Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
File:                     aVxF2kJFO04LBivxfb9Eclx4g4c.mft (raw, json)
Hash identifier:          JurxFJ1cgjQ7mOh3YjT56B4JZ7Qh+R5ynTrVY0pYCDQ=
Subject key identifier:   35:77:55:18:6C:FD:CF:02:09:F6:38:3E:CD:D1:0C:27:4E:3F:36:E0
Authority key identifier: 69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87
Certificate issuer:       /CN=A91DF26F/serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387
Certificate serial:       2335
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
Manifest number:          2329
Signing time:             Thu 26 Mar 2026 06:12:49 +0000
Manifest this update:     Thu 26 Mar 2026 06:12:49 +0000
Manifest next update:     Thu 02 Apr 2026 06:12:49 +0000
Files and hashes:         1: aVxF2kJFO04LBivxfb9Eclx4g4c.crl (hash: 0OX6lPkJ1rgC42ToGUJAxzZ5BQL8HaSg0oMoZpeI/po=)
                          2: FD36E81421D811F1A613849C243D8C67.roa (hash: xMe3uTHM6tqBKB0NQkZcL82NKKdrgjOH/7M5sQ6r9pY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl
                          rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9013 (0x2335)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF26F, serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387
        Validity
            Not Before: Mar 26 06:12:49 2026 GMT
            Not After : Apr  2 06:12:49 2026 GMT
        Subject: CN=69c4ce61-8d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e0:89:23:bb:90:4f:47:20:83:c8:b1:5f:44:
                    fd:ec:5c:d6:de:1c:b0:3b:60:c5:ef:e0:c0:ed:35:
                    b0:9c:26:78:41:5e:36:4e:6a:a0:3c:bd:60:d0:1b:
                    44:e1:52:96:c1:47:3a:02:c9:77:24:30:f4:7e:0c:
                    e6:75:48:c8:57:1b:c2:b5:53:86:a2:d1:5f:2c:43:
                    b9:b8:3f:cc:56:f5:be:d2:8b:1b:4e:66:3f:cc:32:
                    47:9a:af:c7:47:10:48:bb:e5:6b:42:be:65:ce:b7:
                    42:7d:ad:ff:48:94:b4:ee:f3:e2:79:39:91:c2:5a:
                    09:bc:ed:07:c8:38:a2:ca:47:28:7d:2a:8c:6d:12:
                    7d:d2:a2:50:52:e4:f3:be:cd:f8:d3:da:9a:80:34:
                    29:ed:48:fa:80:04:f0:90:0c:e2:b8:a2:43:6f:2c:
                    78:ab:ce:81:b3:5b:ad:64:29:b3:1e:d1:79:38:b0:
                    4b:5e:a5:4b:2c:bd:00:ac:af:b0:30:cd:b5:23:c7:
                    9a:8a:5d:0c:8f:01:33:18:16:f4:a8:42:7b:03:15:
                    0d:55:55:60:15:8b:73:13:ae:a9:fa:d0:59:42:d7:
                    66:b4:41:d0:33:1e:4f:6d:a5:3c:82:ce:71:ca:4f:
                    5b:65:f5:3f:fb:41:dc:86:45:f4:39:5e:ca:3b:f5:
                    99:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:77:55:18:6C:FD:CF:02:09:F6:38:3E:CD:D1:0C:27:4E:3F:36:E0
            X509v3 Authority Key Identifier:
                keyid:69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:17:3c:d1:a0:9a:ab:b9:b5:03:a2:95:26:a3:5c:70:16:c2:
         ba:88:75:c0:9d:65:fb:ed:18:00:eb:64:7d:f9:76:04:fe:d6:
         b4:d3:8a:62:ab:38:e7:f8:32:41:78:2b:49:5d:c5:06:e7:82:
         68:bf:24:de:99:f1:e8:7f:25:92:d1:51:36:01:63:60:09:1b:
         5c:c2:f5:53:62:e2:f9:47:09:b3:fd:75:1b:76:48:55:e7:6d:
         6d:d4:4d:a7:93:7c:53:fd:c9:08:8d:20:d4:37:32:11:de:7f:
         57:4e:a9:7a:14:f2:77:49:e1:b5:ed:aa:d5:c9:15:96:db:f4:
         71:51:c8:89:b1:58:41:cd:74:a7:9c:a2:37:a1:b9:15:93:e4:
         3f:3f:e4:33:f6:95:f1:4c:04:45:92:99:14:21:09:5c:93:b5:
         27:a6:08:c8:b5:2c:a1:0c:45:c7:0c:76:6a:a8:67:ca:db:eb:
         a4:2b:51:5f:7a:9c:d2:25:5d:a3:b2:c5:e2:fc:85:1a:bb:5b:
         6a:5c:99:51:3c:24:a4:64:ae:a2:c9:b2:38:6f:5a:ab:9f:8f:
         c0:9c:53:f0:1e:c5:ed:30:28:56:91:37:1c:bd:93:15:5f:54:
         62:10:d5:4d:fe:e2:d4:58:ee:39:de:74:f6:dc:f8:31:60:dc:
         cc:66:e2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:23 2026 by rpki-client