Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
File:                     dyhBomMmMU6i5Dg0dd4xttzn26U.mft (raw, json)
Hash identifier:          uEVj7XoH97reqGqXdvCMd6iHl0bSBMahI/4AfXzks8U=
Subject key identifier:   93:70:30:40:D9:DA:20:F1:EA:FB:D2:2E:C6:62:E0:CB:61:FD:2A:8C
Authority key identifier: 77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5
Certificate issuer:       /CN=A91C9324/serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
Certificate serial:       03EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
Manifest number:          03CC
Signing time:             Wed 25 Mar 2026 00:20:44 +0000
Manifest this update:     Wed 25 Mar 2026 00:20:44 +0000
Manifest next update:     Wed 01 Apr 2026 00:20:44 +0000
Files and hashes:         1: dyhBomMmMU6i5Dg0dd4xttzn26U.crl (hash: fbp644ZNgAZ0n4ElSG1VxHBEHzv7IUTI4PtCVvPHrd4=)
                          2: 73E82004BCA111ED914D176DC4F9AE02.roa (hash: T+dFvi2GR1y0VbmfBh2DST8Ey8SHcUJKlSrtkpwhtKY=)
                          3: 81F21152D1BD11EC9D8FBC52C4F9AE02.roa (hash: IRdNJjTPwpC5362Cgsln4BPVYZtI5Af6DonyUMaqG9I=)
                          4: B5A58DFAA1DB11EDA7229653C4F9AE02.roa (hash: UkES/CxICv09d0uGUMz/gs2WBJwtenSFnqdcWW4puhI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl
                          rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1006 (0x3ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9324, serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
        Validity
            Not Before: Mar 25 00:20:44 2026 GMT
            Not After : Apr  1 00:20:44 2026 GMT
        Subject: CN=69c32a5c-ad3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:99:75:f4:17:3d:b0:c9:22:df:ec:79:a7:ad:
                    10:e1:41:3d:d0:16:6b:4e:e8:c6:57:25:dd:ad:b4:
                    3f:d5:ec:74:27:36:c9:75:57:f2:dd:1a:1d:ef:46:
                    54:4f:88:d6:40:63:bb:05:a7:10:92:49:9b:eb:6f:
                    2e:3b:27:76:ad:63:fd:0e:ba:38:f3:fb:75:5d:3d:
                    ca:54:23:09:18:88:d5:83:bd:12:1c:2a:0f:a1:b6:
                    83:d7:5b:1c:e9:c0:fb:f3:6b:d4:4c:da:c0:88:9e:
                    b8:c9:92:51:04:6d:ce:d7:2b:83:81:09:07:e5:cd:
                    de:c4:d3:d6:02:b5:c1:f5:4c:f2:67:3d:b9:c7:e8:
                    8b:20:e6:d6:48:1e:2f:57:50:fd:3b:9d:5b:8d:3b:
                    37:74:93:13:aa:76:7e:0b:36:c4:57:cb:b2:8c:de:
                    06:65:78:8f:26:cf:ca:a9:60:ec:87:c0:04:d9:c1:
                    14:23:47:0a:b8:1a:dd:fc:47:44:8a:87:1a:48:d6:
                    c0:86:6b:d1:90:93:5d:f8:da:00:8c:61:22:ed:51:
                    2b:10:ac:50:20:bc:f2:cc:91:12:80:c0:72:54:1f:
                    68:35:3b:79:f8:78:38:73:a3:ee:62:27:da:94:74:
                    42:a9:52:2c:69:57:e3:98:50:02:41:25:9f:30:22:
                    d2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:70:30:40:D9:DA:20:F1:EA:FB:D2:2E:C6:62:E0:CB:61:FD:2A:8C
            X509v3 Authority Key Identifier:
                keyid:77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:47:88:a0:87:77:09:16:45:7c:fc:56:5a:d8:d6:03:da:d9:
         74:58:dd:2c:ee:ba:e7:6f:de:5c:94:dd:47:02:82:8a:73:ab:
         1f:8a:87:e8:fd:be:7a:ae:bc:60:6b:0a:fc:4e:41:7e:39:43:
         2e:b7:a2:32:37:3f:5b:8c:7d:a4:1d:42:94:36:b6:c8:7d:c1:
         73:72:75:20:c6:82:db:72:99:4b:7c:08:d3:a0:80:36:10:ce:
         43:ea:94:15:57:19:e9:28:3a:6f:0c:cc:b1:31:7c:c3:93:12:
         8e:d1:de:70:26:cb:a8:c0:e7:a8:b2:d3:28:44:fe:60:42:05:
         4c:34:74:c5:73:57:5b:8e:2b:34:ae:96:1a:e0:60:1c:1b:32:
         32:99:4f:a5:64:4f:1a:5e:2e:0e:c3:2b:15:fd:9e:a2:cc:40:
         1e:07:33:c1:d7:bf:4d:53:f4:80:ae:b2:c2:ce:f7:11:47:ad:
         c8:9f:a4:e5:23:72:91:20:a7:a1:37:b4:4b:ef:f2:72:1f:7f:
         c6:f6:88:cf:e2:c0:38:b7:94:0b:bc:0e:76:c8:05:05:78:79:
         52:fc:97:fd:24:d9:b2:2c:f2:24:e0:3c:d3:bf:5b:6f:37:3e:
         5c:01:b5:98:81:c4:c3:eb:6d:d1:8f:73:0f:a3:72:cd:41:d3:
         ae:2c:cb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:14:42 2026 by rpki-client