Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
File:                     nE_-Zd6jUjPTnocCI4VlV03tRm4.mft (raw, json)
Hash identifier:          z0rXq2iG2rcmHF7pEQ+9cfWjVpN7SgCPkcPZXChGf4Q=
Subject key identifier:   D7:97:F7:B2:CA:20:B4:B3:61:BF:8D:3B:0B:E9:D6:73:F0:F9:5E:0F
Authority key identifier: 9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E
Certificate issuer:       /CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
Certificate serial:       07D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
Manifest number:          1B86
Signing time:             Tue 24 Mar 2026 16:50:45 +0000
Manifest this update:     Tue 24 Mar 2026 16:50:44 +0000
Manifest next update:     Tue 31 Mar 2026 16:50:44 +0000
Files and hashes:         1: nE_-Zd6jUjPTnocCI4VlV03tRm4.crl (hash: RY+a5rS5djEQ/IUJA1MqOExfExmpBf3IrSZ2dxvw0TU=)
                          2: C56AF018E98B11F0A24D3E834F6F56BC.roa (hash: MIF4G38mLftqnqeE9T0qy+6BeKMKul+rB3EiPJaG4sA=)
                          3: C6BB442CE98B11F0A24D3E834F6F56BC.roa (hash: fQvlcrwBQbuojkhr1MzXvqt8o4OCenjdJMRcowohAyw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl
                          rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2006 (0x7d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAA4E, serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
        Validity
            Not Before: Mar 24 16:50:44 2026 GMT
            Not After : Mar 31 16:50:44 2026 GMT
        Subject: CN=69c2c0e4-3deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:63:49:60:f1:3d:3e:04:e0:6b:62:49:43:59:
                    26:10:dd:85:f1:ca:43:7c:46:e1:4d:a4:ad:64:06:
                    d6:bd:af:6c:1b:e2:1d:97:cf:aa:73:8b:53:15:4c:
                    bd:aa:5d:2d:58:e8:bb:76:c6:8a:54:96:ba:20:4c:
                    71:15:94:c4:94:10:79:0d:5a:22:50:83:af:60:00:
                    47:42:4f:1b:f4:7a:09:f6:9b:ae:99:3f:db:44:5f:
                    dc:37:e3:e6:7c:e0:e6:6f:2e:9c:8f:2c:70:98:9c:
                    c0:d2:6d:e9:ba:7e:50:e7:fa:e8:d1:5b:3e:65:e2:
                    84:5f:10:03:32:be:af:aa:ba:b3:17:63:33:7a:ac:
                    f1:f2:b7:d9:eb:9b:4d:30:27:f0:13:8f:16:a1:83:
                    e7:fa:3c:89:69:50:19:6b:0c:4c:69:3e:d9:ed:03:
                    70:03:69:6d:bf:96:b2:11:cb:bd:b2:61:59:df:c8:
                    22:69:5d:50:fc:90:44:1e:54:74:3c:8e:75:7d:cd:
                    1c:c9:0d:48:80:77:2d:43:20:20:17:90:60:e2:c4:
                    cf:aa:35:45:37:f9:f2:b7:60:61:57:a4:98:47:7e:
                    21:4c:2b:3f:38:d5:a5:af:2c:f9:5b:31:53:7e:11:
                    6d:d9:66:b7:22:c1:4a:ad:04:b9:86:51:e2:fa:84:
                    6b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:97:F7:B2:CA:20:B4:B3:61:BF:8D:3B:0B:E9:D6:73:F0:F9:5E:0F
            X509v3 Authority Key Identifier:
                keyid:9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:3e:da:57:f1:32:52:39:74:10:e4:d3:4c:0a:41:58:86:d3:
         2e:a0:2e:e1:18:69:88:da:2b:06:34:a3:e5:31:cd:2a:f9:c2:
         61:f2:b3:5c:81:72:69:80:fe:22:99:85:14:d6:0a:ff:c2:51:
         b7:91:dc:95:2b:ab:55:6c:f1:52:77:91:48:ed:f5:6f:e8:69:
         ec:6a:ba:6a:00:96:dd:af:18:df:da:15:d2:c9:0f:df:a2:25:
         fc:57:b5:18:ce:22:6c:2b:6d:ed:a1:b5:04:b5:f1:2e:fe:bb:
         c5:0b:f4:11:a3:03:46:59:c6:34:af:76:4f:44:ce:6d:be:e1:
         ee:3a:1b:e0:c1:18:d8:75:84:41:fd:14:40:22:9e:f6:74:df:
         99:0d:3c:7c:a7:bd:05:19:74:2b:05:c4:79:a7:6f:29:b1:6b:
         96:41:3d:c9:84:9b:66:22:a0:05:20:cf:0a:57:03:69:90:68:
         43:75:9f:eb:d9:fd:89:ed:a6:ff:c3:3f:2d:10:b3:87:46:ec:
         4a:80:e4:3f:4f:84:35:4b:58:34:74:9d:6b:99:0f:5d:54:f4:
         d3:a6:32:ce:db:4a:f4:ee:e8:20:d6:83:30:3e:53:c0:15:46:
         07:6d:9b:db:5e:33:de:68:b2:1b:bb:29:b2:12:b2:21:82:55:
         69:58:e3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:10:08 2026 by rpki-client