Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
File:                     sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft (raw, json)
Hash identifier:          hXtPiTmi4LgxPLfJnoZm7df0cYP4vp8qi/vQ+RclPpM=
Subject key identifier:   0B:E9:60:E0:23:59:6A:9B:89:3F:7B:F3:81:C3:63:BE:D3:84:88:AC
Authority key identifier: B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0
Certificate issuer:       /CN=A91F3099/serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0
Certificate serial:       055B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
Manifest number:          0550
Signing time:             Tue 24 Mar 2026 23:09:44 +0000
Manifest this update:     Tue 24 Mar 2026 23:09:44 +0000
Manifest next update:     Tue 31 Mar 2026 23:09:44 +0000
Files and hashes:         1: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl (hash: gXUzDOlzgR0HSn0TojqOjtx/wS53AK442Vdr7j500I0=)
                          2: 99961F74315E11EC953A8215C4F9AE02.roa (hash: f53D5d+q3fUodPkmYKhBtis6mgmJc3a1K68eaX3leUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl
                          rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1371 (0x55b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3099, serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0
        Validity
            Not Before: Mar 24 23:09:44 2026 GMT
            Not After : Mar 31 23:09:44 2026 GMT
        Subject: CN=69c319b8-e2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:de:d4:8e:fa:a1:84:69:a7:88:8d:5d:d8:f3:
                    4f:d7:89:b1:8b:78:13:39:5f:57:b5:d0:be:05:03:
                    ed:f6:92:c2:01:3f:e2:98:d2:13:d6:df:c2:27:9a:
                    53:6b:a8:1b:59:9d:ad:2e:75:ee:f8:1e:a4:3c:06:
                    ec:85:f0:55:00:30:11:44:27:d2:ae:22:c5:97:d6:
                    97:34:e4:81:8b:0a:82:10:00:9f:a2:b1:6c:6d:46:
                    a3:53:a7:67:02:62:52:c4:6e:79:d3:a2:c1:dd:62:
                    68:35:68:73:fc:ae:81:8e:23:79:2c:1b:70:da:e2:
                    45:3b:b0:ed:d4:ae:a3:07:5c:d7:9b:99:af:fb:39:
                    d3:65:c2:cd:c6:82:db:05:58:06:73:97:5a:1b:6a:
                    6a:32:40:a5:92:59:ad:9f:23:37:09:18:0a:f4:c0:
                    2e:c9:c6:f9:45:74:fe:4f:ad:73:ed:31:52:4a:a9:
                    72:f9:43:82:82:13:44:04:ef:a1:85:4e:d4:49:cc:
                    e6:7e:20:9a:66:4f:46:01:a5:39:cc:5d:26:5f:24:
                    0e:aa:b0:c1:f0:64:b5:f5:67:34:af:64:b9:54:93:
                    36:86:b1:64:fc:cc:59:d0:05:d5:54:fb:72:70:90:
                    7b:44:3b:18:e4:c9:f5:77:35:ba:35:6e:e6:54:d6:
                    bd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E9:60:E0:23:59:6A:9B:89:3F:7B:F3:81:C3:63:BE:D3:84:88:AC
            X509v3 Authority Key Identifier:
                keyid:B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:ce:80:4e:8a:ff:e8:f3:fb:17:6d:19:cc:da:9d:7b:d1:c1:
         8c:dd:27:f9:17:d9:42:9d:8a:73:6e:63:9c:4e:a4:4d:6d:16:
         19:bb:fe:13:d6:a0:78:14:4f:f8:96:25:1e:c1:2b:74:df:d8:
         c7:c4:0b:05:71:6e:75:8e:ba:07:44:47:f1:bb:9a:a1:4a:f7:
         2d:99:80:c5:1d:e3:7d:fe:79:36:1b:52:94:cc:81:07:5d:3e:
         17:e6:6f:06:81:c7:96:f7:be:4e:5b:05:a4:d8:8c:e9:60:1a:
         31:7a:d3:f0:b6:53:7f:ce:7f:bc:7b:ef:c2:8f:b2:c2:68:d5:
         f9:0b:03:68:81:be:f1:36:59:b7:09:83:4b:88:b3:b2:58:ec:
         f3:5b:a7:12:4e:d0:71:44:e2:a7:d6:bd:09:5a:65:3f:51:6f:
         7f:99:4f:dc:64:8f:5a:f4:ec:89:aa:f8:a8:38:1d:82:26:76:
         96:a2:83:c2:32:6c:9d:3e:9e:05:a0:0f:4b:28:1f:d8:92:f5:
         28:d3:0c:bd:2a:11:36:96:c2:bf:b6:e3:3e:5c:e9:c0:69:9e:
         da:fb:4f:81:f6:13:e6:2c:d4:02:20:cb:b9:fe:c3:b9:e7:f7:
         07:49:05:da:51:af:36:5b:e2:05:04:8b:aa:6a:f2:31:f4:c7:
         e7:0b:68:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:31 2026 by rpki-client