Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
File:                     Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft (raw, json)
Hash identifier:          Qd9HsE4oUYt5dC90Cmrq/ZdxKGWipIPNsUeV+oR5VNM=
Subject key identifier:   D6:7D:03:7B:6E:B1:69:92:40:FE:B4:53:AB:21:47:71:B5:AB:33:C5
Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
Certificate issuer:       /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
Certificate serial:       2649
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
Manifest number:          262D
Signing time:             Tue 24 Mar 2026 15:39:11 +0000
Manifest this update:     Tue 24 Mar 2026 15:39:10 +0000
Manifest next update:     Tue 31 Mar 2026 15:39:10 +0000
Files and hashes:         1: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl (hash: zDWLzargcuZ97XXeKusfFlw60vC1ur5g3+vKXlXp5fg=)
                          2: 171130AE15F011EC805A0A2FC4F9AE02.roa (hash: OkYL9yCBMETHaZgdXd4jZyNgPnKLNw6+6FHJVPhZs8k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl
                          rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9801 (0x2649)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8119, serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
        Validity
            Not Before: Mar 24 15:39:10 2026 GMT
            Not After : Mar 31 15:39:10 2026 GMT
        Subject: CN=69c2b01f-4038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:aa:89:32:c7:37:17:05:f9:87:d2:9a:96:48:
                    53:e7:5d:7d:4a:7d:78:db:65:ee:2b:4e:6d:e7:2c:
                    04:5e:4c:06:ae:4c:b7:3c:7b:95:0f:0a:93:5f:a9:
                    6b:5d:21:ab:06:88:be:73:12:4a:65:63:45:d3:d1:
                    39:06:eb:b0:8a:81:04:c5:13:10:b9:82:33:14:d8:
                    66:47:28:e4:f2:11:f7:ce:3a:f2:63:b1:2c:fd:fe:
                    d3:a4:23:db:54:11:9d:30:73:ee:83:da:50:a5:0e:
                    fa:45:2c:cb:d6:32:08:d2:a9:04:50:1e:56:85:4b:
                    8c:99:b2:50:ea:97:fe:36:48:46:7a:86:4e:86:2f:
                    f5:b3:b0:73:fa:bf:4d:a9:66:87:10:cb:ba:38:61:
                    80:63:e4:fb:b2:1f:a1:8e:7f:85:fd:c3:ae:f4:70:
                    54:5d:c9:1e:f6:ef:ff:86:92:a9:6f:5f:ec:08:df:
                    bb:93:83:fc:99:7f:8d:55:f4:f4:1c:0c:5f:72:dc:
                    bc:f7:f7:7c:e0:39:a6:28:cb:12:b4:3a:13:20:32:
                    b3:a2:ae:41:95:23:a3:09:ba:1f:a1:78:ac:1e:2c:
                    75:48:ad:01:b0:b0:dd:66:6e:e1:ab:df:48:73:82:
                    39:94:04:12:7b:df:bc:1b:e9:1e:5d:45:2d:b1:63:
                    a6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7D:03:7B:6E:B1:69:92:40:FE:B4:53:AB:21:47:71:B5:AB:33:C5
            X509v3 Authority Key Identifier:
                keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:7b:80:cf:fa:5a:4f:95:4b:78:52:3c:37:61:61:8d:28:b0:
         2b:ce:0a:cd:1a:6c:cc:24:a2:99:2f:5a:a2:2d:1a:26:e1:2a:
         41:45:90:03:15:5a:8b:f6:a6:43:ef:58:e5:99:25:5d:f4:09:
         8b:85:9e:ca:ad:0d:30:d4:1a:b9:fc:ff:69:cf:59:1c:7c:05:
         5d:37:5a:98:28:bc:49:e5:42:d9:19:28:3e:54:c5:67:cc:92:
         2b:40:97:ad:3f:6e:0f:77:8a:27:85:06:13:ba:67:64:8e:f7:
         a3:7a:e3:b8:7d:88:a3:08:80:95:88:68:77:ea:04:db:67:25:
         47:96:46:2b:31:7a:ed:f4:d0:4d:8a:bd:8b:bf:85:75:f9:24:
         16:f3:1c:a6:69:8d:27:db:f8:99:6b:5a:a6:96:e2:4f:17:3f:
         1e:25:e5:1d:89:3b:e5:5b:1d:c7:10:14:3f:c6:d7:b0:da:3c:
         8a:a7:02:18:81:96:87:f6:48:fb:00:ca:22:ca:43:05:bb:16:
         72:4f:8b:df:31:92:d5:25:48:ad:f4:8d:3b:ee:af:a2:a2:39:
         c5:ac:d4:fd:c3:8e:76:08:e3:d2:c2:96:d1:0b:5c:88:52:d3:
         77:4c:ca:b0:6c:b9:3c:e1:e9:03:ec:fb:89:10:8b:dd:18:a0:
         2e:c3:dc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:59:53 2026 by rpki-client