Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
File:                     i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json)
Hash identifier:          7CYoc44bpffQ862kr8q3lD49AwvtuI6C9zbfa/xIFis=
Subject key identifier:   B7:5C:A6:76:AB:6F:FF:21:6F:AA:45:E4:A6:FA:93:D1:F6:08:B2:BE
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Certificate issuer:       /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial:       0822
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
Manifest number:          077B
Signing time:             Tue 24 Mar 2026 21:49:27 +0000
Manifest this update:     Tue 24 Mar 2026 21:49:26 +0000
Manifest next update:     Tue 31 Mar 2026 21:49:26 +0000
Files and hashes:         1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: 25Zk2s+gp+MqahCMAqpjs6MzJcKFthyGb62BNC3zP4c=)
                          2: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: n0M+4sPO2I1QxTqzwDfkxMGQeXxQFFjm9haxwLReuy4=)
                          3: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: 23FlzfUUG2o+yV463/MzqJtyKQ1WBczJHj5IsGh6xFI=)
                          4: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: Q6rfj53pf8UB4FBvHHs00agRED73Fq/tWE6oYVaqkaw=)
                          5: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: +RLs5CzvZXqI61CAHfurXr4hcnlLMlz6cCq54j5zw2Q=)
                          6: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: bkBhWlpijpoPZQCX/fri8xyFsJ4YVWckTUwmgGDvtWw=)
                          7: 317095E0A28911ECBC355360C4F9AE02.roa (hash: ebFlaRUmZcQJUtMsrS9rZ+TKHMBWxmuEuoPHS8qzaoo=)
                          8: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: y2QzsDAAMtUIeIRXNVIyp+738veR++Jv2+SSsvzATjs=)
                          9: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: Z0VkCYZ1R/4kbKogoS7s0rDtQor1LJugR/SNxu4FzT0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
                          rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2082 (0x822)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
        Validity
            Not Before: Mar 24 21:49:26 2026 GMT
            Not After : Mar 31 21:49:26 2026 GMT
        Subject: CN=69c306e7-b6d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:d3:33:09:ea:b5:8c:1c:11:2d:51:9d:79:
                    d3:50:1b:33:62:c3:40:5e:4b:92:77:f0:9e:dc:c1:
                    87:6f:9d:90:9d:77:b9:a1:7f:9d:7d:a8:80:2c:69:
                    87:15:7b:16:0a:c3:be:61:21:3b:51:2e:12:bb:bb:
                    64:46:32:d1:30:5d:0b:a5:20:6a:d9:7a:c1:5d:2c:
                    be:7b:64:a2:ed:4b:5b:a0:68:2b:89:44:f6:3d:1b:
                    10:6b:ec:b7:42:d2:46:64:ab:0a:07:f1:f2:62:30:
                    44:02:ef:34:9a:d0:fc:48:09:ab:59:db:ef:f8:b6:
                    89:6d:87:11:b3:29:c7:b3:78:46:e1:1a:e1:18:44:
                    36:fe:eb:5b:5b:97:0e:8b:2e:9b:54:a8:ac:fa:cf:
                    6f:e2:cb:83:50:ef:9c:59:fe:fb:08:bc:4b:dc:96:
                    7e:87:67:d7:75:ac:47:58:0e:8d:54:54:ff:76:c4:
                    89:0e:3f:c8:d5:44:68:af:a1:97:bb:63:f0:6a:54:
                    bb:c0:ca:b0:2f:9b:22:00:a9:f7:8f:db:b9:eb:06:
                    2d:4d:ef:6e:95:c1:52:9d:45:a1:35:7b:a6:f1:6c:
                    c1:16:13:4a:e2:c0:f2:e9:f9:ad:ae:1a:3b:f6:ac:
                    78:21:e9:e7:21:be:5c:26:f4:4a:34:c0:b6:83:7f:
                    61:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5C:A6:76:AB:6F:FF:21:6F:AA:45:E4:A6:FA:93:D1:F6:08:B2:BE
            X509v3 Authority Key Identifier:
                keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:7c:8f:2f:c0:6d:b4:a5:d8:ac:05:6a:5c:75:19:c8:53:77:
         a6:e0:dc:ad:f8:c6:7e:f1:27:aa:74:e1:6c:68:ca:b8:21:61:
         20:9e:fe:bc:c8:f6:43:e6:bf:6b:14:0e:5e:1a:97:94:cd:76:
         01:77:3b:aa:16:4a:38:1b:64:d9:7c:7f:05:de:43:0d:25:bc:
         a4:37:eb:cb:47:85:d3:d9:2b:2c:7c:09:d5:5e:e1:39:59:e5:
         c6:8b:01:6d:b6:bd:12:ee:4a:85:da:0d:e6:49:c7:c5:76:d0:
         f9:90:2e:ea:5e:ea:68:f9:74:0b:4b:f5:78:6e:95:2e:07:bb:
         ad:ad:3d:6f:b6:ec:26:b7:23:d1:f7:03:5b:53:f5:59:1b:e2:
         25:eb:ed:34:3c:bb:a4:48:55:a7:77:ea:62:2e:74:d1:50:9b:
         57:b6:d2:16:37:12:5d:fb:87:21:ae:a1:94:03:14:36:42:28:
         9d:9e:9e:44:62:fa:ef:0e:e8:62:aa:d3:85:c4:83:dd:4e:46:
         6c:d5:e7:f9:06:6a:26:ad:47:44:52:f4:5c:98:21:50:ff:4e:
         ce:ab:cf:55:32:b3:ec:aa:b3:bc:a2:5e:5a:73:fd:d3:a7:ea:
         b5:5c:d6:a9:7d:20:3e:e9:1a:5e:ec:1d:51:74:b3:ab:8a:23:
         a4:7f:1e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:28:55 2026 by rpki-client