Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
File:                     fzUqdpVtdwL8d69g_MEp5h_b6jI.mft (raw, json)
Hash identifier:          WV0ztyaHcdaf+M+3+bQ69T458h2Jay6q3bak6L5woCk=
Subject key identifier:   C5:E5:3F:B7:B3:F6:FD:26:ED:A3:B2:47:34:5D:41:77:C6:0E:A0:CC
Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32
Certificate issuer:       /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
Certificate serial:       0203
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
Manifest number:          01CB
Signing time:             Wed 25 Mar 2026 03:08:25 +0000
Manifest this update:     Wed 25 Mar 2026 03:08:24 +0000
Manifest next update:     Wed 01 Apr 2026 03:08:24 +0000
Files and hashes:         1: fzUqdpVtdwL8d69g_MEp5h_b6jI.crl (hash: zPr46j5AX6BkGrKvI8lHKSOqTvOERtrc/p72kmBVeuA=)
                          2: 3C2B0A98259911EFB9393E2EC4F9AE02.roa (hash: 5gWMY2ABlQc7NzKLI4CrxZ0mtja8StGBiRjgg1qjDGg=)
                          3: 2A26D2607E1311EEAF8FD93EC4F9AE02.roa (hash: 2pNCzrFLeuNwJ+o+omJeHhkXCESRdRl7rsiGuuIXYT0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl
                          rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E15AD, serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
        Validity
            Not Before: Mar 25 03:08:24 2026 GMT
            Not After : Apr  1 03:08:24 2026 GMT
        Subject: CN=69c351a9-d0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:70:33:27:65:e7:dd:fd:7f:09:14:99:7c:34:
                    e5:51:05:a2:66:83:41:39:de:a0:11:bd:7b:9c:76:
                    6d:2e:20:ed:1b:81:da:09:7a:0a:d4:42:b6:33:c2:
                    29:17:a1:e8:a4:11:ea:36:96:57:c6:2c:64:be:b9:
                    8a:46:aa:31:84:ac:5c:f9:28:71:e0:41:c0:ab:da:
                    6f:a8:1f:01:fb:8b:a3:b8:b0:ac:4c:88:bc:c5:00:
                    74:e0:45:1a:d7:b7:93:18:9e:f6:74:b7:50:68:5b:
                    1c:99:26:fb:9f:05:92:24:e5:d1:86:04:34:24:44:
                    d7:ca:34:9e:6b:70:16:01:b3:5f:d5:a7:55:8f:75:
                    61:04:16:0d:1b:f4:5e:1d:58:80:73:ac:94:89:ef:
                    7d:6f:4a:bd:03:f1:3c:e1:dd:e1:25:16:13:25:3b:
                    76:91:49:3f:51:20:52:bc:4e:92:5a:ca:d7:0a:9a:
                    d3:ed:da:c2:8e:16:21:3d:47:42:3c:45:63:56:62:
                    e7:99:85:8e:e9:88:7e:dd:09:4f:7a:ab:64:0a:f7:
                    32:10:c9:c3:bd:4b:04:7a:bf:86:a9:21:a7:cc:09:
                    fa:a5:f9:ce:0a:1f:39:dd:54:a3:ac:40:de:4b:5d:
                    82:38:82:79:5c:ce:db:17:e0:a1:cd:8b:1e:43:f7:
                    6f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E5:3F:B7:B3:F6:FD:26:ED:A3:B2:47:34:5D:41:77:C6:0E:A0:CC
            X509v3 Authority Key Identifier:
                keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:a5:31:71:42:0d:04:14:30:1c:32:14:c2:37:f3:69:09:0c:
         19:32:7c:c4:ae:ae:32:08:5c:9a:5f:24:28:ee:35:01:10:9a:
         7d:4b:2c:05:9e:00:8f:04:12:c7:2a:4a:ad:0a:f4:74:ab:a1:
         eb:32:90:ee:0f:1e:05:4c:1c:2f:d5:f6:ac:4a:2a:65:1f:e6:
         d8:b7:80:23:c4:4f:1e:18:b9:9b:87:ec:db:bc:04:d4:9a:20:
         f6:ee:1c:0e:ec:2f:0c:e7:98:07:76:ef:71:a8:0a:96:e4:8f:
         55:ae:f8:4f:cf:44:d0:b1:1e:a7:fb:26:c8:54:6a:f0:d0:02:
         a3:6e:29:7a:ce:c2:13:66:f4:fd:b2:3a:03:23:86:d3:34:ad:
         dd:19:b7:bf:f0:2c:1d:51:b1:c6:1a:62:cb:9a:9d:31:13:28:
         26:85:35:63:94:cf:9c:eb:52:a4:0b:d9:b1:82:05:df:0d:fe:
         85:9e:af:5a:ef:86:9b:66:a8:00:2f:d3:5b:39:bd:90:c8:66:
         13:81:a1:42:fc:66:69:db:09:85:37:a9:62:ec:7a:c0:63:4b:
         ec:fc:9b:6d:d8:40:18:00:3f:8f:eb:7a:ae:00:0a:b4:09:56:
         41:4e:6b:2d:35:c5:fa:1e:e2:db:af:40:e2:2c:1d:20:0b:ad:
         28:2a:7d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:28 2026 by rpki-client