Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
File:                     MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft (raw, json)
Hash identifier:          wN2RrfvoZfnhSAwR+0XdffCjyut3uO6XwOz7/uDobvE=
Subject key identifier:   65:86:2D:FE:F2:DB:7F:DA:E0:99:32:7F:6B:70:80:77:99:BF:F8:1E
Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
Certificate issuer:       /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Certificate serial:       026C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
Manifest number:          0250
Signing time:             Wed 25 Mar 2026 02:00:26 +0000
Manifest this update:     Wed 25 Mar 2026 02:00:26 +0000
Manifest next update:     Wed 01 Apr 2026 02:00:26 +0000
Files and hashes:         1: MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl (hash: MWq8eQ5zQcZ5qdn/c2VVApkmfMY+pGUEU5LoZQpUmTw=)
                          2: ABC69EAEEE3C11F0B9A6920D4D6F56BC.roa (hash: HzpFQGz5CVxBl9sbcVJvLDzRvcHkaj2Jp7niriD1Y/8=)
                          3: E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa (hash: gHUta7y8pC3d2TOZ0QshxXr62KyKz6DtLyfNYCQhLTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
                          rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 620 (0x26c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
        Validity
            Not Before: Mar 25 02:00:26 2026 GMT
            Not After : Apr  1 02:00:26 2026 GMT
        Subject: CN=69c341ba-9e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e2:2f:08:e8:81:32:88:d8:d2:df:7a:33:6e:
                    6e:06:fa:05:f1:a4:17:26:c5:8b:2c:e7:d0:70:cf:
                    8e:e9:ea:7e:70:91:82:ad:ab:5c:36:e4:0e:2b:97:
                    f5:23:68:3a:84:5a:d4:fc:b7:b8:44:02:d0:d8:1e:
                    7c:22:0f:a4:40:2a:10:aa:c3:7f:ba:ed:57:e2:9e:
                    b5:22:7e:81:0f:5f:a1:eb:6b:e8:a6:09:e3:0c:b3:
                    18:53:5d:6f:f0:b8:de:a1:b2:e9:09:b8:7d:2e:90:
                    ce:33:5a:4e:59:e1:42:2f:bd:1b:47:f0:d9:b6:81:
                    fe:7c:0c:15:ec:49:e2:1d:5d:30:eb:72:b7:02:23:
                    6b:f8:68:72:79:9a:6d:53:3d:79:99:1f:34:70:b7:
                    93:b4:42:f3:c0:fa:68:f5:77:6b:2c:2b:a6:0d:39:
                    3a:1f:52:00:05:d4:17:a8:28:99:0e:28:68:05:55:
                    99:67:bb:f0:40:af:be:d1:a1:9b:a4:0d:06:f7:72:
                    d3:99:35:56:fe:8a:c9:94:97:e2:ad:1d:ae:47:c0:
                    ff:7d:59:59:9b:9a:f3:67:4b:c0:48:f5:76:2b:16:
                    cf:5c:90:c4:07:95:8b:9b:10:09:1f:a6:b8:73:b8:
                    d6:85:d7:d1:71:f3:dd:fd:ad:d1:c4:3e:16:e9:95:
                    a4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:86:2D:FE:F2:DB:7F:DA:E0:99:32:7F:6B:70:80:77:99:BF:F8:1E
            X509v3 Authority Key Identifier:
                keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:83:ef:d2:0d:6c:0e:1c:82:ce:d5:77:8b:c7:78:b3:da:db:
         ba:a4:2d:14:f6:07:40:1d:da:d1:d9:d3:66:5c:ee:c7:eb:4a:
         79:0f:af:d9:01:d4:59:b6:9a:9b:9b:35:c4:ad:78:14:28:ba:
         b3:be:a2:f1:51:ad:b2:fc:c5:35:e1:66:02:45:cb:3b:f7:0c:
         b7:0f:f5:c2:b4:86:18:6c:0e:5a:4b:fb:e6:86:40:d3:c9:42:
         df:67:8f:b2:9e:6b:03:bc:09:84:f8:db:b5:e0:87:73:9d:d2:
         58:73:d7:95:4d:8f:b7:3c:19:27:0c:73:21:2f:81:33:3b:b7:
         2a:b9:e8:c7:b4:56:4e:4d:ed:0e:97:a4:76:a2:5a:d4:63:41:
         33:ab:a6:37:76:6e:20:8b:a2:c1:ba:f6:39:b0:d4:57:06:e1:
         7a:7c:3c:1a:2c:97:2e:45:14:d0:27:c6:b0:fa:fa:8e:26:d2:
         78:ff:9f:ba:11:e8:cc:20:90:12:42:68:e9:2c:80:dd:56:29:
         15:ec:84:7c:df:4d:90:95:14:17:db:53:a0:eb:7d:2a:1e:1c:
         c0:28:d0:d0:6d:d6:09:60:11:e3:c8:a8:eb:b4:dc:5f:56:66:
         a5:32:09:73:ed:77:61:6a:34:62:d4:2d:ba:98:56:23:8a:a6:
         57:fc:a8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:41:29 2026 by rpki-client