Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8AE7/EE4C41EE062811F1A1995728263D8C67/-v1MzrYU4itCRPcgJe_Ck4QAq8E.mft
File:                     -v1MzrYU4itCRPcgJe_Ck4QAq8E.mft (raw, json)
Hash identifier:          FWyZHnIrl7hbUsf877ZcCVYSvLXittAVlU3AyxrQh64=
Subject key identifier:   A6:6C:87:3C:D3:09:3A:DD:F6:8F:B4:94:02:65:9C:09:2F:0F:90:65
Authority key identifier: FA:FD:4C:CE:B6:14:E2:2B:42:44:F7:20:25:EF:C2:93:84:00:AB:C1
Certificate issuer:       /CN=A91C8AE7/serialNumber=FAFD4CCEB614E22B4244F72025EFC2938400ABC1
Certificate serial:       1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-v1MzrYU4itCRPcgJe_Ck4QAq8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8AE7/EE4C41EE062811F1A1995728263D8C67/-v1MzrYU4itCRPcgJe_Ck4QAq8E.mft
Manifest number:          1D
Signing time:             Fri 27 Mar 2026 08:31:18 +0000
Manifest this update:     Fri 27 Mar 2026 08:31:17 +0000
Manifest next update:     Fri 03 Apr 2026 08:31:17 +0000
Files and hashes:         1: -v1MzrYU4itCRPcgJe_Ck4QAq8E.crl (hash: U7m5Zv4MINVqJBqBNvD5KWI16nIhFqy2403gW0PvwSs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8AE7/EE4C41EE062811F1A1995728263D8C67/-v1MzrYU4itCRPcgJe_Ck4QAq8E.crl
                          rsync://rpki.apnic.net/member_repository/A91C8AE7/EE4C41EE062811F1A1995728263D8C67/-v1MzrYU4itCRPcgJe_Ck4QAq8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-v1MzrYU4itCRPcgJe_Ck4QAq8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 08:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8AE7, serialNumber=FAFD4CCEB614E22B4244F72025EFC2938400ABC1
        Validity
            Not Before: Mar 27 08:31:17 2026 GMT
            Not After : Apr  3 08:31:17 2026 GMT
        Subject: CN=69c64056-2e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b9:61:a0:e9:76:1f:f6:b4:ff:a2:7b:a4:ae:
                    f2:04:9e:d9:bc:ce:e7:92:c7:a0:e1:01:db:7b:86:
                    05:e6:cd:50:e3:e6:3a:27:1a:59:b1:14:74:fb:3e:
                    a2:22:39:16:07:f8:76:22:45:df:de:c0:2b:ea:cb:
                    d2:33:90:b6:67:ee:b8:8a:e6:aa:01:76:14:2f:df:
                    32:8a:15:7c:c9:78:ed:5a:58:25:ee:1f:ab:24:98:
                    00:93:fa:06:db:47:78:d4:e8:01:6f:fa:bc:fa:08:
                    10:c3:57:fc:05:09:36:ed:fe:41:19:f8:f7:41:b8:
                    f1:cf:ac:76:5e:87:c2:1a:71:cd:23:34:81:24:c3:
                    30:7d:7a:06:ab:53:ff:4f:8b:e0:ad:d1:9a:1c:63:
                    81:d8:60:ed:d7:57:f9:d4:f5:78:89:c1:67:0d:ae:
                    01:55:e1:62:00:cf:5d:2b:82:04:70:8c:77:b3:1d:
                    7c:77:6d:67:44:69:0e:03:b2:e5:d0:4d:2f:3b:9c:
                    b4:4a:68:ea:2e:fd:1f:a0:b0:97:5b:37:a2:ec:90:
                    ef:d4:10:bd:c4:4a:91:c5:f0:f4:a3:84:cb:1e:80:
                    4d:45:65:54:4c:c9:f8:7a:a0:82:01:de:99:99:4b:
                    7b:ae:74:9b:c7:0d:a0:fe:82:db:01:04:53:1e:a5:
                    c8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6C:87:3C:D3:09:3A:DD:F6:8F:B4:94:02:65:9C:09:2F:0F:90:65
            X509v3 Authority Key Identifier:
                keyid:FA:FD:4C:CE:B6:14:E2:2B:42:44:F7:20:25:EF:C2:93:84:00:AB:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8AE7/EE4C41EE062811F1A1995728263D8C67/-v1MzrYU4itCRPcgJe_Ck4QAq8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-v1MzrYU4itCRPcgJe_Ck4QAq8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8AE7/EE4C41EE062811F1A1995728263D8C67/-v1MzrYU4itCRPcgJe_Ck4QAq8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:f2:20:e1:45:c3:f8:86:9b:47:74:9a:11:22:55:f8:fb:51:
         19:8d:af:a3:88:be:dc:33:95:ca:0e:a2:92:e2:2b:b1:f9:17:
         13:07:00:14:26:e8:7c:7b:19:7a:fd:de:4f:f1:ef:b5:d9:97:
         6d:bc:08:d6:c5:56:e6:22:ec:35:fd:60:ab:a6:8c:f0:0b:ee:
         6a:e6:18:de:5d:7a:c4:c9:6c:6a:34:5f:bd:e2:33:63:f2:d7:
         65:cf:b3:4b:32:6d:7b:ba:d3:ab:89:28:42:49:55:ae:31:d4:
         94:74:4b:58:b4:98:43:e0:49:5e:75:52:e6:47:e8:6b:18:2a:
         82:ee:b8:5f:22:e2:a3:c8:73:c5:af:d0:99:e6:22:fb:14:3d:
         b1:6b:a6:57:a3:9b:7c:93:1e:20:ee:86:8c:fc:22:08:e8:6c:
         97:0c:15:5b:32:ac:b4:4e:31:81:cf:c5:c2:1c:23:8e:b9:bb:
         88:9e:86:f1:f3:68:0a:72:1f:3d:f9:03:f7:d8:fb:24:95:6c:
         7d:f0:75:e5:96:4a:ad:ec:ea:99:3c:44:1e:4a:db:04:58:54:
         9b:be:3d:89:1e:95:37:72:c1:d9:91:92:be:aa:f9:32:01:80:
         6d:11:e7:6c:72:41:a7:7b:28:13:16:6c:3b:d3:f8:bf:f7:3b:
         aa:68:83:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:19:00 2026 by rpki-client