Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
File:                     s40rj01btqU-m0GSYQSBpdiBZUY.mft (raw, json)
Hash identifier:          c0GTk6McNJXIAIXu9N8XgKAwOcu2qs89ZgjSaG7z1BI=
Subject key identifier:   03:B1:A1:4D:35:BA:15:31:FA:3B:56:F9:ED:9D:0C:C2:C2:46:EA:59
Authority key identifier: B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46
Certificate issuer:       /CN=A91E12AD/serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
Certificate serial:       0B8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
Manifest number:          0B77
Signing time:             Tue 24 Mar 2026 18:57:32 +0000
Manifest this update:     Tue 24 Mar 2026 18:57:32 +0000
Manifest next update:     Tue 31 Mar 2026 18:57:32 +0000
Files and hashes:         1: s40rj01btqU-m0GSYQSBpdiBZUY.crl (hash: JbEIstVhigCwfDkK40Auu5M3FMkIvIu9RWLTDm0FUnw=)
                          2: 1E1E9122565411EBA14ED510C4F9AE02.roa (hash: 1+jD0Tan+qw9lGGMHwgX8x7RXas01clsSnD+5FJCfx4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl
                          rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:57:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2957 (0xb8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E12AD, serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
        Validity
            Not Before: Mar 24 18:57:32 2026 GMT
            Not After : Mar 31 18:57:32 2026 GMT
        Subject: CN=69c2de9c-51b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:45:d5:34:49:05:2f:61:ee:3d:60:fc:cf:89:
                    2f:cd:4c:ef:62:4c:4e:7a:1e:68:1c:b0:68:bf:aa:
                    31:73:0f:a5:1f:b5:14:b4:47:7c:95:55:fc:9d:be:
                    92:6e:ea:79:49:0e:a3:14:5a:33:4e:85:31:a6:46:
                    13:90:05:12:4a:d0:a5:36:3d:7a:59:23:89:68:b7:
                    40:2d:15:9f:e1:f1:ab:9b:5b:66:08:34:4c:3a:65:
                    9d:a7:6d:26:ac:e2:d4:76:58:4c:ba:dd:5b:2b:d1:
                    fd:b3:1d:50:fd:b6:fe:9e:c5:d5:4d:5f:a9:18:19:
                    15:74:b0:ca:86:5d:47:a2:8b:df:ef:6a:4a:1a:0e:
                    d4:2b:31:d1:e2:db:46:0f:c1:f4:47:c1:8c:fb:1d:
                    3e:cd:59:e7:0f:2f:bc:07:5c:14:b2:7d:6a:94:c9:
                    af:92:e4:25:00:ae:88:2a:1b:17:d1:88:e7:42:bc:
                    67:ad:3f:89:c5:86:03:3d:dd:48:55:e2:8a:27:73:
                    e1:37:33:ea:3c:2c:53:aa:c2:74:7b:61:24:f1:1d:
                    9c:fe:50:88:0f:58:8e:f1:3a:d5:32:62:ae:f6:fd:
                    5a:38:52:92:a2:de:d9:56:d2:d4:54:88:66:fc:48:
                    b0:47:9c:58:7b:f2:00:5f:c3:f3:0a:8f:57:22:ff:
                    1e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B1:A1:4D:35:BA:15:31:FA:3B:56:F9:ED:9D:0C:C2:C2:46:EA:59
            X509v3 Authority Key Identifier:
                keyid:B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f0:22:41:a8:3d:b9:0f:9a:ea:dc:14:4e:25:1c:36:5a:d9:
         c8:66:9a:7b:27:88:d1:a2:70:dd:f9:e4:ba:2f:2d:fb:b8:40:
         5e:0f:f9:68:39:d4:b3:3b:44:4d:64:8a:59:c3:71:a7:cb:4e:
         eb:59:f2:b2:ee:95:ea:7b:8d:19:44:4b:0f:78:01:b8:b3:57:
         43:78:5c:5f:68:96:eb:2a:62:82:db:4f:ab:a5:95:90:83:80:
         21:46:0d:43:d7:25:28:99:4f:1c:72:17:ba:57:c5:0f:1f:79:
         d3:ed:d7:87:11:34:7a:36:8f:98:f1:5d:10:be:df:11:74:aa:
         2d:7a:19:b2:3f:34:a6:74:f7:93:49:28:bc:e2:5a:53:ee:85:
         83:41:7c:75:ca:eb:30:34:fa:55:bb:e9:44:d7:33:88:26:0f:
         6a:ce:d2:20:92:17:f5:e2:2d:0f:a3:01:ea:77:6c:18:10:03:
         20:22:43:15:06:13:d8:10:0d:5c:e0:e8:93:1f:94:da:71:b5:
         82:ba:d0:06:86:3a:99:c7:dd:45:7d:88:0b:61:40:ab:87:a5:
         67:dc:8a:11:ba:08:44:76:2b:b7:2c:fb:87:0c:d8:98:e4:f6:
         4a:5d:8e:a3:34:b1:2e:97:63:10:4c:29:eb:4e:da:b9:4f:be:
         f7:d1:7e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:02 2026 by rpki-client