Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
File:                     0Eyx4nFXho90821weRXZ1_CXyQg.mft (raw, json)
Hash identifier:          Nezlu1du50I9raIBWxZ3PNAayIXsSfJY4jFIX1MAkHw=
Subject key identifier:   6E:5C:19:B0:1A:27:23:73:EE:EA:08:F5:FC:B6:26:DB:8E:F6:0A:B2
Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08
Certificate issuer:       /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
Certificate serial:       026C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
Manifest number:          0261
Signing time:             Wed 25 Mar 2026 01:40:29 +0000
Manifest this update:     Wed 25 Mar 2026 01:40:28 +0000
Manifest next update:     Wed 01 Apr 2026 01:40:28 +0000
Files and hashes:         1: 0Eyx4nFXho90821weRXZ1_CXyQg.crl (hash: o5jSB3z9fNZlk7d2CQl8HWlUOftRctivUjoHQZ9BneI=)
                          2: 994AC0903E1E11EFB5BBDD3BC4F9AE02.roa (hash: kbZVkD6jRKFqNBUgIZMNtq7Y+KDfzPzcA1djWWgpFT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl
                          rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 620 (0x26c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5AA8, serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
        Validity
            Not Before: Mar 25 01:40:28 2026 GMT
            Not After : Apr  1 01:40:28 2026 GMT
        Subject: CN=69c33d0d-8344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a7:e3:4f:d7:8a:4c:c2:31:07:6d:a0:e3:a2:
                    ba:80:6b:9f:5e:0d:c2:fd:a2:4c:ad:0d:78:ba:6e:
                    ce:c6:d3:ae:46:50:2e:a7:85:a6:80:d1:24:bd:bd:
                    bc:01:bb:b2:dc:4a:0f:68:b1:60:e9:53:de:72:8d:
                    19:f4:9a:57:48:a6:28:44:43:39:9c:65:58:50:0b:
                    70:1a:f6:0f:88:23:79:6f:af:39:9f:23:c2:64:c5:
                    03:91:53:bd:7e:08:0d:32:cf:96:08:19:b3:7d:7f:
                    14:63:16:1b:be:31:a0:34:32:a5:1b:84:fa:9c:68:
                    31:33:ce:a0:a1:71:6e:f0:dc:cd:ed:9e:75:e4:4f:
                    8f:db:2f:4c:a4:f7:3d:ca:67:d4:6c:80:34:2b:f6:
                    3f:95:f1:ea:4d:74:f3:35:6d:89:b0:17:80:4c:da:
                    22:84:db:d5:d8:ce:99:40:61:35:53:89:20:46:46:
                    e8:cd:2f:cc:64:eb:8e:8e:e3:41:52:be:9a:34:ab:
                    b1:6f:c2:ed:f0:92:43:e2:0d:48:8c:57:9d:48:3e:
                    81:22:e1:ec:d3:2a:18:4e:de:99:34:7f:24:c6:6f:
                    d1:3d:34:c4:e8:b1:69:37:c8:8f:85:37:27:da:9d:
                    d4:95:10:94:d0:62:25:a4:d0:41:12:fb:7d:c1:6b:
                    d5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5C:19:B0:1A:27:23:73:EE:EA:08:F5:FC:B6:26:DB:8E:F6:0A:B2
            X509v3 Authority Key Identifier:
                keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e6:c7:a7:92:18:2a:c4:ff:33:bd:91:03:9a:da:67:19:19:
         6e:a7:84:90:e5:60:5e:87:e6:37:fc:32:d6:81:82:49:cd:dc:
         49:d4:c1:33:41:68:05:cc:b6:6e:db:48:05:3b:a3:34:d0:92:
         68:6e:82:3e:28:4c:8e:fe:c9:7f:3c:ab:3c:c9:14:7d:9f:ad:
         a7:c1:50:14:f8:6d:05:23:fe:ca:84:82:85:37:af:30:c8:a6:
         03:16:33:00:d7:8d:5b:7d:78:4f:da:3f:ed:c8:a5:d9:4f:2f:
         7e:e8:d9:9f:3f:a6:7b:18:72:dc:f1:20:f8:65:7e:dc:14:17:
         df:de:58:9d:20:c9:dc:38:4b:b7:4c:be:70:ef:28:b9:2d:6e:
         ee:79:cb:82:56:cc:72:15:a2:d4:cc:e2:be:cd:69:a6:9c:5f:
         a0:bb:17:cd:db:bd:83:cc:19:59:31:01:0a:dc:6e:30:21:e2:
         fe:24:d6:8c:db:b3:ab:98:39:60:90:9d:74:2a:02:f2:e3:b9:
         4e:ec:f4:42:75:a5:cd:b5:90:c2:b0:93:3b:97:e6:4b:eb:94:
         83:2c:4a:7f:e4:89:15:00:4c:af:bc:22:3a:dc:ea:f9:ee:43:
         2b:3c:cb:17:88:a6:1a:0a:0a:66:54:75:c9:84:c7:56:bd:ea:
         a9:9d:80:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:28:02 2026 by rpki-client