Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
File:                     Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft (raw, json)
Hash identifier:          IzrEj0Uf3erNxa9LZhoomAp6qAggzqCyans4ro50Rts=
Subject key identifier:   47:08:3F:D9:23:01:4C:A2:1C:75:AA:0C:70:6C:7A:5C:3D:CF:1D:37
Authority key identifier: 32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19
Certificate issuer:       /CN=A91F7AC9/serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219
Certificate serial:       05A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
Manifest number:          05A1
Signing time:             Tue 24 Mar 2026 22:53:26 +0000
Manifest this update:     Tue 24 Mar 2026 22:53:26 +0000
Manifest next update:     Tue 31 Mar 2026 22:53:26 +0000
Files and hashes:         1: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl (hash: 1ftqxnxhA5ixH3A6MFFsxsESVq+RPLgW0F8q0ixnZ+4=)
                          2: 66CA9E0C0C5C11ECBD37E846C4F9AE02.roa (hash: 8SswotttndtpysuN8f3cf2rgkNFT8Coim7wSA3FW2yY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl
                          rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1448 (0x5a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7AC9, serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219
        Validity
            Not Before: Mar 24 22:53:26 2026 GMT
            Not After : Mar 31 22:53:26 2026 GMT
        Subject: CN=69c315e6-0c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f5:ab:88:2b:d3:a5:b3:9b:4f:c7:e4:c7:66:
                    65:c3:98:d9:1c:74:98:ef:f1:a9:0d:22:1a:19:b1:
                    62:94:7f:7d:36:e1:d5:d3:4a:de:c6:3e:fe:60:11:
                    38:3e:e9:54:8b:4e:5c:eb:12:22:c7:47:69:a9:5e:
                    ae:ba:31:c9:37:2e:7f:17:44:8b:bf:e6:c6:41:92:
                    c9:bc:2f:77:16:ea:ec:ae:ec:b6:47:38:12:19:90:
                    5d:fa:24:ed:4e:83:47:4c:6c:d6:86:b7:1a:2c:51:
                    7d:c5:f0:1d:84:34:c0:94:54:e3:90:f9:f7:36:8c:
                    22:8d:72:18:07:fe:ee:b5:43:33:6f:ae:64:7f:81:
                    24:3d:ec:65:74:2b:99:7c:1c:d8:d2:24:f6:af:97:
                    2b:8c:77:b0:da:f7:39:10:a0:ac:81:b7:54:f3:f3:
                    39:71:5f:5b:de:3e:3b:58:c7:55:c0:e6:67:1a:3e:
                    f4:b6:cc:7b:07:07:03:0b:ba:96:f2:c1:87:d9:91:
                    21:a6:53:22:8e:5a:ef:a6:69:3c:73:1d:84:85:17:
                    54:07:b4:58:f5:76:48:04:09:61:30:3e:2b:8a:12:
                    21:bb:9a:26:1d:5b:2e:96:5f:b3:ae:46:38:c3:ac:
                    91:67:38:5b:a5:7d:f4:ad:72:2a:98:f9:cb:e4:1e:
                    fb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:08:3F:D9:23:01:4C:A2:1C:75:AA:0C:70:6C:7A:5C:3D:CF:1D:37
            X509v3 Authority Key Identifier:
                keyid:32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:56:d6:65:ee:36:02:57:dc:52:3f:42:22:f3:ad:f9:f3:20:
         1f:21:bb:51:5d:5e:0b:fa:d5:91:05:51:3f:ad:7c:39:2e:74:
         ba:33:bc:f7:bd:ca:04:0b:ac:e2:b5:2a:be:3e:70:33:0a:74:
         3f:d6:89:cf:67:69:72:5f:29:d4:0b:63:cc:2d:03:65:7d:5e:
         bf:5b:88:b8:e4:a4:9a:e8:61:4b:14:d5:7a:4d:61:a0:c5:58:
         f2:2b:bd:87:95:0d:f2:d1:d5:6b:bc:7d:bc:87:e9:31:27:1f:
         78:aa:de:0d:cb:0d:5b:b3:86:4a:23:d3:b6:d4:43:d9:65:fe:
         a7:fd:a7:c7:f9:db:1f:fe:6a:e0:5e:19:3e:73:12:75:d7:34:
         c5:71:c6:cb:8f:a2:b0:c2:2c:dd:ed:da:59:94:fc:27:8e:ce:
         6c:fc:ba:e2:64:b6:8e:30:0f:dc:87:32:04:99:61:f8:7d:86:
         34:c7:ba:c6:a0:3a:49:b6:4e:4a:fb:b0:ca:4c:41:d0:73:dd:
         1c:cc:b5:1d:9f:cb:7e:17:72:4c:5a:d9:b1:d8:cb:cb:ca:6f:
         5e:63:94:86:b8:19:28:91:43:11:e4:0d:cc:1c:de:5f:07:7f:
         cc:02:be:6b:df:00:b4:80:96:9d:1f:ed:fa:ae:6c:09:db:89:
         b4:c6:f3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:47:39 2026 by rpki-client