Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
File:                     97sXL8rsr7-evvJQihVCZDOuyd4.mft (raw, json)
Hash identifier:          B/4s+3XR48jBRrnIoHvWsxowGBjWZXnLEGzmb5jyJ6g=
Subject key identifier:   7F:FA:AE:9F:BC:9B:FE:92:C1:9A:D7:61:24:8B:F1:27:DB:5B:8B:0E
Authority key identifier: F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE
Certificate issuer:       /CN=A91CEDD3/serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE
Certificate serial:       027E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
Manifest number:          0275
Signing time:             Fri 27 Mar 2026 01:34:03 +0000
Manifest this update:     Fri 27 Mar 2026 01:34:03 +0000
Manifest next update:     Fri 03 Apr 2026 01:34:03 +0000
Files and hashes:         1: 97sXL8rsr7-evvJQihVCZDOuyd4.crl (hash: kLFDsEBiZPTxV+6V0rt2jm1pftRNIXlGyk4tXiNGcxw=)
                          2: C714C5A6706211EDA9CCDB76C4F9AE02.roa (hash: PQz0xbKbyiBo1K+6lX1c97d5j/JyzQaM1t6G0/g1HBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl
                          rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 01:34:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 638 (0x27e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEDD3, serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE
        Validity
            Not Before: Mar 27 01:34:03 2026 GMT
            Not After : Apr  3 01:34:03 2026 GMT
        Subject: CN=69c5de8b-a91b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:75:ef:41:0b:0a:c7:70:98:f1:79:85:7c:c8:
                    c8:2f:87:3a:71:7d:62:89:08:1a:67:9b:72:3e:16:
                    2f:ce:07:d5:32:84:38:48:9b:10:dc:68:3b:ca:20:
                    96:7d:cd:e6:b3:be:58:b4:17:fb:7e:ba:fe:41:1f:
                    1f:1b:ae:09:4f:97:18:73:5d:f6:4e:74:c1:21:10:
                    aa:df:0a:67:e6:6e:14:bb:12:4a:dc:36:53:34:7d:
                    f8:37:0a:b7:06:0f:23:b7:e5:0c:91:37:8c:10:c9:
                    2d:53:70:e9:9b:ee:0f:cc:0b:80:09:d1:82:96:67:
                    1c:eb:2f:2a:ad:a6:0a:c5:20:c7:1d:33:65:e5:51:
                    d6:82:e2:8b:31:2a:10:70:86:a0:3e:b0:07:bb:ef:
                    9e:5b:78:84:98:c0:93:31:95:22:22:78:ee:0e:5e:
                    f3:b2:ea:1d:68:f9:cf:bf:be:90:43:c2:1e:53:f3:
                    7d:fd:da:40:57:7b:fd:72:d1:be:19:26:ec:57:d4:
                    ff:c8:be:d7:b0:52:51:96:77:13:12:62:a5:f1:bb:
                    09:c5:86:6e:c4:ec:42:12:78:bf:8c:8b:05:c7:3d:
                    57:f4:cc:9a:92:37:11:5a:1d:98:e9:cc:a9:07:c5:
                    b8:80:6f:3e:12:02:ce:59:47:25:cc:7b:9d:ac:13:
                    a1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FA:AE:9F:BC:9B:FE:92:C1:9A:D7:61:24:8B:F1:27:DB:5B:8B:0E
            X509v3 Authority Key Identifier:
                keyid:F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:c9:3b:f0:71:e8:41:37:96:d7:a1:fb:5f:f3:17:b1:aa:84:
         85:b9:c5:89:20:09:31:0d:6a:ac:0f:67:b2:00:4e:a4:f2:5d:
         fd:ac:97:9f:f9:3c:0d:91:67:18:11:19:06:ac:5a:e2:a8:b1:
         51:10:16:d8:09:95:67:7e:a6:0b:35:70:b4:fa:35:ae:2c:32:
         44:96:0f:38:01:4f:0d:9f:50:6b:e2:d5:f8:c2:32:8c:40:34:
         ab:02:7e:61:ce:d4:9c:aa:e9:a8:fb:d2:be:aa:c4:02:69:94:
         81:a8:bb:9f:5b:5a:84:63:a3:90:1d:7b:62:66:88:70:0d:ca:
         c1:a5:e7:e9:68:e1:3e:ca:d6:6f:27:c8:60:90:56:5e:07:02:
         9e:61:75:9d:70:04:b2:86:0a:7d:1c:0c:41:93:b0:d6:42:ad:
         fc:f8:6e:90:9c:d5:22:ea:48:8c:8a:db:0d:43:d8:01:ee:26:
         5c:e2:48:ee:74:2a:79:a9:21:63:96:5a:82:ca:5c:df:93:d8:
         dc:c2:62:23:a5:b2:4a:dc:c1:e0:70:82:99:ca:6c:70:47:de:
         2a:ae:81:22:91:df:ab:f2:d9:80:1a:ca:e4:65:90:c6:4d:bc:
         27:22:b2:7b:dd:7c:7e:7a:af:a1:42:76:0d:f3:e6:47:5e:44:
         1c:49:70:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:43:34 2026 by rpki-client