Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft
File:                     P5liYas9HvBBZhs6732JMrVwJjc.mft (raw, json)
Hash identifier:          41A0QcGsmz4U906Ut+3721VLFfFfWuKxrfVHfljfBJg=
Subject key identifier:   24:58:4A:53:5F:34:B3:B6:F8:67:DE:05:03:2C:3D:28:38:C0:82:09
Authority key identifier: 3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37
Certificate issuer:       /CN=A91DC2A9/serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637
Certificate serial:       0205
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft
Manifest number:          01FC
Signing time:             Wed 25 Mar 2026 02:38:04 +0000
Manifest this update:     Wed 25 Mar 2026 02:38:04 +0000
Manifest next update:     Wed 01 Apr 2026 02:38:04 +0000
Files and hashes:         1: P5liYas9HvBBZhs6732JMrVwJjc.crl (hash: 6JrPAMhJ1Fe+VcuFDXk5wYFm48YBB3b1dc799s6dH0s=)
                          2: 9908BDDE1CAA11EF80E3BB87C4F9AE02.roa (hash: F4bqm9WQs1g0ZI6Eys/rDBe4XBqJ0gtCIN4AXwG1g8o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl
                          rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC2A9, serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637
        Validity
            Not Before: Mar 25 02:38:04 2026 GMT
            Not After : Apr  1 02:38:04 2026 GMT
        Subject: CN=69c34a8c-ed07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c1:ec:16:99:17:3c:28:13:23:ae:de:48:72:
                    68:5f:7d:da:33:dc:bd:12:9b:1d:c9:d0:cb:fd:05:
                    de:9f:cc:56:c7:32:af:6e:e5:06:c3:4c:6a:d1:e1:
                    68:d4:36:6f:27:1f:74:4b:50:2f:c3:a9:be:7e:c5:
                    86:a8:d6:43:70:eb:d1:ca:44:46:0a:fe:40:4c:a1:
                    93:55:a3:c1:02:04:cc:e5:94:8f:cb:00:94:67:81:
                    0b:ef:5b:f6:36:57:76:a2:f9:2e:56:44:51:92:9f:
                    86:ef:13:5b:81:8e:1d:ca:8d:a0:30:04:16:97:77:
                    af:1e:aa:3b:19:8b:06:61:07:6e:ac:fc:f9:f1:a9:
                    58:22:16:dd:2d:fc:7a:43:eb:8a:37:80:97:97:3d:
                    70:ca:8b:24:8d:70:f2:35:cd:d6:7d:93:c9:1e:70:
                    c3:a1:a6:e6:32:91:3f:bd:9e:06:62:98:1c:34:e7:
                    2a:2b:94:44:0d:90:48:4e:5e:e6:fe:84:26:55:87:
                    9e:63:0a:76:f2:da:12:52:70:29:60:ef:ea:43:97:
                    41:e6:11:47:2a:b4:22:a6:ee:c6:01:66:31:de:0f:
                    b3:73:ba:fe:69:2f:06:90:db:61:cf:1a:8a:c3:3c:
                    21:4f:7b:04:8b:ff:2a:67:38:6c:d8:e2:8c:df:f3:
                    8c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:58:4A:53:5F:34:B3:B6:F8:67:DE:05:03:2C:3D:28:38:C0:82:09
            X509v3 Authority Key Identifier:
                keyid:3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:22:c4:9d:0d:b3:10:9d:e6:54:56:11:84:f8:16:d7:01:a8:
         41:09:7b:0d:1b:cc:c3:3a:0c:3b:d6:70:bc:da:34:b7:2b:ea:
         8b:7f:6d:ed:02:2d:82:76:c4:2a:75:78:28:54:a4:4c:0b:2b:
         45:1b:2f:c8:51:10:b2:32:87:1a:db:45:23:fc:07:e4:49:ff:
         a3:50:49:63:eb:b0:d4:0b:86:2c:0e:87:f7:a9:78:77:d9:70:
         dd:15:b1:35:37:fd:70:88:63:de:b5:36:ce:ed:fd:71:db:ef:
         60:b6:aa:f3:b1:d6:25:5d:bb:49:8c:e9:2d:fe:d2:fd:4a:c9:
         40:f6:6f:5f:0b:92:1c:29:6a:6b:fc:46:a9:db:d9:71:fa:af:
         51:fd:75:4a:ba:c4:5f:9d:ec:bd:49:77:76:8c:06:f1:01:1a:
         d1:9e:ae:09:6a:2b:eb:2b:8f:18:ca:f8:d8:6e:00:da:81:df:
         6d:6b:22:ac:b3:a5:8e:fb:70:8a:5c:26:c7:2e:77:a9:b9:6f:
         07:8a:1c:27:a2:e5:3d:c8:19:52:73:88:d0:44:aa:b7:fd:73:
         f3:70:e5:91:30:14:e5:d5:2a:bb:8e:29:9b:52:ae:7f:6a:4e:
         38:7a:60:e3:e3:99:29:ef:5d:91:5d:15:37:75:e4:ed:37:2d:
         80:05:c6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:25:03 2026 by rpki-client