Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft
File:                     788FLZiSks6xBQkSnI3iA9SfaAQ.mft (raw, json)
Hash identifier:          EsSokGHcwBzVEsWFiptRfgVCkCzwETj42foen8he4xU=
Subject key identifier:   6F:62:76:A8:A7:4A:C9:47:47:EA:41:D5:64:21:81:D6:49:6B:06:D1
Authority key identifier: EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04
Certificate issuer:       /CN=A91EB9C0/serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804
Certificate serial:       0DEF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft
Manifest number:          0DE6
Signing time:             Tue 24 Mar 2026 17:43:21 +0000
Manifest this update:     Tue 24 Mar 2026 17:43:21 +0000
Manifest next update:     Tue 31 Mar 2026 17:43:21 +0000
Files and hashes:         1: 788FLZiSks6xBQkSnI3iA9SfaAQ.crl (hash: Vv0sVewkBb5LEXo5OO6uk9xfBshaT9k4CINCoAW5+VA=)
                          2: 1004D41ED21D11E992825429C4F9AE02.roa (hash: eVq60p4Ks0G6yiB97mD631D9+9qg1L6YfgKt4510Uec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3567 (0xdef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB9C0, serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804
        Validity
            Not Before: Mar 24 17:43:21 2026 GMT
            Not After : Mar 31 17:43:21 2026 GMT
        Subject: CN=69c2cd39-7a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:12:13:64:b9:67:50:5a:b2:6e:be:26:9e:e2:
                    29:3d:d0:46:f6:28:d0:c6:25:5b:e2:49:e1:78:8d:
                    b6:92:dc:a2:11:9e:35:0c:a1:9a:a8:dc:d1:2b:82:
                    87:67:7b:ca:e4:f1:8b:4a:c5:84:4f:2b:33:e5:08:
                    3d:4e:5c:19:da:73:69:d7:cc:82:1a:a6:ec:9d:b6:
                    5d:8f:4a:b0:86:48:8f:cb:f8:41:2a:c7:ac:3f:36:
                    96:2c:1b:e7:95:dd:b4:fe:0d:7d:ff:28:3c:1a:f3:
                    78:3e:ae:b6:07:5f:28:69:33:a6:a8:7d:1b:84:03:
                    b3:94:4b:75:54:2c:db:e8:11:7a:15:74:87:f5:b1:
                    d6:67:96:21:e1:fc:dd:3e:1f:d8:5e:5e:ad:f3:8a:
                    20:db:d4:73:77:56:9d:57:d0:a5:8c:04:e1:23:40:
                    cb:10:ce:36:f4:89:52:ec:34:86:c9:12:8e:5b:37:
                    ea:73:dd:d8:f0:9c:7c:9b:34:4f:76:11:21:26:a4:
                    48:b5:6f:04:ab:2c:83:22:26:b8:2f:be:96:ea:db:
                    3d:1a:0a:db:e5:18:00:85:51:d5:8f:39:a7:7e:40:
                    1f:ab:2d:ca:bc:61:07:b7:50:39:a5:b3:28:b9:39:
                    f6:1a:0f:1f:20:c0:e7:6c:a2:bb:2b:ca:9d:b1:64:
                    12:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:62:76:A8:A7:4A:C9:47:47:EA:41:D5:64:21:81:D6:49:6B:06:D1
            X509v3 Authority Key Identifier:
                keyid:EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:3c:d3:a0:89:e0:58:8e:56:1c:4f:9e:82:06:09:a8:17:bf:
         f8:30:30:8d:28:2a:56:f9:32:c8:a0:75:0a:8e:da:b0:75:62:
         c9:a7:93:bc:e6:4d:a2:93:ef:6f:9e:c9:67:f8:b4:79:9a:66:
         af:b4:27:90:29:b3:e6:59:48:45:af:b3:6a:5f:8e:3c:a4:ca:
         f6:53:99:e5:45:f9:ca:33:4c:3c:1c:ad:93:bc:37:06:f3:ee:
         28:b3:f8:41:05:b9:c6:88:e3:4f:b9:02:13:a5:34:5e:3e:e6:
         85:3f:be:1f:06:82:82:ea:d7:c4:3f:51:b3:4f:e7:0d:c5:df:
         b1:ce:a0:10:04:da:0c:26:2e:1c:17:5b:a5:8f:e2:16:eb:0c:
         16:66:24:12:6d:6b:f8:e8:40:3e:0b:7d:34:74:0d:11:aa:dd:
         18:3d:26:0e:34:83:7e:2d:91:06:26:4d:a0:75:e4:e2:bf:74:
         4e:55:9b:57:cb:d7:6b:f1:77:59:d5:df:58:03:49:8e:38:6c:
         8d:ba:1d:37:a1:dd:63:75:24:d8:a6:2c:43:7c:f5:7a:4e:07:
         87:cf:1d:5b:a1:74:4e:5e:0c:a4:c2:fa:2c:88:87:13:5f:c8:
         20:58:53:2e:aa:20:d8:34:ba:8a:75:52:b6:3f:7b:7a:2c:7c:
         b3:0f:50:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:13 2026 by rpki-client