Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
File:                     mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft (raw, json)
Hash identifier:          YWrVUXNuwyTdtWSTaJkzvbAGcgo+qg2bKbbAJ/Vrf4U=
Subject key identifier:   A2:D9:36:6C:6E:F5:BA:98:C0:A1:E6:23:69:BF:3E:B2:32:73:4E:56
Authority key identifier: 9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70
Certificate issuer:       /CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70
Certificate serial:       026E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
Manifest number:          025D
Signing time:             Wed 25 Mar 2026 01:45:34 +0000
Manifest this update:     Wed 25 Mar 2026 01:45:33 +0000
Manifest next update:     Wed 01 Apr 2026 01:45:33 +0000
Files and hashes:         1: mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl (hash: 3wlPAR6FLn1qEUBz3c1BOK3Ddzq45dgr9QFz6ykTEcM=)
                          2: D8D317ACE7CE11F0AC86B9F45C6F56BC.roa (hash: 1IF3HCjLUpn5Rqg27GBvL6hXv6iteBjvIyKUpAO7Dio=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl
                          rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB21D, serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70
        Validity
            Not Before: Mar 25 01:45:33 2026 GMT
            Not After : Apr  1 01:45:33 2026 GMT
        Subject: CN=69c33e3e-aa16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cb:d4:e7:b2:59:1b:f4:1b:e0:84:c7:df:18:
                    cc:56:bf:7a:4d:94:e8:85:8c:6f:7b:8d:9b:b9:24:
                    8e:51:3d:5c:51:e9:6d:19:43:55:ae:d5:a3:3c:1a:
                    4f:03:2c:bb:25:c6:f8:e6:1b:c0:5f:49:e1:21:0c:
                    42:51:bd:72:1f:02:0c:94:f8:c0:77:67:d3:2e:50:
                    b8:f8:9b:9b:06:c1:ae:dc:0d:de:e7:57:9e:39:63:
                    3b:86:d1:86:37:00:4b:d1:21:ae:bb:5e:84:a8:27:
                    fd:a8:c2:39:32:c2:2e:11:14:bb:dd:39:15:72:ab:
                    6d:64:15:cf:d0:48:35:29:9d:37:b6:83:8d:74:c7:
                    eb:20:26:db:94:79:e3:e8:d9:d1:24:0f:3b:1c:9b:
                    3e:44:2d:63:d0:ce:d4:06:7a:aa:d3:ae:e6:12:79:
                    f3:e4:58:43:83:53:3c:e8:07:22:92:cc:35:de:2b:
                    f4:c4:1b:ca:a2:ef:52:5d:3b:74:55:eb:f5:34:5c:
                    6a:67:40:23:60:57:8e:24:56:db:08:10:fe:42:5a:
                    e3:df:3e:4e:47:6a:e6:8b:ee:28:26:67:dd:22:78:
                    85:64:0b:bc:8d:8e:ee:67:dc:e8:56:b8:71:8a:62:
                    41:e5:eb:19:8d:f6:7d:81:22:97:c9:79:3e:b7:bc:
                    bb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D9:36:6C:6E:F5:BA:98:C0:A1:E6:23:69:BF:3E:B2:32:73:4E:56
            X509v3 Authority Key Identifier:
                keyid:9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:61:f0:10:d6:96:a3:ce:49:c9:92:05:9c:8d:24:cd:99:6e:
         85:93:0c:71:e0:1f:04:0f:7e:ed:70:4d:e0:18:9a:8f:36:46:
         01:7f:97:c1:8b:72:0e:a6:b2:55:fe:83:20:7b:5e:6f:86:a9:
         3d:8e:7d:d2:29:cd:1b:4b:2f:22:fb:96:77:fc:d3:39:87:db:
         48:f2:87:4c:4b:41:82:8a:e4:ab:50:7c:6c:fb:b7:0a:5b:9c:
         1c:9a:b9:75:d5:fb:63:45:9c:c5:c0:c8:df:71:50:c0:87:ff:
         e8:51:65:c4:a3:d1:e5:9f:e0:c5:fe:53:fe:1f:49:28:3e:ce:
         d1:2d:3a:a8:96:e6:12:1d:32:9f:29:fc:53:e9:b8:28:5d:f5:
         ea:85:25:83:56:27:92:d9:8f:84:74:12:2f:f6:1c:0a:05:6d:
         a8:d7:f2:d2:a0:91:ba:f7:29:96:4b:72:f5:d4:23:6f:0e:f5:
         17:5a:62:09:e0:f0:9c:f4:41:fc:ad:8d:b4:d6:69:d4:a6:95:
         8f:64:7f:6f:36:b3:a3:5e:3c:da:b1:99:92:9e:53:ac:e9:b2:
         84:40:a9:eb:77:a0:92:69:73:ca:b1:2d:cd:18:d4:9b:24:df:
         77:8a:ae:1e:4e:d1:41:8b:42:52:50:ae:d0:37:4e:b6:3c:12:
         90:3d:39:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:48:55 2026 by rpki-client