Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
File:                     rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json)
Hash identifier:          yIutKv8caHQ5xJLM647BRRuLPXlr/EjZm7M9v05D1fY=
Subject key identifier:   B6:0A:36:DC:D7:09:3E:6B:1A:A6:20:74:1A:14:45:CB:D4:A0:B7:70
Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4
Certificate issuer:       /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
Certificate serial:       060B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
Manifest number:          05AA
Signing time:             Tue 24 Mar 2026 16:14:44 +0000
Manifest this update:     Tue 24 Mar 2026 16:14:44 +0000
Manifest next update:     Tue 31 Mar 2026 16:14:44 +0000
Files and hashes:         1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: WIVUShBQ1XOHTcvx2cfCMLf/Y32g8vdFAOvBTu+ZYlg=)
                          2: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: wYx1PeQ/7Fy2cG/DCJNU1b8Uc41NkcD4iMjLyRu1msU=)
                          3: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: SB23MH7egYKIQ17nCj+xHe+4JVPIgfw/s/SRgDFUT6Q=)
                          4: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: 4cXqlRer52ZWlIOSKIID7G64udphrDhp88IgkcR8MHE=)
                          5: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: /rUJMh30ecAZJtef/1j5fUYrkpMN5VcKfJkxNOsXqME=)
                          6: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: CFOJdfAQAwrs7SLJek/PgQnllBP7mK7ufRDP4foqiCw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:14:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1547 (0x60b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
        Validity
            Not Before: Mar 24 16:14:44 2026 GMT
            Not After : Mar 31 16:14:44 2026 GMT
        Subject: CN=69c2b874-d63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:46:c8:41:0e:c3:b7:bf:65:86:51:3a:bc:5a:
                    c9:2b:bf:9a:1a:8d:d8:de:e2:58:8f:f3:3b:96:1f:
                    de:c2:94:d1:60:53:50:18:3a:ef:fe:97:ed:0e:79:
                    29:bd:ba:2e:67:07:0d:1c:3e:f2:f8:6b:a9:96:03:
                    89:24:fd:0d:50:41:54:aa:05:8a:f1:9c:57:57:5e:
                    f3:ad:d2:8f:46:69:d4:52:90:98:95:13:72:37:7a:
                    e8:d2:45:f5:2c:d0:a6:0c:72:aa:7d:54:0f:12:cf:
                    30:5d:08:f8:1a:bc:af:db:45:c4:31:3e:3a:1a:03:
                    33:e8:08:93:d7:d0:7c:94:0a:2e:40:e4:f8:b4:6e:
                    ff:49:ad:0e:8e:84:ab:2a:7f:c8:fd:7a:d2:6f:94:
                    0a:81:b3:02:ec:65:e6:e3:57:ea:42:3c:f3:06:2d:
                    47:79:d3:48:06:b6:85:41:d6:f2:53:73:b8:8f:78:
                    e0:b9:9c:85:6c:f1:0c:a2:bb:4d:60:b2:e8:73:a4:
                    7d:b2:1e:9c:35:14:28:2a:f8:73:99:8b:48:cb:0b:
                    e6:a4:5e:86:57:c0:1b:2d:86:32:71:cd:03:74:25:
                    f6:41:cd:df:2a:c8:f8:bd:8e:31:60:5f:7d:84:c1:
                    d7:4e:49:fe:65:9d:85:58:c9:62:0c:67:5c:33:fc:
                    f7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0A:36:DC:D7:09:3E:6B:1A:A6:20:74:1A:14:45:CB:D4:A0:B7:70
            X509v3 Authority Key Identifier:
                keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:ef:23:41:f1:9c:18:ea:f2:15:fd:a2:bf:d7:f5:67:d9:06:
         50:7c:c1:94:22:65:de:77:72:c9:81:e6:e4:7d:53:aa:c5:bf:
         02:cd:68:c1:b5:02:b3:e2:f4:5f:ee:2f:52:b9:94:c2:d8:79:
         4d:25:f2:30:ff:6b:fc:87:44:6a:e2:6e:b0:6a:42:26:6e:77:
         0c:6d:9b:a7:38:a4:7e:a9:99:ea:3e:d2:d4:b2:cf:3b:3c:c7:
         a4:ca:35:82:b6:c4:7b:51:db:66:a4:24:90:74:4c:eb:73:0f:
         18:61:27:66:e6:c8:85:12:a5:17:49:c2:83:75:30:49:5d:36:
         ef:24:0a:96:f6:2d:6d:76:18:60:a7:35:93:c3:15:c0:f7:2b:
         94:7c:ab:c1:d2:cd:40:c0:26:16:60:ca:15:02:e6:b6:4f:f1:
         59:b9:b3:a4:36:14:ff:65:71:12:86:a5:04:eb:3d:2c:43:45:
         74:1c:f5:66:05:7b:a7:e4:26:ed:d2:7d:90:dc:35:b8:a0:5a:
         2b:98:b7:95:1d:56:b5:80:69:04:00:ed:32:54:54:33:0c:f0:
         2f:e0:a4:85:49:a8:47:1e:99:a5:3e:ed:74:1f:bd:8d:ce:17:
         eb:e1:05:54:c9:bf:a8:2d:4d:1c:cf:42:18:43:c3:8c:29:48:
         7c:b1:c6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:43 2026 by rpki-client