Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
File:                     3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json)
Hash identifier:          nGIs9Kn+gRVAtIK8tK5BzjynA9n5/8oXxpgFIr3bh3E=
Subject key identifier:   F4:98:44:32:BF:32:FE:A1:A3:A8:B9:1F:E8:C6:0B:E1:6E:D3:92:5F
Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D
Certificate issuer:       /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D
Certificate serial:       0120
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
Manifest number:          011B
Signing time:             Wed 25 Mar 2026 05:00:05 +0000
Manifest this update:     Wed 25 Mar 2026 05:00:04 +0000
Manifest next update:     Wed 01 Apr 2026 05:00:04 +0000
Files and hashes:         1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: xvAZgp9QmZfyKjjmwHefxbJpxNjiCTZXrDtKN4Nbrw8=)
                          2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: EIk8cSgI2eVJTYnhDMxXScQ6yZa/oUis271sSK8mvCM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl
                          rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D
        Validity
            Not Before: Mar 25 05:00:04 2026 GMT
            Not After : Apr  1 05:00:04 2026 GMT
        Subject: CN=69c36bd5-e6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:55:ff:3a:05:74:19:29:6d:f4:63:7d:55:56:
                    86:35:5f:48:a1:77:1e:47:82:14:25:63:74:7c:b7:
                    b0:a4:23:f7:3c:51:1f:9a:04:ed:c5:5a:a3:18:c2:
                    82:0b:81:41:6c:92:d3:dd:4e:34:d1:db:77:65:85:
                    6c:17:b2:1f:7f:d0:13:06:dc:ce:78:63:98:de:0d:
                    27:51:44:89:f1:a6:01:b0:2a:59:a9:1e:6d:fb:56:
                    43:1c:05:2e:ec:c7:3c:dd:59:66:02:12:86:04:c9:
                    72:67:aa:e7:53:05:53:5d:3f:a5:54:5e:d4:41:46:
                    6c:87:07:f1:ff:bb:6b:34:97:ac:08:66:e5:56:43:
                    d7:8f:73:42:01:0e:cb:2d:81:71:13:cb:7c:b0:d8:
                    c3:64:38:cd:a6:19:21:41:42:c9:a8:25:05:7e:d3:
                    31:51:23:7e:31:9a:ea:5f:a5:37:df:e4:98:f0:41:
                    33:26:5f:3d:1d:9b:fb:3b:6c:15:3c:da:d4:54:ad:
                    7e:35:2f:2b:26:35:aa:8e:4c:bb:27:35:80:9d:44:
                    94:09:6c:66:a0:3b:85:83:7c:8d:c4:4c:b5:74:60:
                    da:dd:7d:72:bc:29:e4:37:42:85:15:f0:25:44:47:
                    d8:e3:f1:d2:a0:39:3f:48:5e:32:b2:b5:e9:bc:d2:
                    bf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:98:44:32:BF:32:FE:A1:A3:A8:B9:1F:E8:C6:0B:E1:6E:D3:92:5F
            X509v3 Authority Key Identifier:
                keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:3b:c4:03:e8:cc:8c:7d:65:bf:71:62:c1:15:80:3e:38:a4:
         08:e1:b0:ec:b3:7e:bf:6f:be:ba:b1:61:3b:be:d0:12:38:ba:
         bf:e6:f2:57:45:42:ce:72:c9:c5:c8:67:a7:ff:d3:75:22:4c:
         96:7d:1d:e1:f1:60:9b:d9:13:f0:4c:34:d5:45:83:05:53:02:
         95:ba:90:0e:1e:30:17:55:fd:dd:a1:b4:6d:19:65:a2:25:c8:
         bc:13:d0:39:12:4d:8e:e2:af:6a:a1:24:59:45:f1:ef:ae:1f:
         3b:27:82:8c:38:93:8a:d7:79:e9:a1:f4:cd:59:e5:8f:38:ab:
         85:49:c8:e3:8b:02:0b:c9:47:a6:6e:80:53:d5:7f:73:1c:64:
         a3:7c:c2:d6:8f:61:97:69:95:1f:0b:e1:fc:79:d4:d6:55:1c:
         8d:57:39:36:4f:52:23:11:62:b6:2a:6d:6f:28:e7:92:94:a2:
         86:a9:85:32:29:1a:f5:40:6c:02:4f:88:6c:03:9c:c6:73:dc:
         57:d1:5d:df:fe:7e:5e:d7:9e:e2:bf:cb:dc:c4:dd:92:6d:a0:
         56:9f:e1:eb:ef:b3:59:36:08:c5:97:80:c5:b5:a8:b9:cd:7c:
         dd:b2:c4:ff:f2:3b:ff:b8:ef:47:d1:8c:6e:9d:d2:60:91:25:
         96:28:7b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:44:00 2026 by rpki-client