Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
File:                     fvLsMxvWVD0y25gMUGJsBAfKiYI.mft (raw, json)
Hash identifier:          rkKuFQgKusBUV2Ndu0I0nq0sFSgoqPw+6B1bUSGy7+s=
Subject key identifier:   BB:65:0D:F2:5A:76:80:39:22:3E:14:30:18:34:21:29:15:32:07:F2
Authority key identifier: 7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82
Certificate issuer:       /CN=A91D5E23/serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
Certificate serial:       097B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
Manifest number:          0972
Signing time:             Tue 24 Mar 2026 19:50:56 +0000
Manifest this update:     Tue 24 Mar 2026 19:50:55 +0000
Manifest next update:     Tue 31 Mar 2026 19:50:55 +0000
Files and hashes:         1: fvLsMxvWVD0y25gMUGJsBAfKiYI.crl (hash: UVQp41Kw3qtuSpQvgOS2F3hyZJ0pfv5ycYNIXAThUUI=)
                          2: 70C35E88B07511EA8C0EC372C4F9AE02.roa (hash: nEw1J5nI/jYM2/PDdrlSv5FQkDbuSGPVtzOk8gJbumo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl
                          rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2427 (0x97b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5E23, serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
        Validity
            Not Before: Mar 24 19:50:55 2026 GMT
            Not After : Mar 31 19:50:55 2026 GMT
        Subject: CN=69c2eb20-fddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:88:6c:f8:87:70:40:07:0c:69:bd:e7:bb:54:
                    28:e9:fe:ac:84:2d:a8:93:ec:1f:aa:b0:34:82:44:
                    34:c9:21:59:26:f5:69:24:d3:c1:0c:b5:d4:80:b1:
                    36:6c:97:39:2d:f6:0a:5d:c6:25:0d:0a:43:2d:c8:
                    25:b4:0e:6a:dc:2e:99:88:45:7d:72:5b:91:44:5f:
                    2e:b5:56:32:8d:f4:37:99:d9:82:16:b9:b5:03:6d:
                    04:33:45:f9:aa:49:13:e8:99:46:27:88:98:50:4c:
                    15:77:9f:86:e5:7c:01:20:1c:49:29:ab:70:2f:1b:
                    d1:f5:ab:b2:ce:c9:ff:1f:fb:e8:70:39:65:a1:32:
                    47:dc:ac:70:f3:20:c3:eb:3c:70:ed:08:6a:df:a2:
                    66:99:26:2d:64:bf:62:15:db:0e:c5:8e:f5:73:60:
                    a5:3e:0a:40:15:b7:e6:bd:65:32:fb:b3:b9:54:96:
                    a2:34:00:54:b4:9f:ba:1b:06:8b:71:82:e7:c3:fa:
                    15:39:53:79:0d:c0:f2:8a:f6:e3:8c:03:ab:c3:77:
                    0e:51:17:aa:e8:57:d4:8a:05:89:d0:b0:cc:7d:5e:
                    27:64:ed:bd:84:0c:ac:db:ad:e5:02:0a:e5:9a:3c:
                    85:51:59:2e:25:49:63:4f:a8:46:38:1b:36:47:c9:
                    df:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:65:0D:F2:5A:76:80:39:22:3E:14:30:18:34:21:29:15:32:07:F2
            X509v3 Authority Key Identifier:
                keyid:7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:08:12:e4:18:04:46:85:6d:5e:ed:3d:82:dc:04:97:d9:6b:
         fe:8f:7e:0f:c4:b2:f1:a1:6e:fc:02:17:d0:44:b2:43:3d:61:
         42:54:ed:d3:4f:c5:4b:4e:17:e2:ca:b4:1d:89:95:88:cf:a3:
         88:2d:03:f9:f7:e4:98:31:bd:4f:7c:69:85:55:5c:6c:7d:20:
         b0:d5:34:8e:aa:3f:2c:cc:37:9d:74:ed:81:97:49:2c:b1:bb:
         06:24:e5:08:0e:c4:eb:39:4f:5e:97:70:7f:ae:62:70:2d:52:
         c1:bd:cc:13:39:02:91:e9:de:78:ce:4b:96:e7:3b:45:7c:59:
         e6:16:76:85:5e:b4:9c:28:f5:6d:4d:24:c1:21:d4:6b:19:6e:
         5e:b3:78:26:28:e5:cc:29:51:e8:4b:c4:2e:10:a4:9e:9e:27:
         9d:01:ee:a0:01:ac:07:2b:68:d5:36:10:40:5c:6b:81:c2:5d:
         d3:21:43:68:f8:7e:17:ed:f0:81:ea:57:2e:52:50:40:8a:36:
         01:d4:be:14:5c:9c:c6:0f:58:a6:8f:56:8b:6e:ca:28:c8:92:
         a5:93:3c:f3:98:a2:79:0e:4e:dd:90:22:53:ce:3f:7f:e3:03:
         b3:b7:43:ad:78:a1:3b:7b:75:39:db:60:51:0b:24:ff:6e:02:
         54:b5:21:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:53:16 2026 by rpki-client