Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
File:                     9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json)
Hash identifier:          A5pRznVzLzSP+nUsqaK4Yw99fDvaVe7AQAqJ8Dy5MzE=
Subject key identifier:   1C:64:F3:F5:1F:8E:51:90:B5:AF:BE:8D:F1:43:42:C4:2E:F5:F2:81
Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12
Certificate issuer:       /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
Certificate serial:       353D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
Manifest number:          352E
Signing time:             Thu 26 Mar 2026 14:50:50 +0000
Manifest this update:     Thu 26 Mar 2026 14:50:50 +0000
Manifest next update:     Thu 02 Apr 2026 14:50:50 +0000
Files and hashes:         1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: UwgowfLYTsqajrm6kFywhXCXSNZKkeYuEivF39O4biI=)
                          2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: 3TvgIIQrzHdKEkfomFpL2w7xqxyJsgbpjgTdJxGfg7U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl
                          rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:50:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13629 (0x353d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD799, serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
        Validity
            Not Before: Mar 26 14:50:50 2026 GMT
            Not After : Apr  2 14:50:50 2026 GMT
        Subject: CN=69c547ca-8a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5d:33:fe:0e:65:04:4a:4f:56:ba:65:50:2d:
                    29:27:62:db:d2:f9:da:ad:04:fe:3d:41:7b:dd:04:
                    7f:b3:28:c4:99:6c:bb:75:3a:b9:dc:fd:7f:aa:01:
                    bc:df:bc:19:9f:89:cb:32:10:c9:51:5a:66:a9:54:
                    94:98:ec:a6:24:9f:92:0d:20:d3:07:d8:62:3f:16:
                    0c:78:ac:03:e7:7a:a8:10:79:04:a4:af:ab:55:d3:
                    e8:41:50:52:a9:17:0b:e8:f5:53:dc:e6:70:04:a5:
                    e6:80:96:f6:53:bd:16:98:f5:51:e1:26:ff:6b:d2:
                    cc:8b:96:2f:47:32:1c:3e:92:ca:d9:8f:b5:5b:1c:
                    b5:66:05:57:c8:53:09:eb:52:5b:03:00:73:f9:0b:
                    95:b0:c2:41:d9:b1:55:7b:2c:70:50:92:59:b0:f4:
                    b9:71:8c:a2:08:a8:65:d8:c7:95:01:7e:e2:c5:9c:
                    7e:cd:95:de:aa:6b:f6:50:f6:f7:f9:a4:40:e0:e8:
                    2a:41:78:46:c8:80:a2:2e:07:3e:c4:1a:7d:79:ed:
                    3e:8b:9f:01:a6:ca:9d:f4:09:32:c8:66:59:fa:db:
                    4e:d8:44:43:85:ef:3c:6e:87:09:c0:70:70:69:d3:
                    69:b6:52:31:f8:9f:71:ff:3a:93:84:28:1b:fa:c0:
                    57:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:64:F3:F5:1F:8E:51:90:B5:AF:BE:8D:F1:43:42:C4:2E:F5:F2:81
            X509v3 Authority Key Identifier:
                keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:da:27:ef:14:67:a2:88:6c:fb:f6:26:94:f6:af:a5:c0:ea:
         4b:df:73:02:28:9c:a0:8e:3a:7a:28:37:b3:10:45:2a:dc:26:
         22:d6:e2:dd:8b:0f:03:b8:c9:38:be:80:1f:8a:a9:bb:b3:b9:
         77:7f:cb:73:4d:6e:ce:c9:49:db:b2:39:fa:52:90:ff:2d:be:
         cb:dc:82:16:21:7d:e0:92:89:68:f9:88:07:36:f0:95:18:27:
         b3:ed:a9:53:03:43:ec:6e:b4:8e:f8:67:37:ad:cc:cc:55:38:
         92:f8:0d:07:3d:b7:7b:81:83:d7:08:52:fd:e4:52:51:4a:6c:
         7f:06:63:21:b7:36:43:37:6a:80:f1:a2:97:4e:6f:5c:76:79:
         ca:b8:3d:0f:d6:df:f2:e2:20:e5:f9:40:5b:15:03:f8:9d:88:
         12:f1:32:bf:d8:67:f3:35:4e:fa:bb:7a:1d:ff:03:88:b7:55:
         04:08:89:b4:b9:ea:ea:b1:a8:0a:57:98:36:40:ee:d7:4a:52:
         23:b3:5d:b5:75:f6:ab:bb:a0:67:1e:6b:ed:e8:fe:a3:01:5e:
         ec:29:e6:ef:c8:d2:62:fa:d6:5b:0a:1f:7d:e9:8b:6f:2a:73:
         1e:7a:d3:a3:11:68:cb:d1:9a:ba:90:93:0b:5f:b5:43:8f:f2:
         bb:c9:12:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:09:55 2026 by rpki-client