Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
File:                     SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft (raw, json)
Hash identifier:          mr8cGG7K3vPehyr4vnzBdCgwBZ3W3WO0+JoxlfSlmNs=
Subject key identifier:   CD:36:98:A4:A4:44:C9:B1:42:77:DF:8F:93:CD:13:24:5A:12:32:A1
Authority key identifier: 48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F
Certificate issuer:       /CN=A91E563F/serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
Certificate serial:       097E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
Manifest number:          095D
Signing time:             Tue 24 Mar 2026 19:54:59 +0000
Manifest this update:     Tue 24 Mar 2026 19:54:59 +0000
Manifest next update:     Tue 31 Mar 2026 19:54:59 +0000
Files and hashes:         1: SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl (hash: hOS/AJPVDrVGUYz3A+K/MR/LVimjsmYaIirQrczR45U=)
                          2: E101BEF6BA1111EAA2AF621EC4F9AE02.roa (hash: KuZTxHp0fquU3vOYsc/ZT4rMTUBwZrUSC5c3xgaDYh8=)
                          3: EA41FB0EB6A911EAB0EB257EC4F9AE02.roa (hash: d3rKZ//K+dxve4/XCAx+VA89CIyu6oQFqdYbiu3rWTw=)
                          4: EABCE94C932111EE8C70453EC4F9AE02.roa (hash: Z5EXSqflUL/D/r+AuGpyvr0kie3DyXjBi6gYsTGAE8s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl
                          rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2430 (0x97e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E563F, serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
        Validity
            Not Before: Mar 24 19:54:59 2026 GMT
            Not After : Mar 31 19:54:59 2026 GMT
        Subject: CN=69c2ec13-9408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:67:5b:1e:db:11:fa:80:6c:12:0b:c9:a4:f7:
                    63:d4:a8:78:e4:86:89:e4:3b:de:e7:ca:37:34:a0:
                    52:97:4c:51:68:cc:d4:64:4e:a5:63:86:f7:4e:ae:
                    b5:96:8e:67:ca:d4:86:d3:74:70:a8:7a:0a:31:bd:
                    6f:8a:9f:d5:40:f2:66:25:ad:b2:dc:8a:4b:1f:0c:
                    03:1f:9d:5a:f5:bf:ce:60:3f:ef:19:fd:95:32:8b:
                    04:f6:ea:ff:a7:ec:03:22:a0:66:72:e4:98:93:7d:
                    46:9d:33:3d:1f:a4:f3:72:da:24:1f:3f:60:9e:ca:
                    f4:25:1e:1b:12:f0:eb:fe:05:d0:e3:55:d0:68:75:
                    de:4c:0c:7a:bf:88:dc:ce:f5:41:09:c3:ed:75:9d:
                    9d:5b:60:bb:27:6e:8e:b1:45:eb:6a:c2:08:cd:2d:
                    51:c1:29:aa:5f:2a:7e:26:0c:a3:ad:ec:6a:29:01:
                    16:42:37:0f:d5:73:54:7b:a7:b7:df:e2:d2:6e:5f:
                    61:10:f3:49:3d:04:60:0c:89:c4:4f:13:9d:c8:43:
                    88:e2:af:d0:11:84:6b:b8:c3:0a:64:29:c8:52:e0:
                    68:02:f5:51:5b:e9:77:66:91:f5:3c:67:a5:1a:c8:
                    c4:ca:b6:27:42:a8:00:8f:e7:94:71:06:70:5c:4c:
                    8a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:36:98:A4:A4:44:C9:B1:42:77:DF:8F:93:CD:13:24:5A:12:32:A1
            X509v3 Authority Key Identifier:
                keyid:48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7a:af:1a:01:f1:87:73:4b:55:ed:dc:ee:6e:57:69:12:be:
         b4:3e:d8:61:82:e7:c8:88:15:ed:b2:b5:57:20:6f:d9:d0:3f:
         7a:0e:97:fb:1f:97:b7:e5:d2:0c:a1:d1:0d:b3:ca:96:cf:39:
         d4:99:6d:3b:dc:54:84:3e:70:6f:74:ef:8d:fa:ac:cc:a0:f2:
         ac:99:73:22:f4:9b:06:d7:f0:2e:a4:e5:7d:3a:e3:6a:76:0c:
         c6:86:a9:47:d3:07:6e:86:f8:dc:6d:22:36:93:31:06:4c:fb:
         0e:21:2b:95:e8:12:5a:38:58:18:54:6d:e1:9c:79:98:cb:cb:
         9d:d5:66:61:5f:c4:93:a3:ec:26:d2:f5:8f:62:2c:ba:6e:9d:
         8b:a2:be:1e:75:e5:7b:5a:e7:00:14:11:5b:cc:e4:f9:7b:b4:
         05:c2:46:36:89:e8:bc:7b:eb:94:e0:0f:2f:07:83:e7:aa:e1:
         b9:58:3a:76:3e:02:44:b0:21:68:7d:ad:7c:eb:a8:a5:bf:1f:
         7c:d2:15:b8:17:b2:9e:59:a4:65:95:9d:11:d6:7d:da:98:f6:
         60:f9:19:ec:a2:14:6a:fb:73:b0:91:74:14:86:da:99:eb:63:
         04:ba:73:ec:42:0f:ae:82:3b:ac:b4:2e:1a:90:c7:fc:0f:b9:
         15:8d:26:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:39:03 2026 by rpki-client