Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
File:                     0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft (raw, json)
Hash identifier:          Fxp3pHYzOMNdDm7QGip060mSKDpPp+940BsBjgNS5/A=
Subject key identifier:   FC:4C:17:37:3F:32:4A:CC:9B:3B:44:B4:82:E7:E7:7A:E8:48:8D:63
Authority key identifier: D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7
Certificate issuer:       /CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
Certificate serial:       0765
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
Manifest number:          073C
Signing time:             Tue 24 Mar 2026 21:31:16 +0000
Manifest this update:     Tue 24 Mar 2026 21:31:16 +0000
Manifest next update:     Tue 31 Mar 2026 21:31:16 +0000
Files and hashes:         1: 0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl (hash: Kh09tbXcfWdhwdPH1nYF8gwnwItbzLoyaB1nTFvkJW8=)
                          2: 3B03239684CE11EF9D90A966C4F9AE02.roa (hash: AF8Guce4RO4Svw7K45PwgWF9YPRlLDoCQm5gXdcSPh4=)
                          3: 6A8A22841DCE11EF85CAC83EC4F9AE02.roa (hash: ihifcD/OgCnAwEJmq3VgBulyBofXdrsgswWXwBfpEAs=)
                          4: DD3C61621DCD11EF88E9EE3DC4F9AE02.roa (hash: VjbMobQvQG1H/kBq1Ab65vmDSUppWTgILjZtbnNdDsk=)
                          5: 178E201EA51911EDB711B90AC4F9AE02.roa (hash: 2y6pngdy3VaJox0s8pfK9rakpIMWuD3VB+a0Z5gajdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:31:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1893 (0x765)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D26C6, serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
        Validity
            Not Before: Mar 24 21:31:16 2026 GMT
            Not After : Mar 31 21:31:16 2026 GMT
        Subject: CN=69c302a4-284c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d3:b9:12:dd:73:8b:5d:ca:0f:36:1c:2a:cd:
                    d1:d8:d7:0b:8b:9f:ac:fa:e6:0b:e5:2e:ea:84:02:
                    21:60:51:b8:07:3b:ed:87:99:e5:33:eb:f7:40:77:
                    24:ab:f4:15:6f:ac:6c:3b:fb:b1:26:74:15:37:d5:
                    bf:25:9c:98:b9:80:96:ad:71:00:ce:ef:69:5f:8f:
                    43:18:9c:4c:97:a0:ab:e7:36:3c:ae:1c:7f:71:8b:
                    73:10:b2:77:10:24:85:e6:0d:36:44:f9:be:69:ec:
                    93:23:af:8a:9c:76:8d:8c:4f:94:83:1f:13:82:c6:
                    3f:7d:f0:e9:30:69:62:d0:53:2e:6c:4a:4e:3d:8f:
                    2d:bd:c4:37:cc:bf:57:d2:28:bc:f2:ef:ef:a4:f8:
                    ef:2f:00:5d:61:da:9b:ba:c8:48:29:07:59:00:21:
                    6b:41:4d:c4:0b:65:2e:d7:5f:59:d5:c0:b3:a1:80:
                    e6:b0:0f:b5:06:c6:7c:a7:dc:6e:57:68:c9:7f:f2:
                    59:d8:f3:7d:1b:4d:8c:a9:f6:f1:51:7a:83:14:eb:
                    30:a8:14:ba:5d:8d:75:08:1d:95:a5:ee:b0:9d:ee:
                    70:9d:91:a7:bd:10:d7:81:17:6f:7e:6a:06:55:3b:
                    5a:38:5f:b2:77:64:77:e0:a8:07:89:e6:85:95:89:
                    e0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4C:17:37:3F:32:4A:CC:9B:3B:44:B4:82:E7:E7:7A:E8:48:8D:63
            X509v3 Authority Key Identifier:
                keyid:D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:15:c1:74:5a:6c:6a:a8:50:11:be:3a:51:42:26:67:46:62:
         d2:a8:8b:b5:93:02:63:98:4d:8e:24:ec:f9:d7:7c:13:35:cc:
         e5:c1:97:ff:22:2a:a7:82:69:67:97:f4:33:72:b6:74:54:33:
         31:ef:a4:dc:4c:21:9b:1c:cc:04:64:25:3f:1a:a8:a5:7d:10:
         ba:45:11:3d:4e:b0:c7:be:d9:36:89:95:35:7a:12:54:98:62:
         53:4d:79:90:bb:04:26:dd:16:c4:77:d5:c6:c0:f3:f2:dc:a7:
         bf:ac:f5:85:37:2a:36:5c:0e:d6:de:25:af:fd:23:24:a1:e1:
         61:29:4a:e5:52:b6:8c:6a:d3:0e:4d:75:44:a5:d7:72:ce:e3:
         28:7e:0d:54:e0:05:5d:26:3e:17:4c:60:0a:df:00:e5:41:e8:
         d1:25:96:4e:a4:8f:f1:20:bf:5d:82:53:fb:4e:52:a6:f4:82:
         c2:bf:96:55:de:a5:e8:05:3f:80:04:1c:f3:9b:e7:36:25:88:
         10:f6:1b:21:21:e1:bd:a1:76:88:c7:57:64:0f:c3:76:76:c1:
         6a:a5:f4:d7:ff:2e:87:86:b5:5e:1f:d5:5a:17:58:9f:07:1e:
         41:a6:a8:87:d8:39:92:e4:99:36:1f:44:74:dc:db:71:04:63:
         63:6f:78:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:14 2026 by rpki-client