Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
File:                     AfBcfqXyou38GDiX9YNZgrLPA78.mft (raw, json)
Hash identifier:          aOB0NFOo7hk7IIviv/YYmyZRzw//dia7KACwpE6gsdg=
Subject key identifier:   9F:5B:43:41:F1:76:7F:CB:CC:F5:4E:1A:5D:EF:27:FC:3F:A9:0A:38
Authority key identifier: 01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF
Certificate issuer:       /CN=A91D09BC/serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
Manifest number:          0105
Signing time:             Wed 25 Mar 2026 05:23:49 +0000
Manifest this update:     Wed 25 Mar 2026 05:23:48 +0000
Manifest next update:     Wed 01 Apr 2026 05:23:48 +0000
Files and hashes:         1: AfBcfqXyou38GDiX9YNZgrLPA78.crl (hash: nQL7zD1enIlNqAuqefsrilvlvA7YS1+uv7e7sjkD6vw=)
                          2: 3CA96D46FF2E11F088116B6D89EE528E.roa (hash: 9k26GgzaF7JUBXzdAr1iBX77IktY67fjp/QCPFOAclU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl
                          rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D09BC, serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF
        Validity
            Not Before: Mar 25 05:23:48 2026 GMT
            Not After : Apr  1 05:23:48 2026 GMT
        Subject: CN=69c37165-c343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4e:30:e7:5e:e2:44:4d:43:f2:ed:97:69:f5:
                    90:ac:11:f5:be:df:3c:c8:bf:f1:aa:eb:65:90:c8:
                    4e:e9:31:ba:73:82:fd:f7:c6:89:e2:1d:e0:74:38:
                    9a:71:43:ab:8e:9a:0b:fd:da:bb:81:4c:8b:e0:56:
                    56:60:7f:b6:b3:86:c2:71:57:b9:f3:34:96:af:e9:
                    29:3d:53:3a:5d:d2:04:1e:64:15:9b:91:50:7c:85:
                    59:9f:59:2e:a0:87:03:72:e7:d2:17:2a:77:96:3b:
                    51:75:c4:ce:34:1d:80:54:b8:36:be:2a:a9:7f:ca:
                    93:8e:f4:ae:bd:8a:78:ba:47:ab:d8:f9:d8:6d:ab:
                    c4:f3:5b:e8:12:44:b9:63:91:3f:dd:1f:df:15:fd:
                    dd:31:c1:64:d2:41:e9:99:82:d2:f7:80:c8:95:b4:
                    70:a6:f7:74:88:84:5a:ec:0f:98:41:57:21:33:11:
                    f2:bb:5d:58:2b:b9:d6:42:c1:da:ce:cb:da:bf:aa:
                    7a:5a:c7:7e:cd:88:81:70:89:33:1c:07:e9:a0:56:
                    a8:3d:ba:ca:0e:7f:e7:a5:cc:3f:0d:00:07:be:99:
                    de:f4:c7:19:0e:e2:16:bd:d2:f2:fb:f8:cd:8d:f9:
                    00:64:2f:85:9f:f7:d0:67:ed:a3:1b:5d:7e:af:c1:
                    aa:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5B:43:41:F1:76:7F:CB:CC:F5:4E:1A:5D:EF:27:FC:3F:A9:0A:38
            X509v3 Authority Key Identifier:
                keyid:01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:e8:f0:67:50:61:32:e6:9d:d0:f5:45:b3:0a:9e:63:18:01:
         5d:49:54:3c:d3:1f:f9:8a:02:cd:32:13:4f:55:6b:61:74:78:
         6f:a1:54:72:1c:91:fa:56:32:f7:cd:00:f8:21:dc:3c:41:35:
         0c:38:78:86:e6:11:db:0a:74:a2:cc:ea:a4:b7:21:9c:a0:47:
         7e:23:34:06:1d:53:34:a4:f5:40:1e:71:1d:d2:30:51:dc:af:
         4d:53:47:d7:10:f9:31:ef:e9:80:5b:66:f8:03:d9:92:38:6d:
         58:af:3d:b0:80:a8:ad:0e:d9:b8:69:75:31:f6:9d:e8:c4:c5:
         f2:ab:73:57:a1:50:d7:ee:60:b0:f1:d1:66:25:71:ce:99:ce:
         1a:d7:7d:ff:9f:3e:e7:97:c9:f7:b4:5c:2e:f3:9d:90:67:bc:
         f0:4f:c6:19:d9:9d:a5:66:80:9c:8c:5b:b0:f3:8a:82:4a:eb:
         40:1a:2f:6d:9c:f1:b9:92:ec:9a:e2:e8:52:57:bb:7a:01:a9:
         64:fc:2e:48:5b:6d:f7:6f:07:3e:45:91:2a:74:a9:4d:3f:eb:
         2f:cd:fc:d1:1a:ce:24:f6:54:8e:e1:28:e5:91:22:88:ba:24:
         e9:b2:d2:4c:cd:f3:7c:44:14:0a:ca:bb:d4:e4:74:e3:c1:30:
         db:4e:22:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:06 2026 by rpki-client