Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft
File:                     sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft (raw, json)
Hash identifier:          N0PIumbWgIe/JVwQszq0zzERxsKzG95OPcMLYcltGjs=
Subject key identifier:   84:18:D2:AB:8F:A7:46:EB:1D:F9:76:1C:86:9A:71:99:0C:F9:8C:9D
Authority key identifier: B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2
Certificate issuer:       /CN=A91C90F3/serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2
Certificate serial:       0911
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft
Manifest number:          0906
Signing time:             Tue 24 Mar 2026 20:04:52 +0000
Manifest this update:     Tue 24 Mar 2026 20:04:51 +0000
Manifest next update:     Tue 31 Mar 2026 20:04:51 +0000
Files and hashes:         1: sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl (hash: bg6fHp2BZrOTvA5ChS7rx43Z+g0vlvlpWHeVe4Mjz3M=)
                          2: E67EF1B25F0311ECBB273637C4F9AE02.roa (hash: myPqUDNWdaCgUms1NDW6cgdVK5APz5PqgTj/yOUElVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl
                          rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2321 (0x911)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C90F3, serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2
        Validity
            Not Before: Mar 24 20:04:51 2026 GMT
            Not After : Mar 31 20:04:51 2026 GMT
        Subject: CN=69c2ee63-15d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:00:70:02:98:95:a0:32:65:2e:87:33:90:9a:
                    8b:31:eb:46:03:c4:01:3c:d8:c9:bd:85:2a:ae:17:
                    a5:48:fe:2a:c7:ff:d8:19:7d:c7:ab:01:a4:38:d9:
                    6a:0a:9b:a8:97:bb:92:a8:ae:d6:db:05:d7:19:bb:
                    c2:5d:c0:07:5e:e6:f0:84:37:c3:6b:a8:b4:65:e4:
                    b3:27:37:42:c0:07:6a:71:54:a6:61:8f:02:bd:9a:
                    fc:31:78:fd:e6:21:da:22:ea:d9:b2:ef:a8:c3:d5:
                    1c:1e:45:3d:bc:0b:bd:be:80:64:85:e8:a4:c8:03:
                    cf:2e:d8:a6:79:c0:ef:b2:e7:a6:9a:0b:8d:34:cb:
                    60:48:71:7a:31:96:01:9f:ff:07:d0:35:b1:b3:5e:
                    4e:96:76:95:e4:55:5b:0d:24:7a:82:68:32:4f:e8:
                    99:43:7c:52:9c:d3:60:5a:a7:09:cc:5c:ca:8d:2f:
                    10:52:a7:94:ab:ca:fb:d8:0b:54:13:a4:b8:d1:32:
                    38:8f:e7:4d:7a:46:bc:6f:86:0d:c9:6b:87:7a:30:
                    b4:05:99:77:7d:9b:eb:e8:6e:46:56:65:4d:57:62:
                    3b:22:db:c2:24:18:c4:5f:73:e3:c2:d5:98:2e:f8:
                    ae:57:1e:43:24:bd:29:da:da:81:32:51:5f:6a:1f:
                    c7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:18:D2:AB:8F:A7:46:EB:1D:F9:76:1C:86:9A:71:99:0C:F9:8C:9D
            X509v3 Authority Key Identifier:
                keyid:B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:2b:56:d4:6d:22:eb:e8:a7:86:3e:04:9e:af:e9:7c:a8:ec:
         10:ae:8a:e2:1c:c5:43:40:d5:36:16:f2:d4:0b:ca:19:24:06:
         09:ab:d3:aa:c7:1e:ee:7f:f5:52:89:6f:ee:31:da:bc:59:cd:
         fc:af:03:1e:09:e3:55:b2:fd:4d:e8:cb:78:87:28:a2:ed:d5:
         69:94:41:c6:d2:0a:a6:77:72:01:1c:ec:a9:26:22:0f:d4:c4:
         22:15:f6:ea:e9:9e:83:e9:64:3a:8b:62:fc:27:30:5a:ef:2c:
         99:0f:dc:b7:25:ec:72:37:bf:e2:75:2a:20:95:4f:27:e2:95:
         84:80:19:e0:5d:18:31:45:61:27:bc:b4:f1:fd:10:b4:ed:9f:
         4d:48:e8:f1:78:ec:af:a8:09:e0:da:a9:bb:e1:b5:bd:a4:34:
         e7:e1:43:e0:61:a0:5c:42:12:ad:14:ce:b9:47:36:82:e6:1c:
         cf:8e:11:d5:9a:f7:69:e6:f8:5f:d4:8c:bd:e7:64:f0:e9:ae:
         e6:5b:c2:ef:d4:03:c7:d0:ad:96:fd:4d:dc:ba:39:08:e0:8c:
         3e:b2:b0:73:94:ac:26:ca:0e:c6:e2:a6:c4:74:69:c8:9f:b4:
         09:82:e8:e0:70:b1:f6:a3:58:57:5f:d8:67:33:e7:43:6d:c1:
         fa:1e:b1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:23 2026 by rpki-client