Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
File:                     k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft (raw, json)
Hash identifier:          mgTQ8ZqfnZMj3aWXuYdLAMa5AYSDhCVV7XWhIYdcis4=
Subject key identifier:   89:B5:E8:84:52:FF:08:E9:ED:38:F0:B3:AC:6D:80:AE:57:D4:24:D0
Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5
Certificate issuer:       /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
Certificate serial:       01AD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
Manifest number:          0187
Signing time:             Wed 25 Mar 2026 03:51:53 +0000
Manifest this update:     Wed 25 Mar 2026 03:51:53 +0000
Manifest next update:     Wed 01 Apr 2026 03:51:53 +0000
Files and hashes:         1: k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl (hash: u53jAy5ajRDFnOHMOjrF5cDbY9Z+4wrSHYN+Liz0auA=)
                          2: F74BBA0E307C11F09D502B0DC4F9AE02.roa (hash: 6PumaaWqeEWlSvcpp1tovC+UqR/XcnLSAY4hmR5KoDY=)
                          3: CFE87CFEE74911EE9E36BA2AC4F9AE02.roa (hash: z9EDVnBrrvYkKd0g5cZsXbHmSVTdTt1qtDE8mfboD8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl
                          rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D73BB, serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
        Validity
            Not Before: Mar 25 03:51:53 2026 GMT
            Not After : Apr  1 03:51:53 2026 GMT
        Subject: CN=69c35bd9-d9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4c:ff:95:9c:9b:a1:20:e3:53:ba:5d:22:bd:
                    2a:6c:78:1f:47:07:41:07:db:23:00:87:02:82:1a:
                    36:f5:a3:dd:1a:bd:6b:58:40:2b:3c:48:a6:1c:a8:
                    49:a4:5b:76:1e:88:21:88:d9:f7:8a:31:7e:ec:5e:
                    25:91:d6:9f:9f:87:68:1d:33:89:10:6c:97:de:57:
                    23:53:3b:a5:69:29:06:fc:c5:ff:4d:ea:af:75:47:
                    63:54:bb:cd:43:47:aa:64:d3:86:44:7e:e4:d4:4f:
                    f8:da:e7:4b:0f:b3:2d:fd:0f:fa:f6:93:ca:df:4b:
                    fc:86:19:1d:61:97:3d:61:dc:e3:22:43:8d:43:03:
                    39:ca:64:0d:e2:74:6e:3e:33:d1:ff:60:79:67:c9:
                    af:a6:96:18:c4:42:30:4a:2b:68:21:44:6a:68:d4:
                    b7:33:1a:2e:91:51:6a:68:cc:cd:9a:cd:2a:c7:41:
                    91:db:05:4f:a8:8c:09:fb:af:b6:f9:55:f4:d0:c4:
                    53:61:50:0c:5d:af:6f:d5:f3:53:cb:05:37:31:d0:
                    1d:04:5d:c1:75:5c:46:e7:ea:15:a3:4a:09:1b:58:
                    b7:bb:9a:53:54:6b:89:b1:d2:dd:70:dc:65:76:85:
                    dc:5c:be:9d:de:bb:5d:5f:41:7c:86:a7:c8:be:da:
                    ed:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B5:E8:84:52:FF:08:E9:ED:38:F0:B3:AC:6D:80:AE:57:D4:24:D0
            X509v3 Authority Key Identifier:
                keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:24:69:da:8e:c6:c2:3b:69:7f:53:f0:4d:11:bd:d9:5b:ca:
         2f:96:db:c8:7f:94:5d:99:0a:14:86:6d:91:a0:e6:58:33:b4:
         70:3b:85:39:4b:19:86:11:a1:8b:e6:0b:35:06:8a:12:50:8b:
         43:f7:3f:63:fe:36:6f:6c:02:82:30:e1:e5:df:a7:13:d4:77:
         3b:dd:d5:ee:ec:c7:7e:3d:13:48:d6:9c:ad:0e:f8:f1:25:45:
         3d:9f:82:49:52:9d:0c:02:23:05:c9:c0:4c:b0:43:73:ab:3a:
         65:25:0f:4b:96:06:92:5e:1b:d7:d4:f4:0d:da:8f:cc:42:87:
         ab:40:a3:cf:a5:32:6c:3d:0f:6c:ed:d6:a2:7a:f5:5b:fb:70:
         60:81:99:84:04:ce:9d:a1:26:0d:a2:fd:d1:a0:51:db:35:11:
         3e:cb:c7:4e:07:2b:e6:74:cd:11:42:85:05:a5:a2:f3:69:b9:
         8b:cd:dd:cf:b0:18:18:56:c3:07:be:b8:55:d4:bf:9e:22:ef:
         14:5b:89:df:dc:2f:1b:4c:09:64:3f:48:30:e5:d4:f1:42:59:
         3c:7a:6b:48:f0:0c:23:77:11:fe:62:48:99:21:ba:0f:88:1f:
         be:4f:26:51:ca:55:36:f7:0a:d5:1b:09:e4:b4:a8:75:b8:31:
         a2:1f:09:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:33:43 2026 by rpki-client