Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
File:                     A1Tb4e09meGUXicnS6L2A-tqF4E.mft (raw, json)
Hash identifier:          JcX1nl8nJxU4Km/1Rnj8jP1jQVX6WxD4Ho1DKDFx8T8=
Subject key identifier:   CC:79:9B:3A:A5:76:78:53:0B:09:F3:2C:1E:02:C3:BF:39:35:92:36
Authority key identifier: 03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81
Certificate issuer:       /CN=A91D8A67/serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781
Certificate serial:       01AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
Manifest number:          019F
Signing time:             Wed 25 Mar 2026 03:31:06 +0000
Manifest this update:     Wed 25 Mar 2026 03:31:05 +0000
Manifest next update:     Wed 01 Apr 2026 03:31:05 +0000
Files and hashes:         1: A1Tb4e09meGUXicnS6L2A-tqF4E.crl (hash: AKhm68C/J27ybs3s5earNQA/K4Nmj4wKHdQfD6clSzI=)
                          2: DDCCD058B35111EE96186E1EC4F9AE02.roa (hash: jGiJWEhk3dhO1eibIxZXdqF5/Lngdo1Rs0UIzjEFR1E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl
                          rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8A67, serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781
        Validity
            Not Before: Mar 25 03:31:05 2026 GMT
            Not After : Apr  1 03:31:05 2026 GMT
        Subject: CN=69c356fa-efac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:69:77:8d:42:41:e4:4b:46:00:8a:56:03:26:
                    af:6e:2e:ae:12:eb:32:5b:db:c2:68:25:d7:f0:70:
                    23:01:16:e7:d1:82:c3:58:a9:94:89:a3:15:14:34:
                    31:fa:34:8a:4e:13:e3:6b:91:41:a1:31:3a:a2:2c:
                    9d:f9:f8:10:00:58:81:0e:af:b0:94:96:28:58:70:
                    91:5f:8b:05:71:1e:41:ac:28:78:20:df:b0:02:0c:
                    f6:20:1b:c5:b4:69:48:21:85:da:0c:f2:c9:9e:03:
                    ca:33:1a:d2:48:3f:91:a8:9b:22:1f:12:66:e7:58:
                    8f:c6:25:9c:6a:80:7c:14:15:3e:20:94:5b:ec:93:
                    e8:58:ed:c6:b5:9e:66:82:58:be:7a:b1:3a:ca:7a:
                    31:9d:c5:77:12:c5:ba:3b:96:b2:59:85:9f:f8:fd:
                    18:24:bf:fe:1d:20:dc:04:42:c1:61:2e:eb:00:96:
                    dd:34:e5:f2:18:f8:e0:2a:07:fe:e2:6d:0e:69:d4:
                    b0:60:a8:df:fb:21:2f:db:44:41:e5:1a:0c:8f:b7:
                    a8:a8:66:28:2f:07:7d:d0:aa:06:44:da:39:c7:fa:
                    62:8d:62:ce:fb:ff:cc:3c:e4:41:11:87:98:0c:f6:
                    74:c1:47:ba:ae:2e:29:a3:95:9a:c8:c9:8b:31:3d:
                    3b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:79:9B:3A:A5:76:78:53:0B:09:F3:2C:1E:02:C3:BF:39:35:92:36
            X509v3 Authority Key Identifier:
                keyid:03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d0:da:06:27:ca:e5:c4:3d:3e:f3:03:46:e1:46:c4:59:5c:
         e7:6b:6b:74:63:73:3a:3e:37:ce:8f:9f:da:4e:ae:16:8b:a7:
         62:4b:3b:d7:c5:cd:3f:02:4a:38:48:11:44:ae:f7:0a:84:05:
         d5:63:d7:f7:d6:c0:4f:93:17:83:bd:f6:43:3f:1b:e9:b0:c0:
         c9:84:ea:a8:7d:e0:08:14:7c:e6:67:44:44:54:75:65:da:3a:
         98:53:84:b3:06:ba:b9:ce:a4:29:f1:37:a4:86:1c:93:d4:7d:
         36:d7:fd:ac:9f:9b:d9:c3:dd:0f:7b:be:68:47:84:70:df:9b:
         d9:9f:5c:0b:ea:63:83:b0:5a:fa:e3:d6:fc:14:7a:73:ec:2a:
         1b:78:8a:3a:aa:6e:af:84:5a:56:58:1b:5b:46:dc:f7:1e:02:
         16:17:cc:35:14:bc:91:5e:c3:f9:fe:05:94:b0:44:d0:c5:07:
         ca:bf:99:89:1a:a6:ba:d0:44:26:6d:a9:82:a2:81:82:0f:90:
         97:0c:7d:1b:0f:5c:c0:c8:9e:1f:53:74:71:fe:2a:8a:87:8c:
         c5:37:4a:84:33:4d:a8:f1:95:44:cd:8b:fe:dc:43:cf:fd:93:
         51:bd:24:72:35:16:37:84:3c:51:5f:7e:31:9b:fe:91:a8:03:
         bc:ee:53:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:21:36 2026 by rpki-client