Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft
File:                     4H5XaJwnqZNhHLq6l7GU0xeWz28.mft (raw, json)
Hash identifier:          YdGuJ/Bt92tbyA+4x4aHSAxvMeGWV2gj3daRMqgzP1w=
Subject key identifier:   92:9D:57:7A:78:D7:F7:B1:CA:2A:CE:87:07:D0:E7:C0:77:94:91:26
Authority key identifier: E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F
Certificate issuer:       /CN=A91C7E5B/serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F
Certificate serial:       9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft
Manifest number:          9D
Signing time:             Wed 25 Mar 2026 06:35:54 +0000
Manifest this update:     Wed 25 Mar 2026 06:35:54 +0000
Manifest next update:     Wed 01 Apr 2026 06:35:54 +0000
Files and hashes:         1: 4H5XaJwnqZNhHLq6l7GU0xeWz28.crl (hash: yaGZSucxMingXUaMLFqTpSdTFQtzQ/7c4OGNhB4bjg0=)
                          2: DBBAF162C19811F0A42BC412C4F9AE02.roa (hash: Kic9hnPcMWHN6pDr7Ll5IWiixhuAzQj9NWh88//ur+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl
                          rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7E5B, serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F
        Validity
            Not Before: Mar 25 06:35:54 2026 GMT
            Not After : Apr  1 06:35:54 2026 GMT
        Subject: CN=69c3824a-2026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1c:12:90:d6:20:b7:ac:8b:42:c7:90:2c:e3:
                    47:3f:5f:e1:e8:41:32:c8:76:da:21:bf:6e:27:a9:
                    02:17:79:e3:55:e9:74:81:0b:34:f2:24:a2:85:34:
                    ce:be:10:32:36:6e:fb:8a:cb:c7:57:8c:b3:1c:04:
                    95:7d:de:8c:2f:5d:9c:98:17:78:48:e2:29:6a:1d:
                    10:32:df:40:a4:bd:14:76:38:85:3c:f7:b8:14:42:
                    8d:34:49:f8:d5:bd:91:89:97:5e:74:62:15:10:a4:
                    ab:b0:3c:fe:aa:0d:1c:b8:a2:95:12:60:7b:99:c2:
                    0e:9d:62:26:db:de:a6:37:d1:c4:ae:5d:de:fc:71:
                    bc:93:f2:95:2d:4f:7f:bd:75:68:23:98:6b:04:1a:
                    e1:78:2c:81:ab:11:02:51:80:11:eb:42:d3:fd:61:
                    82:6f:af:03:59:66:5f:78:f4:ba:7e:91:10:4d:c0:
                    a6:ca:be:5a:08:b0:1d:6c:3f:5e:a1:7f:29:c4:b2:
                    83:bc:cc:de:e4:15:f1:b5:c4:aa:54:16:55:8f:bc:
                    b6:4e:67:63:6b:f6:6d:da:db:cf:ad:b3:65:0c:92:
                    16:6a:6c:08:26:3c:cc:2c:37:2c:b7:7c:94:e5:e9:
                    b7:2b:87:f4:9b:07:0f:f9:ea:0d:25:84:e9:c7:ed:
                    f0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9D:57:7A:78:D7:F7:B1:CA:2A:CE:87:07:D0:E7:C0:77:94:91:26
            X509v3 Authority Key Identifier:
                keyid:E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:19:5c:53:d5:00:65:7a:45:68:25:b0:bb:86:7f:ed:a7:99:
         79:43:bc:3f:c9:5c:5e:1d:c2:55:af:2c:7f:74:f8:19:63:34:
         54:7c:10:7a:a4:6d:7e:61:37:7c:55:5f:41:1f:05:3a:fc:25:
         d4:2c:68:4f:c7:57:5a:a6:f2:32:06:c1:68:3d:84:f7:a1:5f:
         db:25:1f:97:6f:d1:ad:e6:b0:5b:f7:c5:7b:1d:90:c3:a3:b5:
         c6:4d:0d:be:33:c8:85:3e:17:31:57:39:10:11:e0:37:68:d3:
         9d:5c:34:52:da:7c:ed:de:25:79:53:e0:cc:e1:fe:b1:5c:85:
         15:d6:f6:73:09:1f:10:25:11:41:aa:94:94:41:7b:f0:35:75:
         4d:2a:01:1a:21:43:b5:8d:85:a8:5b:30:6c:47:0c:0f:6b:49:
         82:b5:83:ed:8b:b1:77:66:c7:a4:b8:73:54:4a:cc:8b:5e:59:
         24:ef:5a:7c:18:1c:98:11:8b:b0:9f:65:c4:6a:db:f4:a9:6c:
         d3:40:4e:47:45:c3:1d:db:65:6f:e4:0c:91:82:d8:0d:c9:74:
         62:74:7e:18:25:0a:68:9e:32:1f:bf:3c:6a:69:53:c6:39:89:
         19:29:f0:32:e2:53:ca:57:ce:42:df:b7:ed:6a:e7:42:08:85:
         51:5f:54:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:31:36 2026 by rpki-client