Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
File:                     5CnUKeZreXs9ihy-JJFXetw4pI4.mft (raw, json)
Hash identifier:          y7KT1cX7E07+OaPAjmH3DxUleQX6l7/ylcTckOI97lM=
Subject key identifier:   64:B9:1E:07:9B:F6:C6:80:1B:EE:0A:69:B7:BA:1A:6A:0E:B6:94:17
Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E
Certificate issuer:       /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
Certificate serial:       01A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
Manifest number:          017C
Signing time:             Wed 25 Mar 2026 04:17:01 +0000
Manifest this update:     Wed 25 Mar 2026 04:17:00 +0000
Manifest next update:     Wed 01 Apr 2026 04:17:00 +0000
Files and hashes:         1: 5CnUKeZreXs9ihy-JJFXetw4pI4.crl (hash: 1SCZuYtGQH7CCNUVYjoiZbU8KDB0sBMOlQ0kjnpuSd4=)
                          2: A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa (hash: 1qP+GrX3zgK9BKEEg6Dkyc1WLFMQUS+ZMJmqVReMcJ4=)
                          3: 06FA65A81F2711EF98DA2926C4F9AE02.roa (hash: NZ41GePO+wVrHhL385esVXgxdvkRTvbJf+OBmKNcFbQ=)
                          4: 359CBDB28D0D11EF90882959C4F9AE02.roa (hash: NZgLuzLqNee1fYy4mFTHbT3bJ6KftmgEr6+x/+S42oQ=)
                          5: 25ED44B41EE411EFA62B1335C4F9AE02.roa (hash: PUGLK3hnFXvhVOmJO/mpJIqVNCfFg3Hqylh+LQYF1dI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl
                          rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC711, serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
        Validity
            Not Before: Mar 25 04:17:00 2026 GMT
            Not After : Apr  1 04:17:00 2026 GMT
        Subject: CN=69c361bd-77cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2f:ba:86:7e:da:3a:af:53:ff:bf:70:7b:0d:
                    20:54:f4:ed:24:34:bb:24:05:79:6a:41:54:1a:f0:
                    14:01:9d:0e:4a:3c:a3:02:e5:05:63:be:3d:e7:46:
                    ad:8f:bc:7c:b5:f7:f9:1f:81:c4:9a:10:55:ad:7a:
                    7b:79:93:38:40:45:a7:57:47:50:a9:19:32:d2:ba:
                    3a:50:14:a4:25:66:73:b7:86:2f:c3:01:04:0d:ce:
                    1d:54:f2:d3:1e:89:57:14:78:c5:b1:36:75:5c:b9:
                    0d:59:3e:34:43:6c:98:6e:0d:8d:14:95:81:6c:2c:
                    6b:75:95:c4:91:53:26:63:7c:a9:49:db:ce:d0:90:
                    36:33:f7:16:41:6d:79:ae:b6:1b:c5:59:6a:af:03:
                    9b:42:56:8a:c8:bf:11:11:34:2a:3f:dc:19:1b:ed:
                    f4:68:e3:3d:b0:4f:7f:00:94:27:c9:b9:8a:f7:83:
                    a9:3f:2f:34:a3:0b:4c:35:cd:f9:bc:e1:7f:35:ca:
                    14:75:f2:b6:d6:32:26:07:2a:78:93:19:e1:e6:d7:
                    b0:f9:f8:d2:02:a9:ce:39:2b:7c:94:66:b5:88:34:
                    a2:c6:cf:6b:84:0e:5f:f9:df:be:e3:f4:e2:11:d6:
                    6a:90:e6:d2:64:84:42:7b:58:1a:3c:6e:ec:f9:48:
                    d9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B9:1E:07:9B:F6:C6:80:1B:EE:0A:69:B7:BA:1A:6A:0E:B6:94:17
            X509v3 Authority Key Identifier:
                keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:48:8f:ff:8c:e3:39:37:de:a8:e2:4c:67:ca:e4:a2:54:d1:
         b9:45:cc:95:40:d3:4f:84:aa:58:d7:f9:dc:b6:f2:92:8c:48:
         d7:10:7a:ad:bd:24:bb:3e:6d:df:b9:f5:26:be:34:83:23:2c:
         bf:f0:1f:3c:4a:97:a2:c4:4b:db:08:7f:14:b3:0a:01:bb:34:
         e8:2e:c0:7a:69:52:7e:97:12:5e:7a:23:88:aa:cc:66:bf:9a:
         93:b4:96:2c:b4:8f:08:73:2b:d6:24:0c:73:e5:85:fb:ef:80:
         25:cd:d7:2c:d5:62:d3:1d:54:80:6e:5c:a1:2b:00:08:3f:44:
         28:24:2a:ed:da:67:c1:78:82:f0:11:4e:50:16:69:ca:76:c5:
         a5:7f:31:1c:8a:50:f1:12:76:45:ee:86:40:3d:4d:9a:2d:9d:
         f0:45:c6:b0:b7:97:f8:b8:f1:36:ba:9c:e0:07:ab:62:42:0b:
         ec:53:71:8d:2f:19:67:53:47:82:75:8b:68:e0:c9:2d:43:39:
         9e:0a:cd:77:a3:44:95:ea:93:59:48:26:00:d8:4d:1c:49:9c:
         f4:c6:f0:5b:db:7d:b8:01:62:b3:ee:09:df:ce:75:65:93:10:
         ba:a9:9b:f0:75:c1:0c:44:16:da:4d:f8:03:d1:f0:7e:e8:12:
         79:97:0f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:11:59 2026 by rpki-client