Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
File:                     29rQCQF9kd-0ONcNG41NNIYvBo4.mft (raw, json)
Hash identifier:          pXFLICKZpLCYJMGB3sdStVp+qVek8c6P469jvWU/BH4=
Subject key identifier:   91:4E:96:47:11:76:A4:52:6E:7C:E1:44:3A:F3:9E:D0:13:8E:CE:66
Authority key identifier: DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E
Certificate issuer:       /CN=A91F223F/serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E
Certificate serial:       01C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
Manifest number:          01BB
Signing time:             Fri 27 Mar 2026 03:24:59 +0000
Manifest this update:     Fri 27 Mar 2026 03:24:59 +0000
Manifest next update:     Fri 03 Apr 2026 03:24:59 +0000
Files and hashes:         1: 29rQCQF9kd-0ONcNG41NNIYvBo4.crl (hash: PsyWqWomTbxKweAh6pwM3N9uPTRAYxBlbJJELSDWS/M=)
                          2: 63E8E1AA8CAA11EE8B20D86EC4F9AE02.roa (hash: EVuru3xNSy6RQB88Xo1MqJkQivcU8HP38W4mpX0e8UU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl
                          rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 03:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F223F, serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E
        Validity
            Not Before: Mar 27 03:24:59 2026 GMT
            Not After : Apr  3 03:24:59 2026 GMT
        Subject: CN=69c5f88b-44c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:cc:fc:68:19:d0:0c:f5:20:76:21:ff:44:
                    c0:70:ba:aa:23:64:e0:9b:ce:67:46:a5:26:42:dc:
                    44:b0:f2:9e:17:a9:d5:73:c0:a4:cc:87:0b:86:9b:
                    4e:74:cc:a4:5c:71:a5:a4:3c:3f:f2:91:90:ba:e0:
                    e7:73:df:b3:6a:be:1c:82:50:ed:c3:3b:17:9f:a2:
                    33:30:3d:f1:8e:30:01:a8:f1:f0:7a:e5:41:bb:ee:
                    29:1a:45:fc:09:7b:d9:c5:2a:bf:60:1e:db:93:7c:
                    69:7d:e0:08:b3:6f:fa:59:df:67:fa:c8:db:ff:b0:
                    90:4c:50:60:d6:f7:28:56:8a:33:54:3c:3b:c1:bb:
                    13:29:5e:e6:ca:b5:83:74:3f:15:b6:05:4a:af:83:
                    0c:2e:b0:4e:70:90:88:f3:72:f2:52:9a:09:1d:05:
                    be:74:1a:58:e8:70:90:97:32:68:03:9a:4f:5a:01:
                    c9:4f:6e:73:ba:62:cc:31:6c:5d:83:5c:6c:be:22:
                    4a:2b:4a:a8:8d:c0:e2:6a:fe:bd:15:de:10:51:23:
                    a8:07:c5:b4:38:ed:f6:e9:ae:16:e8:a3:ed:6b:d5:
                    78:51:9e:c4:87:9d:76:27:16:60:5d:a0:84:6b:08:
                    3d:cc:48:57:ed:70:fe:6f:5a:8f:1d:81:a3:b6:64:
                    e3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4E:96:47:11:76:A4:52:6E:7C:E1:44:3A:F3:9E:D0:13:8E:CE:66
            X509v3 Authority Key Identifier:
                keyid:DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:0a:43:eb:f9:d0:b1:8f:1f:8e:20:24:48:d1:ec:d6:22:b7:
         1a:93:80:d3:f6:96:36:63:5d:09:a9:ad:4b:6e:4d:08:f5:aa:
         f6:3b:cf:70:eb:74:9d:04:85:32:6a:8f:23:57:dd:d3:7e:21:
         58:be:f2:df:57:da:2b:c6:2e:3e:ac:4c:52:b6:a1:b9:1a:2f:
         97:a8:ac:80:3d:fb:0e:ad:e9:b2:2e:8e:82:fc:0f:47:57:61:
         79:cf:60:32:46:9f:62:7a:ff:d6:5e:b0:0d:e0:ea:c7:8a:98:
         6c:cb:8f:8c:04:0d:7d:5e:be:25:60:9e:a4:f3:ac:ff:47:c3:
         f8:60:a9:1a:c4:bc:71:b2:39:81:f2:d5:7e:9a:43:84:2d:69:
         c2:96:2c:f9:f4:bd:40:15:e9:b4:aa:cf:ab:7c:29:d9:d7:67:
         4e:36:3c:ec:af:8b:59:66:21:fe:71:ac:06:77:f1:89:58:3e:
         b7:15:db:70:a3:66:e5:49:0c:f3:f7:e1:87:5b:2d:67:09:6f:
         5f:6e:57:39:2b:79:1f:8c:76:9a:90:23:e5:d6:05:19:18:d2:
         71:47:2b:22:63:67:64:52:52:32:2a:92:21:18:7b:fb:d7:83:
         a4:1a:1f:fc:99:d2:a6:d5:fa:08:84:7f:6b:0e:31:e5:8d:bd:
         3f:be:6e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:10:30 2026 by rpki-client