Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft
File:                     N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft (raw, json)
Hash identifier:          XpD9v1YpvZ3BlNsi+xOHhxjwBktJsU5YYzfV7e33QbQ=
Subject key identifier:   4F:4B:B3:4F:8D:73:C2:D0:0E:4C:1D:C1:31:C8:68:B9:A4:AB:95:9B
Authority key identifier: 37:78:35:CD:A2:BD:63:67:EF:0F:EB:5E:A5:81:98:F8:18:3A:87:C1
Certificate issuer:       /CN=A91EA409/serialNumber=377835CDA2BD6367EF0FEB5EA58198F8183A87C1
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft
Manifest number:          0105
Signing time:             Wed 25 Mar 2026 05:17:56 +0000
Manifest this update:     Wed 25 Mar 2026 05:17:55 +0000
Manifest next update:     Wed 01 Apr 2026 05:17:55 +0000
Files and hashes:         1: N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl (hash: nsErXeHPiUrWcJ6ORnkNbyNl1JnyLYC8XDDUYb2Z+E4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl
                          rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA409, serialNumber=377835CDA2BD6367EF0FEB5EA58198F8183A87C1
        Validity
            Not Before: Mar 25 05:17:55 2026 GMT
            Not After : Apr  1 05:17:55 2026 GMT
        Subject: CN=69c37004-571b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:97:8c:bc:fe:7c:75:e9:13:ff:7e:20:f0:
                    cd:83:9e:f0:f4:5b:bd:41:ab:8f:88:56:8f:16:d5:
                    9c:2b:d5:6d:19:d0:ff:c5:40:9c:7c:b0:9d:12:46:
                    53:e3:9f:a2:2e:f7:51:56:a8:d4:eb:4a:35:fb:9a:
                    1d:7a:9b:d2:ab:71:45:af:28:73:fe:b9:ca:1e:77:
                    92:b7:da:79:81:c4:6e:f0:bf:70:a7:e2:55:e8:22:
                    af:9d:12:5c:ca:46:4a:e4:48:0e:df:54:69:8a:71:
                    e9:c5:1e:50:e3:ca:c4:04:85:e2:9a:35:1f:8b:d9:
                    19:38:e2:89:0c:6f:2c:69:b8:f9:af:8e:fe:28:c2:
                    26:85:e6:b0:45:9d:28:d3:fb:e4:31:d5:f2:64:4e:
                    9c:f9:f5:78:29:23:86:7f:c7:fb:04:6f:7d:7c:54:
                    11:88:d1:cb:7e:d5:4a:a5:16:68:a0:6f:12:98:5f:
                    3b:a1:d4:5e:f2:1b:70:e9:83:37:cf:42:ce:de:31:
                    7a:74:16:db:9d:d5:bc:17:db:c0:6e:63:2b:80:ce:
                    d1:87:ce:f9:65:c0:08:fc:f0:c1:6a:2f:54:04:8e:
                    ea:e0:b7:18:73:19:d7:a5:ef:a6:36:dd:f8:4e:6e:
                    c7:c0:cd:2f:6e:2e:48:b5:e3:b4:42:e9:70:7d:5c:
                    9e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4B:B3:4F:8D:73:C2:D0:0E:4C:1D:C1:31:C8:68:B9:A4:AB:95:9B
            X509v3 Authority Key Identifier:
                keyid:37:78:35:CD:A2:BD:63:67:EF:0F:EB:5E:A5:81:98:F8:18:3A:87:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:af:b7:74:fa:87:a0:db:e0:f8:f7:89:88:c3:60:e6:0c:88:
         84:ee:e3:aa:47:58:48:1d:57:65:2a:38:b9:e4:e4:e4:dc:28:
         d2:1d:14:2d:06:ae:46:f3:74:38:e0:c9:68:ae:fb:34:d8:f9:
         8f:36:b5:ce:fe:fd:00:af:51:c6:bd:37:7a:30:fd:c6:06:f2:
         66:37:89:d8:f9:27:96:c2:d4:b1:8e:8b:31:44:dc:e1:f3:d1:
         0a:fa:da:a2:72:32:1c:7a:69:35:3a:ca:72:79:3c:00:69:37:
         16:6a:c3:85:2c:6c:ca:61:c7:76:9b:ea:e6:6b:ef:74:c2:b8:
         e1:b2:6d:cb:fc:61:3a:37:42:17:b0:a5:60:75:63:28:94:88:
         99:eb:24:05:25:9b:db:9b:16:d7:5a:56:a8:90:2c:d0:66:be:
         3b:05:3d:d6:69:f3:c3:23:de:1b:8f:ae:aa:87:57:e4:1c:44:
         b7:25:53:c4:2d:eb:65:40:c2:d1:ae:32:8d:bc:2a:a2:e3:16:
         75:b3:0a:69:ba:f2:69:48:0c:e7:33:b4:12:11:3c:d9:d0:4b:
         cc:6b:5c:51:b9:93:b4:53:e8:22:9a:48:7c:89:78:c9:8e:8c:
         6c:a7:28:b4:c9:79:dc:a3:ba:17:42:97:da:fc:9f:4d:9d:17:
         b6:13:f8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:40:52 2026 by rpki-client