Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft
File:                     98erVUq_Hcr4wXnBS8h6vPi3dg4.mft (raw, json)
Hash identifier:          jmEnsplpsbiEyBL3PhYzrU/5s3/5G2bXpjg7pkEZW44=
Subject key identifier:   52:DC:6F:67:38:9E:51:69:5A:06:BB:E8:13:2A:FD:83:82:D0:3C:64
Authority key identifier: F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E
Certificate issuer:       /CN=A91E15EA/serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E
Certificate serial:       034B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft
Manifest number:          0343
Signing time:             Wed 25 Mar 2026 00:38:35 +0000
Manifest this update:     Wed 25 Mar 2026 00:38:34 +0000
Manifest next update:     Wed 01 Apr 2026 00:38:34 +0000
Files and hashes:         1: 98erVUq_Hcr4wXnBS8h6vPi3dg4.crl (hash: FhjPg0h6z+U7SP8MhY25l0wszfqJFHw31PZ1fNA/dbE=)
                          2: A60C101AFB8411ECB7FF456FC4F9AE02.roa (hash: 8qsMfz3JHmHe0E9v9M1RcE+svnPYdju5b/dijzwDX2E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl
                          rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:38:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843 (0x34b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E15EA, serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E
        Validity
            Not Before: Mar 25 00:38:34 2026 GMT
            Not After : Apr  1 00:38:34 2026 GMT
        Subject: CN=69c32e8b-43f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:68:f8:7c:d7:d2:bd:92:ab:fd:d5:c6:9a:29:
                    bd:0e:b7:3e:75:b5:cd:b9:33:af:e0:03:bc:a1:79:
                    35:61:ba:6e:92:d7:1e:d5:a3:fd:7f:26:73:8d:19:
                    29:7e:dc:41:49:0d:fa:4a:d0:d5:4d:d5:ef:32:1c:
                    40:9b:d7:a3:a7:c5:49:c4:57:49:69:a0:34:67:1c:
                    78:1a:e3:43:28:dd:dd:64:e0:ef:ff:7b:35:2d:95:
                    d3:23:52:93:41:da:27:a9:b4:96:d2:90:11:4c:80:
                    1a:8a:d2:15:9a:6d:36:f1:f5:ac:c2:f4:2b:18:df:
                    dc:78:ae:3d:95:b4:74:9c:24:a5:2a:e9:15:e5:45:
                    bf:45:d3:df:24:f5:b7:70:3d:76:df:e0:5c:34:d6:
                    1c:ee:66:bc:03:13:05:1d:7d:9f:9c:50:18:51:ca:
                    05:ad:87:c2:0c:57:1d:f9:96:b8:7a:21:f6:e5:6b:
                    46:77:1e:11:00:b6:08:fc:13:de:59:32:7a:fa:ee:
                    6d:4b:94:a9:e5:95:61:fb:a5:70:17:71:1b:21:0a:
                    20:93:c9:64:46:21:2a:ce:39:76:62:1a:83:b6:28:
                    f8:3d:b7:32:55:ce:53:1c:99:f5:d5:df:1a:1d:92:
                    a5:ed:b0:eb:47:02:ef:11:52:68:81:db:04:18:92:
                    98:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DC:6F:67:38:9E:51:69:5A:06:BB:E8:13:2A:FD:83:82:D0:3C:64
            X509v3 Authority Key Identifier:
                keyid:F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:b4:65:3c:c5:6a:c4:8e:64:58:38:b0:de:f2:4c:45:19:9c:
         b8:9a:1b:88:f1:0b:b8:11:09:1a:94:55:97:64:8b:e6:f0:3f:
         7c:1a:9c:70:34:e1:d1:b8:cb:20:96:09:7a:a6:93:c0:1e:a9:
         59:7a:17:b6:79:c3:46:67:94:f0:6f:46:b9:59:4c:7f:ec:00:
         c9:d6:00:9a:c7:28:f8:c0:a9:e7:74:93:68:2b:9b:69:04:01:
         03:99:4b:ef:23:74:c2:a9:b6:9e:b2:24:ca:8c:b6:00:3c:d9:
         36:09:54:07:8b:bb:3c:6e:4b:a1:a8:ca:91:e2:90:6e:fa:b2:
         fb:49:e5:dc:fc:6d:a8:d6:99:4d:27:f5:da:70:b1:e4:96:74:
         2d:2a:1a:17:56:17:1e:fe:7f:48:c0:66:fc:81:da:27:e0:b7:
         06:49:3c:fa:1d:e5:70:cc:a5:67:02:4d:b5:e4:77:2b:68:1b:
         bd:2d:5f:75:8f:ec:09:27:20:ab:69:c5:39:e2:4e:72:1b:95:
         31:48:b7:5f:b1:47:b0:7e:87:a7:b0:53:79:5a:b8:27:14:48:
         4a:26:b5:cf:9d:dd:c0:19:7f:4a:24:c7:79:0d:7d:e5:04:b3:
         8c:17:17:5a:50:b4:f7:82:92:1c:40:77:da:b8:f4:81:a6:b4:
         61:6d:5b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:30:50 2026 by rpki-client