Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
File:                     b2WgySJgsa2iMYeym6w76trAVmE.mft (raw, json)
Hash identifier:          5sZqR6hymeFDlgsTsVICCYo4CHoE/tN5G4Drzmdvb5A=
Subject key identifier:   3A:61:79:E9:B6:AB:95:E2:4D:CE:88:70:73:59:12:8A:B3:60:0F:C9
Authority key identifier: 6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61
Certificate issuer:       /CN=A91EA449/serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
Certificate serial:       0179
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
Manifest number:          016F
Signing time:             Wed 25 Mar 2026 04:08:04 +0000
Manifest this update:     Wed 25 Mar 2026 04:08:04 +0000
Manifest next update:     Wed 01 Apr 2026 04:08:04 +0000
Files and hashes:         1: b2WgySJgsa2iMYeym6w76trAVmE.crl (hash: 2DG/FLti3/IQFv8VmHwC+6Hp+GCNpf/GmMAd+7spItc=)
                          2: 9DE187FA2A8211F08575E277C4F9AE02.roa (hash: XOz44GxKH9RUxphnLQGSg14r7883QyXPCV8YI6CNByI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA449, serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
        Validity
            Not Before: Mar 25 04:08:04 2026 GMT
            Not After : Apr  1 04:08:04 2026 GMT
        Subject: CN=69c35fa4-21fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fd:a1:1f:1a:5f:0f:b2:04:7c:91:1e:54:9e:
                    46:6f:3c:70:22:50:a4:bb:f5:05:81:38:81:2f:bb:
                    15:d9:f2:e3:e9:9b:1c:10:d3:e6:d2:37:99:b1:c8:
                    85:2c:4e:39:49:00:af:d8:1f:f6:3a:bd:7f:6c:73:
                    ea:ed:e3:fc:93:40:91:93:1b:57:8b:37:03:f5:15:
                    ac:38:57:f7:42:39:2a:e6:43:e6:c3:88:70:b4:33:
                    0a:af:89:37:9e:05:55:7a:b5:b7:a1:b2:bc:c5:08:
                    26:ec:f7:c7:96:8e:e6:c7:2d:f4:13:a2:f0:a9:6c:
                    53:27:0e:03:da:ac:e0:1d:33:6f:4f:32:0d:9e:82:
                    26:7d:c3:27:5a:93:3f:a8:b0:88:2b:16:b7:0c:a7:
                    09:f1:13:e0:2a:e7:cf:e5:c7:b4:c5:76:61:df:93:
                    e7:be:ab:8b:d6:4d:46:3f:05:dc:d5:aa:a5:ed:5a:
                    51:ee:35:f9:65:47:06:8b:15:49:31:94:2b:62:3e:
                    e6:4c:c9:52:2b:cc:a3:e0:b4:a6:7d:ec:65:b4:1f:
                    56:84:2f:4b:3f:20:ff:4e:c5:a7:28:b1:b7:5c:0c:
                    10:d5:63:6e:cb:7a:17:8d:f9:f0:cf:3c:7a:06:55:
                    88:c1:8e:eb:43:27:54:d2:46:a1:58:ea:02:d5:47:
                    05:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:61:79:E9:B6:AB:95:E2:4D:CE:88:70:73:59:12:8A:B3:60:0F:C9
            X509v3 Authority Key Identifier:
                keyid:6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:07:32:d0:a3:73:b2:47:c3:4c:5d:11:3e:30:23:b8:3d:2c:
         2c:57:0f:1d:74:e3:e5:4f:1c:22:39:71:7f:d3:6b:1e:7f:f6:
         3b:a5:a4:9f:8a:f4:d1:c8:4d:a5:12:f4:4f:c8:b0:cc:e6:4c:
         88:b4:a7:0f:79:b2:2a:8c:43:3d:3b:57:f1:08:52:83:f2:84:
         fe:6b:b7:51:03:06:f6:c5:27:3c:e8:68:75:4f:88:0c:af:3c:
         90:58:c8:5e:6f:ad:fd:b7:b7:0f:84:36:27:43:ba:38:2e:ca:
         26:fd:93:02:6f:7c:41:0e:97:e1:61:16:62:90:ff:81:65:86:
         6f:3f:1d:a6:da:4a:2c:25:16:78:8f:65:8d:a1:2e:f1:1d:22:
         5d:39:f2:23:eb:07:3f:35:9b:39:a3:f1:fe:6d:59:08:fc:d9:
         6b:6e:08:1c:95:d7:7d:14:7e:2a:15:31:d6:a4:68:2f:fe:44:
         e2:eb:86:b7:38:f6:cd:52:5c:83:b7:1e:7c:4e:78:a7:0e:3b:
         30:3b:1d:3b:24:4c:d9:3e:35:d7:3a:90:34:93:64:71:1c:5b:
         a0:b3:8f:70:44:87:61:b6:ea:36:09:55:76:67:0d:a7:17:24:
         89:40:01:a3:ef:c6:2e:e6:f1:29:15:2c:b1:57:d4:44:c7:6e:
         2c:62:6d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:18 2026 by rpki-client