Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
File:                     AwfvDynPItsJcPUIPAI8KqDW9Rc.mft (raw, json)
Hash identifier:          JJJQQJ9Ab4VoV4b0+NAAjQX4B10hZUjiddY7sDlKIq0=
Subject key identifier:   B4:8D:96:D8:4B:1F:B7:C0:06:52:26:A9:C6:D1:11:86:09:80:54:BA
Authority key identifier: 03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17
Certificate issuer:       /CN=A91D8704/serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517
Certificate serial:       093F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
Manifest number:          0935
Signing time:             Tue 24 Mar 2026 19:57:47 +0000
Manifest this update:     Tue 24 Mar 2026 19:57:47 +0000
Manifest next update:     Tue 31 Mar 2026 19:57:47 +0000
Files and hashes:         1: AwfvDynPItsJcPUIPAI8KqDW9Rc.crl (hash: aingJ2EXOwiR9l6QLE8UgeJXNIuX46hd7mojzs+h9tU=)
                          2: B1AAC5B2BC4111EA9A5B2786C4F9AE02.roa (hash: NPMK3D88JFBSE0rhn5n+EZFf1LsVuCFtTXP7Tj/h8LY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl
                          rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2367 (0x93f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8704, serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517
        Validity
            Not Before: Mar 24 19:57:47 2026 GMT
            Not After : Mar 31 19:57:47 2026 GMT
        Subject: CN=69c2ecbb-39ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ec:6e:fb:7e:03:19:c7:50:3b:c6:ac:49:e6:
                    bb:05:af:62:98:1a:b1:89:45:36:bd:d1:f7:b2:13:
                    ce:40:fc:52:8c:51:00:9d:ae:9f:15:9f:ba:c3:eb:
                    f3:24:80:a9:89:be:10:67:07:81:5c:5b:5a:cb:09:
                    e7:41:d3:30:67:d6:88:91:0a:a0:c6:8c:9e:34:c8:
                    14:2c:40:bf:26:4b:f5:40:a5:59:59:ac:7c:70:9f:
                    fb:5a:b7:20:57:1e:a5:29:7d:db:da:34:89:7f:44:
                    d4:14:da:f1:d3:ea:3d:bf:f3:9d:72:0f:78:d9:d4:
                    ff:70:23:fb:70:c4:e5:43:dc:27:78:b2:58:49:3c:
                    05:2a:49:62:fe:4d:61:5a:b4:9e:11:36:fe:d2:6b:
                    a2:91:f0:95:0c:20:a6:80:c2:33:a6:15:c3:f4:9b:
                    25:19:b1:9f:83:03:bf:85:66:7e:08:df:d8:c7:87:
                    16:d4:58:96:aa:a8:d1:0b:c2:7f:9b:29:a9:69:7e:
                    c7:60:3b:33:a2:86:31:c6:ba:65:11:b0:10:ba:02:
                    72:9c:50:4b:03:ac:aa:34:39:d7:58:50:fe:8a:69:
                    5f:bb:9d:3e:96:2b:75:1a:eb:16:a5:d0:1a:30:e7:
                    06:46:86:14:bd:96:b0:c3:c0:f4:67:5f:9e:e3:db:
                    14:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8D:96:D8:4B:1F:B7:C0:06:52:26:A9:C6:D1:11:86:09:80:54:BA
            X509v3 Authority Key Identifier:
                keyid:03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:88:59:8e:53:d3:32:2d:a1:aa:a0:06:ff:61:de:d7:11:05:
         f4:fe:b5:5d:a7:2b:92:37:84:d1:64:1d:d4:17:f5:7b:10:95:
         1e:f0:10:62:ae:8e:d5:20:3d:42:cf:b0:6f:90:8e:28:db:75:
         1b:42:41:68:59:ba:42:ae:47:67:54:b5:1c:c4:ec:6f:e8:ba:
         2f:a7:91:ee:5e:6c:b7:09:b2:4c:e7:5f:59:87:58:3f:d6:6a:
         8d:d1:80:68:65:bd:f6:3f:dd:94:25:56:3b:fe:52:02:1a:18:
         12:f0:88:f2:b3:dc:17:e9:8c:f5:a9:a1:5c:5b:66:94:27:6b:
         af:eb:2e:64:ee:f4:fe:fe:1d:66:1c:50:50:f4:6f:15:e0:62:
         78:32:fd:54:3f:3f:ce:b8:ae:f0:7a:df:50:90:ca:e4:a6:d5:
         fa:5c:7d:66:e6:5a:bb:c6:8b:f3:35:80:4f:e4:98:cc:72:82:
         84:6c:2f:31:0b:4a:8b:ed:91:38:65:06:cb:24:31:14:79:2f:
         65:31:12:68:b0:9c:35:26:ba:29:58:ed:9c:7d:c9:1c:ec:ae:
         74:a4:99:19:8e:c3:59:6f:f3:b6:3a:aa:80:b8:1a:f7:1c:e8:
         84:39:50:75:14:cc:15:de:c4:83:00:29:79:15:68:30:d9:07:
         f8:35:ca:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:49:18 2026 by rpki-client