5d:6e:06:d8:
                    98:16:1e:ae:a2:57:4f:70:c5:c4:62:c8:45:8e:e5:
                    50:66:13:4b:97:9b:9d:84:92:ef:f7:b3:ad:e3:0c:
                    20:b3:f2:d0:d5:37:f5:a4:e2:88:23:73:46:d4:23:
                    3f:94:07:9e:40:f9:6b:0b:86:9a:8c:c0:bd:6a:cb:
                    26:c0:f5:85:27:1a:37:f7:09:37:c3:21:01:5d:7d:
                    70:4e:91:95:8e:7a:5a:ff:0c:98:c0:c6:a4:4a:2c:
                    ee:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BA:32:2F:E1:82:4C:F8:3A:5F:CB:4F:D2:B7:70:37:31:42:1E:43
            X509v3 Authority Key Identifier:
                keyid:9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:87:3e:32:ba:c6:6d:d4:19:8c:60:11:7f:7d:bb:d5:34:b4:
         ec:ca:0c:71:bd:3a:91:e4:e6:4b:95:e3:2f:d4:21:48:41:14:
         27:79:50:c9:a8:33:01:11:48:1c:fb:fc:93:ee:42:aa:be:c4:
         5e:3c:12:4f:85:26:aa:73:ae:57:76:8f:35:e4:82:44:3f:ed:
         d9:7f:b0:5a:41:8d:5f:e2:d5:6e:13:d2:36:2b:7a:67:34:86:
         e9:c8:97:6c:f6:f9:24:1a:82:ba:92:c9:5b:b4:04:d9:ef:8d:
         92:5d:e5:8a:fb:ca:84:16:92:09:eb:e1:7b:a4:dc:db:2f:99:
         0c:42:90:1b:4c:59:e3:ba:bc:06:71:6a:99:01:52:c6:f6:d1:
         c2:dc:c5:dd:c8:b0:7c:0f:72:63:01:d6:ed:a2:49:2f:3c:58:
         7b:ff:a7:d4:6c:ca:0b:9e:23:cb:59:34:fc:f5:58:54:89:11:
         c9:61:61:d5:2c:10:ce:72:09:78:76:c1:86:1c:4f:3a:87:92:
         ce:53:2d:32:0a:ec:c4:2b:d3:9c:c1:62:6e:ae:60:0c:db:5c:
         25:20:81:fa:14:eb:56:48:f8:c9:a6:80:27:6f:4f:77:f4:e3:
         64:29:7d:50:61:c7:92:3f:6d:e1:97:a0:71:f5:6a:e2:7d:bb:
         54:d3:ff:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:19 2026 by rpki-client