Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
File:                     sumTicSsA0jYrsh1t0aJ0E5wyDo.mft (raw, json)
Hash identifier:          yZbLBjJ6eQnmK7o2fO/eZy2ZeCd2WKZ6gReWbRBBYps=
Subject key identifier:   0E:79:06:95:76:1B:00:C2:A9:D6:F1:30:A5:3E:5B:E8:89:DF:2D:AF
Authority key identifier: B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A
Certificate issuer:       /CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
Certificate serial:       081D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
Manifest number:          0814
Signing time:             Tue 24 Mar 2026 20:50:15 +0000
Manifest this update:     Tue 24 Mar 2026 20:50:14 +0000
Manifest next update:     Tue 31 Mar 2026 20:50:14 +0000
Files and hashes:         1: sumTicSsA0jYrsh1t0aJ0E5wyDo.crl (hash: UdKkuiHI8WuaqjH5c8ZxrbKMC0skCBxhZ1u7RuAnUTU=)
                          2: 4F7AD592169311EB89C20F1DC4F9AE02.roa (hash: 1tDAaZdsBLGrAgJcWurie9qvnVA10y1wcTP0UPysdSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl
                          rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2077 (0x81d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E77A1, serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
        Validity
            Not Before: Mar 24 20:50:14 2026 GMT
            Not After : Mar 31 20:50:14 2026 GMT
        Subject: CN=69c2f906-6969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bf:52:ae:28:a2:94:77:29:4a:15:0d:5a:e1:
                    0f:da:d6:94:d3:7e:69:d1:fa:07:18:11:7a:fd:5f:
                    9f:49:33:c4:1c:fb:6b:d0:83:fd:e5:4b:ba:e7:f7:
                    b7:e5:48:53:a8:d3:0c:a9:9c:de:48:b3:af:6c:d3:
                    6e:31:45:b6:d8:fd:02:6d:6f:2b:b0:10:01:6b:84:
                    f8:65:1e:1f:db:d0:b0:0c:da:b0:d4:8a:a0:66:7d:
                    47:ff:b9:67:22:80:9e:7c:a1:b1:45:3d:54:54:ec:
                    93:da:1b:cb:04:15:a7:be:3e:46:ff:70:19:e3:46:
                    b1:ec:99:30:03:4e:8e:99:e5:a6:9d:74:53:70:90:
                    05:c2:69:a4:56:d5:02:fc:cf:a5:a2:18:76:5b:10:
                    59:2d:66:ad:ed:2d:27:9e:51:03:ee:e8:c4:35:0c:
                    d0:23:59:08:9a:d8:a4:3b:f8:2b:73:b0:22:b2:f8:
                    ae:bc:35:b4:25:83:5d:b2:e3:a0:ba:a9:84:cd:a2:
                    16:11:99:79:18:aa:cb:de:c2:eb:a4:82:84:e6:f5:
                    25:df:fb:71:3c:e0:f1:48:e7:df:74:c3:8c:30:70:
                    6b:29:67:04:ff:60:74:86:d1:73:c4:a4:12:7b:e2:
                    16:c3:07:3a:e3:e5:9c:06:35:cc:c0:64:11:fa:e8:
                    cf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:79:06:95:76:1B:00:C2:A9:D6:F1:30:A5:3E:5B:E8:89:DF:2D:AF
            X509v3 Authority Key Identifier:
                keyid:B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:28:7a:76:71:a9:d0:9d:c0:f9:c8:8e:7f:16:22:31:26:20:
         e3:24:78:ee:7e:8b:c6:0c:b7:b2:16:fd:b8:5d:9e:80:ce:13:
         e0:2a:32:5f:b9:fa:88:1f:22:c2:81:c8:bf:35:a8:6d:8b:42:
         23:38:d0:bb:ed:80:ec:8b:a6:55:8e:67:8a:a6:26:59:02:c4:
         c3:eb:d3:56:d1:eb:0a:b2:ae:93:b9:91:24:e2:42:17:82:6f:
         f0:71:72:35:da:80:0e:91:09:73:38:9a:82:87:f8:c8:10:70:
         1c:f5:c5:e8:61:a3:ee:09:03:99:14:39:dd:a2:4f:7d:06:d5:
         0b:b4:0b:0c:24:f3:6c:5f:49:68:93:1d:8a:3d:55:f8:d2:0a:
         5e:fc:18:ae:6a:ca:57:07:43:4e:ff:1f:f2:f6:b0:67:d4:a7:
         08:0a:5b:8c:46:08:5b:6f:a7:f1:93:69:10:db:63:0e:68:27:
         fc:4c:28:90:14:31:e9:0e:a3:8b:4d:15:36:f8:20:a1:9a:84:
         32:30:b5:8a:cb:d5:1c:c1:0d:f2:67:e6:85:96:f1:ac:b8:fe:
         c2:41:7d:20:68:c1:12:d1:e6:d6:74:68:1a:31:56:c1:47:81:
         3c:9a:44:b5:ec:4b:0d:80:56:df:4d:ea:6a:3d:6f:d2:65:b1:
         46:a3:53:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:27:15 2026 by rpki-client