Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
File:                     Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft (raw, json)
Hash identifier:          Pg4Q/pjEE3CYuYJNkskCnW6AIjDuSv6rSKNhNKRYJd8=
Subject key identifier:   BA:B8:E3:DE:40:93:E1:DC:2D:AE:D1:DB:58:24:C1:42:AA:03:72:69
Authority key identifier: 09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF
Certificate issuer:       /CN=A91E9D0C/serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF
Certificate serial:       058A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
Manifest number:          0581
Signing time:             Tue 24 Mar 2026 22:57:56 +0000
Manifest this update:     Tue 24 Mar 2026 22:57:55 +0000
Manifest next update:     Tue 31 Mar 2026 22:57:55 +0000
Files and hashes:         1: Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl (hash: vOSd/dzh7NvYspxM3lKbXQEmrpdmanuP2VsXqJqsJsI=)
                          2: 630BCB6E1A1D11EC99B84C20C4F9AE02.roa (hash: 7sdaRztYfffuMPbpIvWHbP2AaEjIDw99pX3bZR2f4wQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl
                          rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9D0C, serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF
        Validity
            Not Before: Mar 24 22:57:55 2026 GMT
            Not After : Mar 31 22:57:55 2026 GMT
        Subject: CN=69c316f4-e6e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:92:6e:60:65:d1:9c:59:33:ae:2f:57:14:be:
                    0e:ad:bd:21:e0:41:8a:21:d3:f3:ec:de:75:88:0e:
                    fa:d0:4b:ca:06:9e:32:a5:98:c7:3d:74:a9:ee:30:
                    2e:bf:f9:ea:83:76:aa:cc:6f:a9:ed:71:a0:cf:66:
                    9b:c2:37:66:11:b1:ee:fa:ee:f9:aa:63:78:34:44:
                    21:15:aa:af:22:c6:cb:ab:b1:86:4c:c9:43:7e:32:
                    35:44:ee:d7:44:67:9f:ec:93:98:9b:b3:6b:ef:4f:
                    ee:e5:fc:13:97:5a:d6:6e:7e:8b:b8:e9:d7:d8:f4:
                    18:a1:ec:b0:af:d1:97:d7:58:a7:87:59:a7:46:cf:
                    e0:19:d8:eb:39:22:a2:0e:3e:1f:c5:ce:b4:d7:87:
                    6a:61:82:b3:0a:2d:69:e0:43:ac:eb:8a:86:2f:c5:
                    12:fa:9c:27:91:06:2b:af:cc:26:25:25:ef:e5:08:
                    a5:24:df:68:ad:17:3c:66:ea:e1:07:4c:fc:29:c3:
                    88:67:92:ac:b4:bf:9d:d5:1f:ce:e1:6f:22:7d:96:
                    9f:74:e8:1a:c2:b7:24:68:ba:c5:86:e1:ab:01:05:
                    9b:e2:e5:8b:8e:47:f4:b2:5b:67:38:93:7e:c3:75:
                    c0:64:54:3a:d3:36:c3:e4:6f:48:cd:63:ad:fc:b6:
                    3f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B8:E3:DE:40:93:E1:DC:2D:AE:D1:DB:58:24:C1:42:AA:03:72:69
            X509v3 Authority Key Identifier:
                keyid:09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d6:a9:1b:43:d5:90:0d:82:eb:ed:46:32:30:46:2f:75:20:
         d3:96:3e:e5:d8:91:82:ba:27:4c:90:b5:d8:b8:95:59:1e:83:
         84:af:36:7a:af:1c:ac:92:68:6b:8c:03:b2:74:61:25:69:b4:
         bd:26:e1:cf:a4:7c:5b:13:e7:5f:46:69:29:2c:f6:b1:88:b9:
         a6:03:22:1d:f8:f4:98:15:c7:fc:38:af:a9:d1:4d:64:cf:f9:
         ea:6e:d4:eb:76:d3:51:52:f5:c2:03:5e:82:f8:03:81:ae:95:
         8a:45:da:97:39:64:2d:c3:f4:41:c4:0d:ee:a0:4f:0b:33:47:
         cf:fe:7e:69:5f:5c:a2:15:72:0a:96:ca:fb:b5:4d:65:f6:f5:
         18:14:82:0f:90:e7:86:67:23:1a:cd:da:44:4a:d7:58:e3:cf:
         20:55:b2:2a:e4:e3:e6:f0:bc:3e:48:fd:79:a5:29:48:ec:5d:
         d8:98:f9:e8:11:fb:84:34:31:0e:0a:2a:ab:60:da:d3:ba:ef:
         b2:69:a8:21:8a:81:f1:88:dc:8e:df:af:fa:b0:e4:80:2d:b6:
         86:7e:09:91:e5:7b:28:6b:e8:78:ea:cc:ca:f3:f6:2e:27:47:
         6b:46:5e:c7:4c:aa:0b:36:c7:be:bb:ea:2e:a6:da:88:24:a6:
         2f:11:84:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:44 2026 by rpki-client