Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
File:                     31FHCxXowUGvL6hGoowDs4WRurQ.mft (raw, json)
Hash identifier:          HXoa5wZ94mGijp4JShdGW9VsSlgpMP992zq4HtphnGs=
Subject key identifier:   55:F0:F0:23:C0:15:58:7F:B6:C0:4F:5F:6F:7E:0E:97:8C:2C:66:C4
Authority key identifier: DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4
Certificate issuer:       /CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
Certificate serial:       01EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
Manifest number:          01D8
Signing time:             Fri 27 Mar 2026 03:12:27 +0000
Manifest this update:     Fri 27 Mar 2026 03:12:26 +0000
Manifest next update:     Fri 03 Apr 2026 03:12:26 +0000
Files and hashes:         1: 31FHCxXowUGvL6hGoowDs4WRurQ.crl (hash: Bg8z6lezj1ppVNHKWMtCosYeYKzS9y0vz3vuJcKZK4o=)
                          2: 361777766E2F11EE9F5DEF32C4F9AE02.roa (hash: 6r9HMe5N7O3EO/hoVyMLGjAo1zMWyRsh6cOTtVL/RMY=)
                          3: 367E2CC86E2F11EE9F5DEF32C4F9AE02.roa (hash: ZY1siwjbqnQaZCIx96bLhb0d0HA6YypX15NteDeXL0o=)
                          4: 7B50FA5EA13911EF8B634635C4F9AE02.roa (hash: 9GGpKqMuP60pZTecgihCPtCUwjJQr1u5VITWHt4kvQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 03:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB7E9, serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
        Validity
            Not Before: Mar 27 03:12:26 2026 GMT
            Not After : Apr  3 03:12:26 2026 GMT
        Subject: CN=69c5f59a-4857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:79:66:b3:da:74:65:03:b8:b8:91:96:4e:
                    06:8e:60:0e:24:e4:64:07:66:08:a6:f2:6e:8a:b6:
                    d8:00:f0:d4:a7:fc:f5:0f:cd:4e:02:ee:eb:58:3b:
                    ff:7f:7e:ec:35:94:eb:c7:39:d3:02:b6:52:d4:a5:
                    e3:0f:21:63:d4:ad:10:f0:18:eb:28:0e:e4:02:0b:
                    88:06:37:f0:03:8f:9c:f0:73:9c:ce:f7:b7:24:14:
                    a1:32:a9:af:ef:e8:f7:15:7b:b6:c7:26:a9:33:53:
                    2b:07:c1:25:58:1c:ab:11:c2:01:89:c2:0b:3b:25:
                    40:d6:4e:cf:18:be:dc:8f:ef:c2:75:92:81:02:71:
                    8c:00:c2:c4:4a:78:a0:d8:29:1d:73:d0:37:98:ba:
                    fa:fc:26:4f:28:e4:92:52:50:28:7d:9a:29:d3:b8:
                    63:57:bb:e0:ba:d0:79:95:71:bc:33:c3:4f:59:55:
                    55:88:20:d4:45:a1:ae:7f:90:2e:f5:65:a0:c6:6d:
                    45:cc:86:eb:27:6a:fe:15:2f:b6:da:79:78:76:32:
                    4e:55:4b:e1:0c:b4:ae:ad:98:0f:e8:8a:c3:61:73:
                    e7:ba:fe:2a:96:ce:d7:22:9b:7d:d8:b9:95:bc:42:
                    1a:e9:5e:3e:95:40:79:9b:e5:1e:a2:a0:b4:8a:d0:
                    c0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F0:F0:23:C0:15:58:7F:B6:C0:4F:5F:6F:7E:0E:97:8C:2C:66:C4
            X509v3 Authority Key Identifier:
                keyid:DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:49:4d:31:6b:98:e1:8e:e7:6b:11:8f:aa:35:11:03:df:dd:
         69:6e:21:24:64:c2:18:a3:e7:82:d9:85:08:22:ba:5f:a3:db:
         17:b0:13:bf:08:88:3f:e9:44:e5:56:cc:e1:06:4c:76:11:0c:
         dc:f1:b1:b9:e9:ea:7e:d2:6c:fd:46:d6:24:c9:6b:bc:ee:00:
         05:7f:0b:d2:96:e4:d9:99:fc:96:7d:c7:e7:48:47:7a:f8:15:
         db:ae:b6:ee:f6:1d:c5:f2:e5:de:1a:67:18:a3:30:fa:3e:dd:
         ea:31:76:87:7c:6a:e3:09:1b:91:c9:55:29:cd:f2:f0:e5:4e:
         46:48:c0:9c:8a:88:8c:b7:c3:9b:51:61:0d:77:22:23:15:21:
         ff:97:a3:61:3e:d6:28:0c:38:e4:5b:d3:82:70:1f:dc:b0:cb:
         f7:23:b7:0b:ff:cf:b9:3c:5e:63:26:a2:51:2a:d7:cd:52:f3:
         6b:52:ac:39:ae:52:81:cc:89:25:5e:c3:e3:74:1f:4c:3e:01:
         87:85:0c:ed:9c:44:a6:fb:bb:82:de:54:dc:32:0f:88:82:98:
         2d:ab:ec:f8:0f:98:8d:60:73:66:16:bf:6b:67:f3:a5:31:ee:
         7e:97:4b:9b:46:b7:72:cd:4f:f6:a3:d2:d2:c1:6a:1c:97:50:
         7b:32:10:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:28:33 2026 by rpki-client