Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft
File:                     C99de_bArcNvIwEoNtjC3CQnkzw.mft (raw, json)
Hash identifier:          N6l8jvw52F2B09tmdQti35zaguM0QDI4Lp1gSxEQatU=
Subject key identifier:   EB:F3:18:7F:92:19:4C:46:7B:1D:FC:8F:4F:13:50:FE:CB:16:3B:2A
Authority key identifier: 0B:DF:5D:7B:F6:C0:AD:C3:6F:23:01:28:36:D8:C2:DC:24:27:93:3C
Certificate issuer:       /CN=A91D6499/serialNumber=0BDF5D7BF6C0ADC36F23012836D8C2DC2427933C
Certificate serial:       0731
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft
Manifest number:          0722
Signing time:             Tue 24 Mar 2026 21:35:14 +0000
Manifest this update:     Tue 24 Mar 2026 21:35:14 +0000
Manifest next update:     Tue 31 Mar 2026 21:35:14 +0000
Files and hashes:         1: C99de_bArcNvIwEoNtjC3CQnkzw.crl (hash: coUwaaAlTMtPVReKEo79LXh5FkPbDIY2aFZK4wIe6jE=)
                          2: A96F9914F1D811EFA3152963C4F9AE02.roa (hash: 83NxF7lUsOtgh4yzzrYO7dgtUgO2FORjLb/RtRaqMGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.crl
                          rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1841 (0x731)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6499, serialNumber=0BDF5D7BF6C0ADC36F23012836D8C2DC2427933C
        Validity
            Not Before: Mar 24 21:35:14 2026 GMT
            Not After : Mar 31 21:35:14 2026 GMT
        Subject: CN=69c30392-1c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:19:1f:a2:bf:71:fd:9b:30:4e:43:62:ff:64:
                    8a:8b:79:14:36:c7:8f:f4:d8:fc:d3:8f:83:69:c1:
                    06:75:4e:59:54:1f:0b:e1:b2:2a:af:90:99:3c:e7:
                    42:8d:53:2a:fe:4e:92:a7:c4:63:53:4d:79:a5:17:
                    a8:bb:83:9a:7c:d0:da:f3:de:6e:32:c8:65:0c:a0:
                    d2:38:ab:5e:1c:e2:1c:32:7e:f0:af:44:b8:ff:65:
                    8a:e2:25:f8:35:ff:8b:b0:72:a1:bc:7e:41:b9:0b:
                    53:4d:8b:87:07:a1:63:70:76:0d:94:f2:65:00:69:
                    a7:33:27:32:1e:e8:e8:a5:d6:09:b7:e7:35:75:9d:
                    57:a7:43:5e:c1:0b:02:49:9f:42:85:f2:a6:cb:7c:
                    51:6d:77:bf:c5:42:c9:cf:c6:bd:38:d4:9e:53:91:
                    ce:1f:29:86:7e:8a:a3:85:50:35:3a:0f:91:c2:67:
                    db:31:13:0b:98:95:6e:3c:30:ea:57:e7:3d:20:8d:
                    08:6e:0d:16:34:82:f9:ac:d7:a3:e1:e6:09:9d:4e:
                    45:57:49:9f:13:f3:0e:bf:8b:15:2b:54:cc:26:7b:
                    04:50:c1:2d:9f:80:1f:63:5f:54:da:4a:b4:7d:f9:
                    9a:ba:ec:b9:bd:bc:54:2a:4a:bc:2f:93:56:3c:60:
                    7b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F3:18:7F:92:19:4C:46:7B:1D:FC:8F:4F:13:50:FE:CB:16:3B:2A
            X509v3 Authority Key Identifier:
                keyid:0B:DF:5D:7B:F6:C0:AD:C3:6F:23:01:28:36:D8:C2:DC:24:27:93:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a1:9e:87:dc:fd:c9:81:ff:5e:c0:16:c3:bc:ec:ce:c9:69:
         33:a2:b2:f5:51:e5:57:4e:b6:d3:a6:89:32:8e:a3:03:dd:98:
         43:a5:b4:7f:a5:df:1f:89:c2:cc:15:13:04:79:56:6d:9e:0e:
         ca:31:db:a7:f2:32:82:9f:a3:ea:9f:1c:9e:0f:29:ae:b4:7e:
         11:70:42:f6:f1:e6:c5:f7:fa:c1:b0:fb:93:76:ee:7e:26:9f:
         c3:26:b2:dc:30:7e:3b:f1:f8:b2:56:59:99:7a:a7:27:82:b3:
         3c:41:4c:a2:16:52:ce:e2:4f:02:6d:32:59:b9:06:49:49:7d:
         ce:f2:23:5a:d7:96:43:a0:e0:23:51:7c:ff:44:6e:29:bd:b0:
         ff:c6:f4:6f:9f:7e:54:8a:0d:f7:dc:5f:eb:49:58:f6:d4:28:
         a2:fd:42:27:cf:a4:6a:df:a5:8f:32:8b:87:cc:86:db:45:b3:
         60:67:28:fb:80:d8:8b:d5:b1:28:44:e5:b3:e0:30:15:2f:21:
         50:41:01:98:3a:05:7a:51:b8:57:9e:5c:01:12:5b:ab:63:03:
         cd:b9:e7:bb:89:c2:8f:ff:12:11:4f:37:98:25:f3:57:a1:69:
         fd:78:d8:30:37:23:44:b3:ed:20:56:ef:e7:ac:12:80:b1:70:
         95:8a:14:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:07:34 2026 by rpki-client