Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
File:                     _k_aOWcBbBE6yAe4STQKxlIPCAI.mft (raw, json)
Hash identifier:          OOlo5Iz74vl175WVTI4VUmfEokYPFfJbfaCR01lJQYo=
Subject key identifier:   70:71:18:54:4D:55:44:56:81:3A:9B:7A:8E:48:34:26:A5:DE:72:E1
Authority key identifier: FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02
Certificate issuer:       /CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802
Certificate serial:       0AA8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
Manifest number:          0A79
Signing time:             Tue 24 Mar 2026 19:23:58 +0000
Manifest this update:     Tue 24 Mar 2026 19:23:58 +0000
Manifest next update:     Tue 31 Mar 2026 19:23:58 +0000
Files and hashes:         1: _k_aOWcBbBE6yAe4STQKxlIPCAI.crl (hash: eLx5P558J1EFa0IRLa47UpQWLuhJDJfn3L6H3IIYdMg=)
                          2: 1E9514207F9311EA8177A82DC4F9AE02.roa (hash: Ftvy/rpA0Vj85hMaB0gzuwhB0x0hLyn+6aJiSOLoMmo=)
                          3: DE76B04EC2BA11EB99E5E36FC4F9AE02.roa (hash: OH/GXZ1q60s4R0UMX3ULerkxFMV9QJvIeVjbm9pioBQ=)
                          4: 91F5867070B811EDB6E1F81BC4F9AE02.roa (hash: rwF3ZHk/RVRSDVzAmZzOpcusN8aav7XVfExqPCMX7pc=)
                          5: 699CD772C2B911EBBB4C8928C4F9AE02.roa (hash: 2i8qGpQRreTsgSwr4uVW47W52ezT0jaL1HVor/4n178=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl
                          rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2728 (0xaa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9580, serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802
        Validity
            Not Before: Mar 24 19:23:58 2026 GMT
            Not After : Mar 31 19:23:58 2026 GMT
        Subject: CN=69c2e4ce-894b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:72:60:0c:90:d2:1b:b6:59:6b:39:77:62:
                    57:09:dc:be:ed:96:bf:cf:bd:84:c8:7c:25:1c:86:
                    b5:58:91:86:9b:a0:2e:22:7d:72:44:79:3e:69:cd:
                    6b:81:02:d1:9e:87:a5:2f:24:79:cc:5f:60:51:51:
                    cb:d3:6e:74:86:f9:ac:bd:e3:51:2e:6b:f0:66:2c:
                    e4:fa:b6:56:9f:48:cd:de:72:ad:28:b2:07:4d:c1:
                    e4:e6:53:4a:66:8e:7d:d5:1d:ba:9c:cd:7d:ea:95:
                    6a:1b:b6:06:a0:44:f4:64:e5:7a:15:18:a8:93:82:
                    9d:4f:a2:88:15:a8:54:5e:16:8b:e0:2b:97:4d:fd:
                    83:2c:ad:dd:17:1c:8a:fb:79:86:73:8e:e5:74:dc:
                    c8:be:d1:11:87:53:22:32:28:f3:7e:8e:ef:91:d8:
                    6a:e3:4b:4a:30:58:e6:db:a2:eb:c0:80:0b:dd:33:
                    c1:a2:24:f6:87:54:89:4a:7f:37:d1:c7:e9:d2:16:
                    72:0c:15:ea:32:a5:27:76:d1:05:4a:d1:c5:63:a6:
                    aa:75:48:1d:37:bc:7f:7e:cf:11:a3:df:70:ce:35:
                    23:de:da:29:57:ec:fc:29:15:1f:b7:e3:92:24:2e:
                    4a:08:ea:62:cf:ba:25:a4:21:5d:74:5a:53:47:58:
                    92:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:71:18:54:4D:55:44:56:81:3A:9B:7A:8E:48:34:26:A5:DE:72:E1
            X509v3 Authority Key Identifier:
                keyid:FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:4d:6d:e4:aa:48:3e:67:52:9e:ad:34:e7:51:b8:6f:8e:99:
         c5:de:96:6b:25:ed:72:69:5e:0e:c6:bc:fd:be:ea:a9:f0:b9:
         0d:d8:a6:0a:91:d1:13:66:d4:06:c5:fa:8c:6a:13:56:db:fe:
         0d:18:94:26:13:2e:60:90:35:b8:25:d9:8b:ff:c9:da:49:78:
         ee:b1:29:dc:e7:80:11:7d:58:40:8a:3d:79:23:de:42:92:9e:
         41:54:ea:ca:fd:8d:6f:d5:22:d8:6a:1d:8c:99:12:6c:12:75:
         23:db:c8:2f:ed:e6:75:b6:17:d3:fe:a7:a4:11:3a:3f:c7:00:
         0b:e3:7d:94:f8:0e:51:bd:da:3a:dd:45:ab:48:17:b9:ed:8b:
         25:02:f7:82:29:f5:0d:d9:cb:dd:8c:73:f7:fc:3b:4e:d5:9e:
         05:a6:76:ea:fd:22:32:71:bf:ef:dc:0e:d0:2b:fe:dc:0e:a0:
         26:ce:c3:f4:ec:bf:a5:37:f0:38:b7:1d:4d:11:d1:cc:25:ab:
         96:0a:89:81:4d:2c:5f:49:72:5c:87:e7:18:8a:d6:a7:48:7c:
         d5:a8:c8:0a:83:73:bb:97:d8:a5:d2:dc:42:16:c1:c9:73:d3:
         86:2a:a5:90:bf:5f:07:7c:0b:44:54:dc:3e:e4:ad:e4:fa:35:
         b3:22:58:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:36 2026 by rpki-client