Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
File:                     CyVhxLV9qB1w85cksN4scQF0n10.mft (raw, json)
Hash identifier:          wmPo0yzhLgq+mLoEaWB0LG+uiceQmdfQ7k3n97taxiQ=
Subject key identifier:   A6:23:00:B4:FD:F2:CA:60:6D:75:9B:3D:E5:D2:F0:EB:AD:C6:59:73
Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D
Certificate issuer:       /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
Certificate serial:       0FA5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
Manifest number:          0F92
Signing time:             Tue 24 Mar 2026 17:24:56 +0000
Manifest this update:     Tue 24 Mar 2026 17:24:55 +0000
Manifest next update:     Tue 31 Mar 2026 17:24:55 +0000
Files and hashes:         1: CyVhxLV9qB1w85cksN4scQF0n10.crl (hash: /MxNG9pYMUVYY4esweQgrJkbYuQqSPdcMly/ZAov4Pk=)
                          2: AC8695B8A60611EE8FEB2160C4F9AE02.roa (hash: vtr7yAZ74kddk2JEZlUucC+/G3kf3cROk0g8PEEHH8Q=)
                          3: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (hash: kSNCg22bt6PXx3rEaTBPvjpdHaLrIf1YauM4yC/A/tE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl
                          rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4005 (0xfa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1155, serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
        Validity
            Not Before: Mar 24 17:24:55 2026 GMT
            Not After : Mar 31 17:24:55 2026 GMT
        Subject: CN=69c2c8e7-311a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d1:71:42:20:43:c6:d5:a9:fb:91:c3:cb:ef:
                    37:95:a6:52:2a:09:6d:1f:de:33:88:92:3f:f3:3e:
                    57:75:c7:de:0f:b7:db:4d:fb:31:f3:fa:a1:00:8c:
                    83:47:36:99:21:42:9b:0e:33:c5:f0:7b:6d:8a:fe:
                    eb:51:90:85:84:99:7d:3d:7b:37:5d:0f:5a:a0:67:
                    48:7c:ee:63:98:a2:09:74:53:b7:f0:b3:43:ea:d5:
                    be:db:08:ec:a3:6b:96:db:f7:ee:8c:b0:99:3b:e3:
                    78:4f:38:c1:12:07:44:e6:4a:31:74:db:39:79:50:
                    fa:d1:2a:73:3f:47:9d:06:c5:c5:3d:1a:7b:d0:cc:
                    3b:d4:01:8b:8c:6a:5e:93:35:fa:df:52:de:69:7d:
                    46:a2:39:d1:92:da:13:a6:a1:88:b8:74:b1:b7:58:
                    7c:21:87:28:bc:50:bc:33:53:a8:af:a2:98:fd:ca:
                    03:d6:04:c3:c6:71:6c:e0:d5:d0:d4:86:d7:87:8d:
                    64:6f:d3:d7:73:ec:f5:7c:60:13:dd:c1:31:56:94:
                    8d:1e:e1:84:51:88:4a:d3:be:48:e1:91:61:f6:29:
                    87:94:b6:94:3a:44:f3:89:b3:2e:9a:9e:ba:89:4c:
                    cc:72:55:aa:74:75:3d:14:3c:91:3b:3c:c2:cd:03:
                    b4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:23:00:B4:FD:F2:CA:60:6D:75:9B:3D:E5:D2:F0:EB:AD:C6:59:73
            X509v3 Authority Key Identifier:
                keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b3:df:de:dc:17:60:4b:e1:bd:a6:8b:f8:c1:78:25:40:a5:
         84:ac:4b:11:f9:74:52:19:ae:ab:0f:da:c7:e1:c5:ca:35:33:
         22:14:c2:58:18:4f:2b:fe:ef:91:1e:75:3d:df:1c:0b:5a:3c:
         69:f6:f0:0b:91:38:5a:e9:3d:2f:82:67:f3:70:bf:b6:03:54:
         70:c8:58:e0:bb:df:c6:53:f3:61:d0:06:6c:e6:05:ff:84:a5:
         7e:5b:b6:ab:77:db:72:94:de:90:92:80:0c:65:7c:9d:96:5d:
         02:71:48:59:f2:8c:e1:e7:5f:d5:e6:a3:33:6e:65:da:cd:a9:
         bc:aa:5b:0d:f9:95:77:9b:a1:b9:31:17:44:5a:7f:f2:30:c2:
         e2:1d:61:61:23:9f:71:bc:77:14:a9:57:29:fd:5a:e1:c4:85:
         6d:28:79:ce:4f:1b:ed:92:72:64:70:13:23:45:a8:45:dc:92:
         16:d7:35:48:b6:35:86:71:66:0f:fa:5e:94:18:63:4d:56:f6:
         b2:01:47:98:47:8b:b1:4a:7f:15:57:47:ca:c8:c1:2a:52:04:
         7d:de:92:08:3c:cf:32:11:44:ed:dc:eb:ec:27:56:71:8f:0f:
         f0:6e:96:ed:84:53:be:72:18:f0:e3:40:2f:46:c7:e9:d9:b9:
         80:48:68:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:46:02 2026 by rpki-client