Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
File:                     pOaGeeZ7phon9Pib0JKu5cH3ITk.mft (raw, json)
Hash identifier:          U9ibZ94vQvixK9kfDio1W3IeKUv1xwpq71gvzKjqm2s=
Subject key identifier:   F9:22:53:8C:96:05:7F:B5:90:8A:ED:B1:38:2B:FE:44:67:34:86:BA
Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39
Certificate issuer:       /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
Manifest number:          010B
Signing time:             Wed 25 Mar 2026 05:14:05 +0000
Manifest this update:     Wed 25 Mar 2026 05:14:05 +0000
Manifest next update:     Wed 01 Apr 2026 05:14:05 +0000
Files and hashes:         1: pOaGeeZ7phon9Pib0JKu5cH3ITk.crl (hash: OLEoavC1KXUGoyGYZ6engI+PKUburacaH/51vc7uLa8=)
                          2: FB03B42C927411EF870E655AC4F9AE02.roa (hash: IoNbkBQReyDzJViXMom8CAS5Le63oVygKwA1bc/GSEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl
                          rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:14:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1B48, serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
        Validity
            Not Before: Mar 25 05:14:05 2026 GMT
            Not After : Apr  1 05:14:05 2026 GMT
        Subject: CN=69c36f1d-2eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:ea:42:50:a9:02:c4:24:42:4c:82:72:13:
                    02:91:03:df:64:42:1e:f2:6a:e6:21:dc:1e:aa:4f:
                    d0:ef:00:6a:af:0b:06:f1:c4:02:10:3e:4f:fa:18:
                    16:4b:e4:a2:58:9a:ac:4e:34:a2:82:fc:4f:56:a9:
                    95:9e:be:87:7b:3d:74:2f:67:05:0a:2c:fd:23:51:
                    01:8c:e2:a4:c4:67:32:6b:6a:3d:0e:03:82:43:b0:
                    6a:f4:d2:e7:f5:f3:ca:1c:f4:0b:a9:d0:69:f6:8a:
                    a1:85:3d:2c:cb:d6:ab:ff:a9:72:84:1d:57:81:8e:
                    87:99:58:7a:5a:6a:84:eb:a8:34:58:e7:94:c9:d0:
                    b7:ea:09:1b:55:86:4d:02:70:0c:aa:35:b0:b2:b7:
                    7e:ed:c5:47:fc:2c:26:61:94:a5:27:61:0c:99:80:
                    6b:ad:2d:e0:9b:ff:5d:7f:0f:7e:48:e2:0c:7d:47:
                    f9:25:fe:62:6a:56:52:82:de:9b:9f:1c:c6:dc:3d:
                    f4:39:cd:5f:d2:3f:cb:e1:a8:ab:8b:88:39:af:9e:
                    14:d4:fb:19:7c:71:ea:91:d2:69:24:f9:5d:f1:7c:
                    a3:c3:2c:77:82:7f:bc:87:f5:b0:fe:b9:86:7b:34:
                    72:40:79:7b:86:9e:c4:df:05:2f:fa:77:24:0d:01:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:22:53:8C:96:05:7F:B5:90:8A:ED:B1:38:2B:FE:44:67:34:86:BA
            X509v3 Authority Key Identifier:
                keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:58:f1:88:53:07:50:94:0c:f6:d9:52:f6:e6:f9:d0:c1:a7:
         17:09:23:d9:0a:06:94:e3:aa:2b:bb:41:7a:6c:c8:72:1b:0b:
         89:c1:73:b9:12:13:b7:8c:f4:c6:db:95:4d:c7:2a:fc:8c:ae:
         66:d1:a7:4a:f3:a6:97:3c:a3:c4:b8:be:aa:c3:55:1a:29:cd:
         ec:1b:c9:e1:1a:fb:af:10:6c:c7:c0:e1:bc:9a:8d:5b:fa:c9:
         67:da:5c:81:a8:1c:5b:7e:63:af:d9:b3:cd:2f:82:79:4f:46:
         63:77:ed:01:60:36:03:38:0f:9a:1a:5b:94:80:f5:36:fe:6b:
         bf:0d:06:24:b5:91:a4:71:eb:29:c7:a0:1d:f5:5e:01:9f:f4:
         eb:06:ad:39:d4:03:43:7d:50:b8:ff:5d:54:4e:fd:5c:fb:6b:
         30:ae:b4:6d:50:b7:a4:f7:59:ee:c5:80:a2:9e:d2:eb:43:2d:
         46:ff:3a:9c:44:e0:9d:e8:e8:20:44:68:81:76:59:5b:7f:49:
         9a:34:dd:dd:14:f9:9d:a8:f0:3b:f3:f3:26:8c:41:d1:65:38:
         55:1c:1e:94:30:66:97:79:ec:fc:db:19:6d:ed:fe:bd:ee:6c:
         ba:34:0d:21:bc:57:9f:63:da:4f:62:eb:88:2d:d9:df:ec:56:
         dc:c6:2c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:52 2026 by rpki-client