Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
File:                     g675MVKyUIy8gKNifjon6HvP3so.mft (raw, json)
Hash identifier:          sfSZNn7CmzcAuRMlLRLC8RrrsYYZ53dL5o65e81iV0c=
Subject key identifier:   E6:DC:43:43:83:33:32:3A:70:C9:D7:0C:2F:BD:2A:DC:28:C9:1C:83
Authority key identifier: 83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA
Certificate issuer:       /CN=A91D298D/serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA
Certificate serial:       0898
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
Manifest number:          087F
Signing time:             Thu 26 Mar 2026 20:32:34 +0000
Manifest this update:     Thu 26 Mar 2026 20:32:34 +0000
Manifest next update:     Thu 02 Apr 2026 20:32:34 +0000
Files and hashes:         1: g675MVKyUIy8gKNifjon6HvP3so.crl (hash: U7uZ2ur3Fboar4zfisOkJ+40y1EChk8Pski46glfV9U=)
                          2: 51B1F2A665D911EBA6089869C4F9AE02.roa (hash: Agm1iHBSDHpN64vkTSxuS0Cc6JpxKn9+gu3qk14vA4A=)
                          3: 1229795E652C11EB9B039023C4F9AE02.roa (hash: GJUGEPZQBd+of4IF8rrVMeNhftE2HSnPOO2CkzhhVYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl
                          rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 20:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2200 (0x898)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D298D, serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA
        Validity
            Not Before: Mar 26 20:32:34 2026 GMT
            Not After : Apr  2 20:32:34 2026 GMT
        Subject: CN=69c597e2-c596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:35:19:53:88:c1:0f:7a:9a:16:15:c6:ee:bd:
                    26:57:58:91:29:1b:fd:ee:5f:a9:a2:05:d3:ab:f4:
                    1c:08:03:e7:4b:67:c3:79:92:95:11:3f:24:28:97:
                    f3:4d:3d:09:08:64:8d:9d:80:a3:79:1d:12:cf:a1:
                    58:8e:17:37:94:1f:a9:6e:89:18:2f:cd:15:5c:dd:
                    0f:b4:9b:19:c4:38:17:26:21:d7:0f:4c:4b:06:05:
                    3a:55:3a:60:c1:c4:33:6c:f9:8b:9e:c9:b8:4e:87:
                    44:df:87:1d:20:4d:ca:33:b4:c2:29:31:1a:97:28:
                    e6:91:f7:8d:47:e9:e0:1a:b5:cb:13:5c:05:43:41:
                    17:f1:40:ff:10:79:f3:f9:11:84:74:45:df:57:01:
                    c7:08:a4:22:c7:d7:5f:b9:51:7f:b5:67:67:91:a4:
                    0c:4c:83:9f:d9:cc:20:3d:96:67:be:af:46:e0:b8:
                    d0:35:dc:dc:ff:19:b6:3a:53:f7:53:8e:bf:1e:38:
                    80:28:88:a2:60:5e:ff:8b:ac:46:83:50:3f:03:af:
                    27:9d:26:49:83:1b:6b:4b:a4:38:f1:66:01:b2:45:
                    0c:36:9b:ae:27:a6:03:3d:e7:91:f3:45:77:21:76:
                    b0:d7:46:97:3f:66:a1:0d:67:86:e5:85:48:83:2d:
                    e1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DC:43:43:83:33:32:3A:70:C9:D7:0C:2F:BD:2A:DC:28:C9:1C:83
            X509v3 Authority Key Identifier:
                keyid:83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ae:75:19:c7:66:22:c6:1b:4c:0d:55:58:0a:83:32:04:62:
         2f:cd:08:23:2b:6a:23:a6:7c:38:2d:9c:6e:77:56:d9:5f:cd:
         1a:ef:e9:76:a9:a2:f7:5d:93:f4:c9:ad:89:3c:81:1b:5e:e0:
         19:02:de:f7:ad:6b:74:5c:2a:f0:41:32:65:fc:80:c3:c8:e8:
         db:45:df:58:3e:43:4f:8b:4e:cb:0a:b0:2d:72:2b:01:9c:59:
         e3:20:dc:29:77:c0:c7:14:ed:18:73:04:95:b1:ed:05:60:da:
         8d:3f:6d:46:78:8c:cb:3b:e0:bc:aa:eb:f3:6b:87:0a:09:01:
         60:dd:bf:32:ad:cd:cb:65:9e:36:79:6d:fb:d4:80:85:c6:3b:
         d1:42:d3:b2:db:f3:a4:08:c0:2b:66:cb:b6:6e:98:9b:7b:63:
         3c:9e:d4:bd:c3:12:44:77:fe:3b:81:ee:ab:b9:10:f8:3b:ff:
         bc:33:08:9e:fb:02:b6:59:b3:cf:df:fe:fc:43:36:e4:69:a7:
         65:a6:64:75:9c:9e:5d:a5:5a:61:6d:ad:29:14:fc:cf:47:27:
         c1:26:d4:35:67:e2:b4:e3:e0:e5:f7:fe:da:b1:9f:3c:c5:df:
         1d:69:fd:93:5f:cc:75:52:de:a9:8e:bb:69:d6:a2:88:21:49:
         95:d7:6d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:16:24 2026 by rpki-client