Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
File:                     A9h0_y9dMgjn62Jadzf81EzuKsI.mft (raw, json)
Hash identifier:          kgnHdm4D2mW3tX6cviZbyYFpXMAqcpyRpbIMXAmDnKU=
Subject key identifier:   DE:F2:A3:30:13:D5:BB:10:14:CB:2F:16:68:71:19:7B:38:A2:C1:3B
Authority key identifier: 03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2
Certificate issuer:       /CN=A91D901E/serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
Manifest number:          75
Signing time:             Wed 25 Mar 2026 07:01:31 +0000
Manifest this update:     Wed 25 Mar 2026 07:01:31 +0000
Manifest next update:     Wed 01 Apr 2026 07:01:31 +0000
Files and hashes:         1: A9h0_y9dMgjn62Jadzf81EzuKsI.crl (hash: mk/VsIUbC4h65jiPwx3gTxwvlg51MG8IBaNj4Iseaa4=)
                          2: 58893B2878DC11F084C71D2BC4F9AE02.roa (hash: cA1zRf5hGPx366nz55tbLEUSAsNqCtNhxK7+ift/7Yw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl
                          rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D901E, serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
        Validity
            Not Before: Mar 25 07:01:31 2026 GMT
            Not After : Apr  1 07:01:31 2026 GMT
        Subject: CN=69c3884b-f06c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7c:5d:7a:2b:d7:a6:ad:e5:eb:22:4f:14:b8:
                    a3:e0:59:7e:72:44:b4:74:25:8e:41:86:5c:6a:ed:
                    20:69:41:b8:8a:e1:27:47:07:a9:f7:f0:fa:68:9f:
                    fa:97:23:47:9f:a6:b3:c3:d8:47:69:2b:5e:29:d2:
                    27:85:e3:af:53:02:95:51:20:3d:99:cf:b8:31:65:
                    ac:3f:c3:43:91:a5:47:52:21:1b:fe:f7:30:41:da:
                    e4:76:74:31:e7:82:86:06:9b:eb:f8:88:f4:fb:5f:
                    6d:73:5c:85:b9:c1:9f:bc:22:2c:4e:b9:e4:13:9d:
                    4c:0b:4c:54:c2:d4:42:31:60:df:8d:47:01:d0:d2:
                    ae:65:cf:c4:df:de:ac:d7:c2:0e:83:57:d9:f2:98:
                    bc:e0:8a:45:d6:15:b4:29:7f:5e:a5:f9:2d:3c:3d:
                    ed:dd:a1:b1:56:cd:84:d2:54:b8:9c:0b:26:83:0e:
                    66:1a:43:db:1e:33:d8:c4:74:cc:86:f4:5f:c1:f9:
                    b8:a0:2d:b2:35:c8:7e:cd:a4:9f:eb:6d:fa:5d:96:
                    61:41:0f:4e:26:df:75:91:9e:83:94:ab:ac:93:0e:
                    ca:22:cb:92:2d:f3:66:4c:8f:f5:f8:ab:1b:e1:81:
                    76:80:76:49:89:db:65:2c:32:f6:4b:f7:da:af:66:
                    94:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F2:A3:30:13:D5:BB:10:14:CB:2F:16:68:71:19:7B:38:A2:C1:3B
            X509v3 Authority Key Identifier:
                keyid:03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:9a:0f:10:f9:cb:9c:a0:ef:d6:39:4c:32:00:b6:ac:ff:87:
         50:7a:e6:0b:89:81:0c:c8:dc:69:c9:9a:d6:15:5e:e9:e5:57:
         7a:79:57:11:c3:69:8d:c9:5b:ce:0d:b6:e9:5a:89:14:92:7d:
         83:1a:c4:8c:6b:65:b5:19:0c:09:36:0a:6e:bd:2a:85:3e:e0:
         41:b1:51:3b:ad:7c:cb:ee:d5:fc:23:aa:21:e2:52:f4:d4:55:
         41:60:75:d0:02:06:1e:d8:74:1c:a2:30:82:16:c7:1b:5d:5f:
         ae:33:b6:89:ba:8d:85:ce:35:1e:e7:92:97:98:01:76:f6:04:
         cd:7d:41:1e:62:c0:f0:c8:05:65:39:48:9e:9e:1d:7b:dc:c3:
         e4:31:6b:48:d6:68:09:20:ba:78:3a:3f:be:fa:96:82:1a:fc:
         48:14:36:2e:9b:07:e1:94:5b:8c:9d:d7:e5:de:b6:0c:68:65:
         bc:84:bc:22:97:a7:5d:8c:41:90:24:9b:c1:6a:e0:6f:ca:64:
         51:76:05:da:a2:54:c0:5d:ef:0d:63:1d:f0:62:f6:2c:79:87:
         f9:f4:5d:ba:6b:22:f6:8b:42:62:24:a8:e0:9c:cc:e7:18:29:
         0a:f8:08:b0:7f:d0:28:2d:70:60:a2:d9:bf:41:5f:5e:94:c0:
         63:a5:2e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:36:13 2026 by rpki-client