Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
File:                     b5wj5AN3j-Ace8lQiL_R5rMoqps.mft (raw, json)
Hash identifier:          XhAI53hR/TfXsPP3BG+urC3BIDLbAPf4glZMtC/qEh4=
Subject key identifier:   F4:78:72:59:13:00:CA:CF:B0:A9:42:7C:FE:C9:DE:AA:4E:CC:8D:24
Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
Certificate issuer:       /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Certificate serial:       01DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
Manifest number:          01D3
Signing time:             Fri 27 Mar 2026 03:09:40 +0000
Manifest this update:     Fri 27 Mar 2026 03:09:40 +0000
Manifest next update:     Fri 03 Apr 2026 03:09:40 +0000
Files and hashes:         1: b5wj5AN3j-Ace8lQiL_R5rMoqps.crl (hash: cZUbhmtqPGaXMhKnoDlHAjwTDAdgID8ar9n53kz/4PE=)
                          2: 4F445CCE1FF311F0833FC50BC4F9AE02.roa (hash: NEyPsb5RWjdv+OoFJRvfUjkfYWeqz3AuMZCzrBRpKPw=)
                          3: 512CFEFE68BD11EE87942B4EC4F9AE02.roa (hash: eftqJaT0OiGT6+fWanJpYi7UmZemCJiu4YrLSsovmzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
                          rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 03:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
        Validity
            Not Before: Mar 27 03:09:40 2026 GMT
            Not After : Apr  3 03:09:40 2026 GMT
        Subject: CN=69c5f4f4-51c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:bc:06:41:c8:19:42:0e:df:e4:96:c3:08:9a:
                    26:ae:d8:01:90:51:17:68:38:ca:77:25:78:20:91:
                    5e:16:d9:af:08:9e:16:80:03:b9:33:8b:b7:73:0c:
                    1c:ab:8d:87:64:16:de:30:ee:88:6b:95:04:34:ad:
                    2a:97:3b:07:b1:29:8a:93:32:dc:07:66:ea:0d:91:
                    23:61:d8:a4:5d:cb:9c:c6:d3:46:12:ad:06:1d:de:
                    44:81:0e:f0:69:cc:30:d3:22:13:35:95:2a:49:dd:
                    8f:23:d0:9b:7a:d0:6b:d9:05:52:d9:3d:20:b3:5c:
                    be:77:3f:f9:60:e5:b1:94:da:83:4a:77:d0:d5:42:
                    e4:59:48:5b:55:b4:eb:be:de:55:8f:5f:b6:63:d6:
                    b8:55:fd:80:08:cb:fa:41:35:f8:5c:ab:27:dd:4b:
                    fd:49:44:46:4c:86:c5:74:f2:cd:39:5c:d9:3d:e6:
                    e9:75:19:b0:75:2a:93:09:7c:a7:a8:86:65:06:2b:
                    ee:71:92:c9:e8:c4:9b:79:a9:7d:d1:f7:e1:93:bc:
                    bb:85:c6:fd:c7:ac:9e:67:1a:bb:56:86:d9:a6:64:
                    41:66:b5:43:f0:21:7c:5c:a3:65:ff:83:a1:4b:74:
                    83:00:b2:93:7f:fa:51:7a:e9:78:73:1d:ce:aa:f3:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:78:72:59:13:00:CA:CF:B0:A9:42:7C:FE:C9:DE:AA:4E:CC:8D:24
            X509v3 Authority Key Identifier:
                keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:61:cb:0a:39:28:f8:a5:82:c1:bc:c8:f9:f8:3d:a0:38:1b:
         dc:0f:05:7b:d9:6d:56:ac:22:ff:04:25:aa:38:33:25:42:68:
         81:e9:8f:83:5f:7c:cf:fa:22:d9:ea:f9:8e:db:41:06:7f:42:
         93:69:c5:79:c1:25:28:59:17:ce:25:9d:fb:d4:f9:e1:fc:a5:
         7f:11:5b:29:69:3d:68:cc:a6:4b:e7:9e:8a:01:54:f1:cf:ba:
         eb:5b:6a:d6:45:90:97:73:99:f9:00:18:11:e8:10:25:9a:80:
         2e:c7:36:f3:b7:21:53:d9:f5:c5:64:3d:31:04:8c:4b:ac:df:
         f9:fa:de:a7:d8:f7:ab:fc:9b:76:39:4b:46:ae:bc:3a:7d:70:
         58:c2:7c:5e:7c:92:56:b9:d0:67:06:cb:9c:4d:9b:5e:a7:26:
         ef:bc:c5:fa:a3:64:83:bc:a7:41:99:66:6c:14:f5:99:45:2c:
         c8:d7:05:6b:fd:7e:46:07:e3:7e:7b:88:0e:ac:57:2f:4d:32:
         ae:9c:ce:53:83:4f:3e:25:33:f5:e1:2f:3b:d0:fc:29:60:a9:
         66:07:0d:ef:bc:4c:26:6e:e4:d4:39:80:b9:56:82:5e:92:64:
         00:0d:a0:32:e7:d4:b2:6e:b5:66:ff:27:35:80:b9:e3:93:d1:
         c9:3d:64:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:49:18 2026 by rpki-client