Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
File:                     dE87SIpTzJP_qdl19F0f9emsipw.mft (raw, json)
Hash identifier:          dw9T72Ygn1FX0MW2OEcYBN087ZYnyMkWN9V2+LZIxAA=
Subject key identifier:   FB:4A:BD:54:7B:92:95:23:73:BD:27:09:C5:0B:EF:CC:06:F7:9A:32
Authority key identifier: 74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C
Certificate issuer:       /CN=A91CC0C9/serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C
Certificate serial:       88
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
Manifest number:          88
Signing time:             Wed 25 Mar 2026 06:51:13 +0000
Manifest this update:     Wed 25 Mar 2026 06:51:13 +0000
Manifest next update:     Wed 01 Apr 2026 06:51:13 +0000
Files and hashes:         1: dE87SIpTzJP_qdl19F0f9emsipw.crl (hash: rk7jtq/4I8nYuceRbRiAz4BDGxlOLKrpsop/IjZ0W04=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl
                          rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:51:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC0C9, serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C
        Validity
            Not Before: Mar 25 06:51:13 2026 GMT
            Not After : Apr  1 06:51:13 2026 GMT
        Subject: CN=69c385e1-1275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:26:6c:1d:b1:59:ee:7a:b5:48:0a:0a:8a:c5:
                    64:5f:60:56:fd:4a:57:8e:ee:97:33:62:1f:4c:a4:
                    15:b0:d1:20:60:fe:eb:cf:e9:13:a0:11:54:e2:b5:
                    d2:64:12:b8:24:41:87:46:0a:af:aa:44:bf:64:ec:
                    77:c7:00:c2:4a:6a:96:b6:17:1c:60:3d:11:7a:87:
                    21:0d:47:81:7c:51:7f:c7:13:3b:85:3d:70:1b:b7:
                    fe:e0:8a:75:4a:2d:a9:a7:f2:64:d4:33:62:b2:2e:
                    5d:e9:2c:5c:fa:31:a0:8c:2e:17:d8:58:64:df:2e:
                    a2:25:a0:c8:7d:0b:69:8f:96:11:50:0b:de:dd:cb:
                    f7:83:93:9c:8f:b7:3f:97:de:7f:6e:42:fd:22:26:
                    47:91:8e:3d:e9:fb:5d:a0:88:3f:42:c9:4b:78:5f:
                    f7:2a:00:26:7c:28:3c:16:b5:9a:f7:f3:80:2a:d1:
                    e7:19:d4:98:6c:db:3e:74:a4:67:f6:f6:c5:df:47:
                    9d:22:32:0a:f4:5e:dd:c2:dc:66:c8:75:88:97:20:
                    a9:91:c0:b4:74:0e:f5:36:3d:7c:11:61:8f:ad:b6:
                    f7:5f:5d:b0:14:e0:d7:c8:1f:d7:23:95:33:6c:44:
                    6a:72:8c:8e:8e:07:91:df:37:86:14:64:99:b2:36:
                    01:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4A:BD:54:7B:92:95:23:73:BD:27:09:C5:0B:EF:CC:06:F7:9A:32
            X509v3 Authority Key Identifier:
                keyid:74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6b:71:42:3f:40:3a:b6:b6:74:ab:bf:1d:6f:4d:da:6b:a8:
         f0:91:aa:6e:93:11:14:12:5a:e0:12:e6:00:42:50:9b:27:dc:
         83:8b:95:a1:86:c5:1f:ca:63:81:ee:02:3d:5a:b0:fa:f5:32:
         90:ba:7d:2c:e6:0c:80:f0:66:71:f4:ca:b5:52:d8:37:8d:f8:
         31:1f:31:23:cf:ba:04:b6:c5:b7:a0:9b:8f:f2:c5:21:13:2d:
         9c:f5:87:97:dd:ab:12:de:36:e3:b4:58:9c:20:09:29:19:ee:
         76:6b:23:88:e3:1b:e9:9e:15:5d:0f:62:a7:25:e3:e0:74:46:
         49:14:38:79:2b:a3:55:15:c6:3e:6a:c8:13:4c:37:b5:e1:63:
         bf:8c:b4:98:33:26:fc:ab:71:18:fd:1f:06:d7:49:80:4b:f5:
         ec:e0:d6:1a:bd:10:80:e9:63:d4:3e:f0:aa:c5:32:dc:31:a5:
         3c:03:13:93:9d:cf:1f:9c:08:5e:f5:26:6e:fc:8c:f4:9e:f6:
         bc:74:d8:33:ba:51:29:8d:25:cd:73:39:0e:6c:84:6d:19:eb:
         5a:c2:5a:e1:61:8b:4e:22:3a:12:00:a1:5a:5c:9b:1d:b3:d2:
         84:c9:72:99:c6:a0:e9:dd:04:5e:36:da:b8:3b:a7:4d:f8:fd:
         c0:02:3d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:21:53 2026 by rpki-client