Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
File:                     MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft (raw, json)
Hash identifier:          viDSCYH/pyN++939INsZpmoJx4bhwp+c8N8WwRpI01s=
Subject key identifier:   8A:E4:88:69:4A:CE:B2:90:38:1B:C8:BF:B5:02:9F:4A:72:FA:D5:53
Authority key identifier: 30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D
Certificate issuer:       /CN=A91EF73D/serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D
Certificate serial:       0188
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
Manifest number:          0188
Signing time:             Wed 25 Mar 2026 03:44:07 +0000
Manifest this update:     Wed 25 Mar 2026 03:44:06 +0000
Manifest next update:     Wed 01 Apr 2026 03:44:06 +0000
Files and hashes:         1: MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl (hash: 2H2wfHBnLNT326aI7+IW3IgtKO+vNuH7lmv96cV0xtc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl
                          rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:44:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF73D, serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D
        Validity
            Not Before: Mar 25 03:44:06 2026 GMT
            Not After : Apr  1 03:44:06 2026 GMT
        Subject: CN=69c35a07-62d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:87:65:d7:77:8e:23:66:6c:51:e4:92:bc:91:
                    3c:06:6e:31:d3:6c:3f:65:50:42:ee:f1:4e:46:ca:
                    46:07:d7:f7:0f:af:79:a2:b8:39:c0:91:fb:3c:c6:
                    df:0e:87:a7:b3:5c:eb:59:80:ec:5e:8a:dc:cb:4d:
                    2c:35:47:01:0b:a4:ba:86:0a:ec:e7:f9:a2:78:83:
                    0d:78:ae:c3:ac:69:8a:88:15:63:5a:9d:17:67:18:
                    b6:24:85:20:3f:5d:45:c7:d8:27:26:19:37:37:23:
                    cd:bd:5e:9a:07:b4:6e:95:44:17:82:6f:d8:74:a2:
                    8f:ff:eb:b3:f1:6d:74:12:59:f4:6f:0d:73:ed:e4:
                    4d:bd:9b:03:61:ec:64:80:a1:21:ba:d0:61:ce:bb:
                    6b:4e:80:0b:29:58:2f:0c:81:4d:4b:bd:8e:3d:56:
                    8a:13:8a:17:70:67:41:8a:fb:97:44:b0:55:42:78:
                    28:0e:8e:6a:2c:0c:1d:e1:1c:13:4f:be:e3:7f:78:
                    8d:ce:ed:f7:52:d9:05:c2:d9:41:38:b8:1e:b4:0e:
                    26:fd:38:ec:47:0f:ca:7e:73:55:ab:4c:c3:74:ab:
                    66:b9:b0:0e:cb:3b:61:44:13:b4:1c:59:61:0d:ae:
                    db:38:e3:62:10:06:dd:0f:04:df:0e:4d:11:17:63:
                    fe:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E4:88:69:4A:CE:B2:90:38:1B:C8:BF:B5:02:9F:4A:72:FA:D5:53
            X509v3 Authority Key Identifier:
                keyid:30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:61:ff:33:34:0f:dd:61:7c:29:07:0d:32:cd:d1:a7:6d:a7:
         57:7a:bb:a1:f6:1e:db:26:78:b3:b2:b2:22:a3:e6:25:74:41:
         25:e7:26:12:3f:f8:c3:14:df:47:a8:26:77:a2:bf:9e:16:05:
         11:6f:35:13:1f:04:6a:26:f8:f2:d3:9b:f5:6b:f7:d4:84:96:
         e0:11:72:6a:8f:ea:d3:34:12:16:f5:af:32:d9:54:ad:42:43:
         3b:2e:e9:01:fe:25:25:81:16:58:e5:71:f4:1b:6d:25:50:72:
         30:d0:75:dd:3c:98:5f:33:25:95:b9:f3:ca:f4:a6:1b:50:f6:
         78:d0:92:e9:98:22:b7:68:49:55:33:d7:ff:ac:ff:29:8f:ab:
         8c:92:5b:f4:1b:77:f8:85:61:04:19:a3:0c:e9:97:42:1e:24:
         cf:84:90:3a:e9:4c:d8:46:38:71:22:77:b2:27:42:0f:3d:bd:
         c2:49:db:e5:b4:e2:23:b2:4d:3d:89:6e:a3:5f:ac:35:cf:0b:
         dc:29:a5:d2:16:79:e1:54:34:24:72:7f:8c:88:b1:4e:c3:ec:
         f0:50:14:25:5b:52:54:eb:ea:ae:63:2f:2b:5e:8a:04:25:84:
         32:c7:44:0c:74:57:66:ce:c1:18:9e:63:2f:3a:2d:b8:27:70:
         d5:c2:46:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:32:29 2026 by rpki-client