Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
File:                     u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft (raw, json)
Hash identifier:          tGpDf4QPGdA+tPKYmkOjVHXjbRpIy1ke7Z7S5zzXgHQ=
Subject key identifier:   76:8E:94:D5:53:ED:A8:8F:2D:F3:5C:35:1B:CB:AA:FC:CC:5F:31:5D
Authority key identifier: BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31
Certificate issuer:       /CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931
Certificate serial:       0875
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
Manifest number:          0864
Signing time:             Tue 24 Mar 2026 20:31:06 +0000
Manifest this update:     Tue 24 Mar 2026 20:31:06 +0000
Manifest next update:     Tue 31 Mar 2026 20:31:06 +0000
Files and hashes:         1: u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl (hash: X8JeuK8pvZs10MuBylckNKPKcz/4kjqKJz7EZKpFgDQ=)
                          2: B3A2D41A071211F0B9531F0DC4F9AE02.roa (hash: 99jEiPZckviVtuXJZrsVhVTNS0+5/ramRtJfm1GkHO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl
                          rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2165 (0x875)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F75E9, serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931
        Validity
            Not Before: Mar 24 20:31:06 2026 GMT
            Not After : Mar 31 20:31:06 2026 GMT
        Subject: CN=69c2f48a-7c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c9:37:e3:89:9b:ad:fd:bb:5a:8f:40:e1:3f:
                    fc:08:29:1e:c9:36:91:3b:73:86:f7:c9:53:ab:3d:
                    24:5f:11:24:3a:5c:3e:d8:0e:8f:95:5e:1d:aa:4e:
                    6f:48:08:bd:0b:3f:ae:57:91:80:a7:23:9b:2f:96:
                    de:c9:de:70:95:ad:c9:b8:d2:b7:11:8e:c4:d9:dc:
                    d6:a3:28:ba:59:67:5d:4a:9a:26:ac:c0:81:e5:22:
                    ca:13:29:55:b8:63:7d:53:49:3f:cc:fe:97:14:71:
                    c6:02:8b:99:46:2e:3f:e8:c7:2e:80:a3:39:09:af:
                    87:8e:e5:25:57:7c:1d:70:c0:26:02:0b:35:54:ce:
                    5c:c4:73:2f:16:64:0f:59:d8:fd:9c:ce:b4:a4:a2:
                    30:50:7c:6a:10:fb:36:e0:cb:55:53:de:c1:61:11:
                    0e:de:8c:b4:95:d3:a0:59:ae:79:9b:8a:a8:a4:85:
                    e2:7e:58:60:3b:61:a7:95:d6:22:20:ce:fc:5f:69:
                    13:35:2d:75:a0:e0:dd:56:c2:64:f8:58:69:b0:89:
                    a7:42:4a:32:fd:b9:9a:06:a9:3f:bb:62:c7:60:6d:
                    14:bb:6c:18:ca:44:17:3e:32:c2:0d:fd:a0:d8:10:
                    bf:21:88:ec:bd:d7:b2:62:c7:ec:f6:d0:0a:5e:5e:
                    62:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8E:94:D5:53:ED:A8:8F:2D:F3:5C:35:1B:CB:AA:FC:CC:5F:31:5D
            X509v3 Authority Key Identifier:
                keyid:BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:62:9e:a8:20:5d:06:04:15:43:9b:0d:21:a1:f8:ae:0d:74:
         51:81:90:f6:d0:1a:00:28:74:ea:e9:ae:99:7b:55:3a:fa:6d:
         ce:68:1e:bb:10:92:6a:d9:ee:cb:58:35:30:69:98:ee:fe:fd:
         e9:f7:dd:e8:08:4f:8d:ff:5e:c6:fb:aa:23:6a:17:65:54:7b:
         65:42:82:46:fb:b3:a2:dc:27:1b:60:67:0d:f4:bb:44:d2:f4:
         37:d3:5d:e4:9f:6c:63:09:93:2c:c8:bc:b4:0f:f3:09:4b:fc:
         01:1e:eb:24:55:e9:8d:09:4e:65:a1:fc:54:21:03:8a:45:b1:
         9e:17:cb:db:0f:39:45:b8:80:27:8c:32:1e:17:52:ab:2a:c8:
         d5:2c:fc:70:bc:e6:f5:24:de:cc:df:09:78:e4:b2:52:25:42:
         c9:fe:24:07:ef:e8:3f:ed:fc:4d:1e:0c:6e:83:3b:3f:58:b9:
         a7:1f:13:13:41:57:3c:65:b4:7b:5c:a8:f7:64:c2:a3:b9:72:
         bc:28:c2:96:67:bf:e8:2c:43:25:9e:45:36:4e:36:17:6e:1c:
         a4:26:71:f4:c0:25:76:e6:8d:20:46:58:82:b5:de:0e:9f:ae:
         0c:d1:f3:34:74:30:b6:21:13:20:2f:1f:6e:47:a9:eb:75:10:
         0b:2f:e7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:23:47 2026 by rpki-client