Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
File:                     aBiEwMdVflJu8rxNHlq8M2rif54.mft (raw, json)
Hash identifier:          11PlYYV2QiuWUbYIzQkSUB1wXiR0Z1KXgPLKX7USYk4=
Subject key identifier:   4D:F0:0E:30:53:BC:87:8E:2C:25:C7:FC:D3:93:7D:56:26:CC:1B:13
Authority key identifier: 68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E
Certificate issuer:       /CN=A91F9605/serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E
Certificate serial:       0701
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
Manifest number:          06F6
Signing time:             Tue 24 Mar 2026 21:48:17 +0000
Manifest this update:     Tue 24 Mar 2026 21:48:17 +0000
Manifest next update:     Tue 31 Mar 2026 21:48:17 +0000
Files and hashes:         1: aBiEwMdVflJu8rxNHlq8M2rif54.crl (hash: TyWPICYv0SZEKT7qsimXo/q3ORrVbVvOuTRKH1e7BvY=)
                          2: 9BC411EEA03F11F094CBF530C4F9AE02.roa (hash: KELxgiLDTZhlXFvFngFOfFbDFqtdPbkXc16UcXa81Vo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl
                          rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1793 (0x701)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9605, serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E
        Validity
            Not Before: Mar 24 21:48:17 2026 GMT
            Not After : Mar 31 21:48:17 2026 GMT
        Subject: CN=69c306a1-77f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c7:b5:03:fa:ee:6e:9c:2a:b3:69:ee:f4:ca:
                    db:8a:5c:e2:38:79:45:ee:79:d7:08:48:9c:2d:94:
                    7d:75:cf:ca:70:0f:db:ed:22:78:03:21:0a:e8:0d:
                    e7:f2:2d:24:e3:f0:31:14:35:ab:c2:39:9a:c8:23:
                    21:88:07:c0:b2:13:7a:7f:05:1a:fb:0e:3c:06:78:
                    a2:51:b7:37:f4:fa:c1:bb:c0:a1:e0:b8:20:94:61:
                    19:0b:fa:eb:1a:e5:cc:7b:1e:c6:cd:2b:a0:b6:e3:
                    b2:f4:e9:77:d1:55:52:a4:b3:d5:ac:52:ac:ec:65:
                    1d:e7:8f:96:1e:e8:39:da:9d:ee:f1:5b:0a:a4:1c:
                    27:f5:17:57:03:92:c2:d3:e9:0e:0c:43:ff:88:a2:
                    43:4b:ba:c4:06:65:fd:17:10:d6:f0:50:9c:fe:7b:
                    91:6e:b9:0f:74:48:7b:88:ab:e2:7d:fe:4d:3b:fa:
                    c6:44:1a:27:97:ed:81:ab:93:b1:70:05:a6:a8:09:
                    da:d3:de:af:2d:9f:a1:6a:e2:30:a1:c5:b8:68:3a:
                    89:71:2d:81:48:15:6d:b3:da:0b:32:b7:42:63:6a:
                    74:d9:14:ef:47:fb:91:37:96:55:ea:42:cf:97:08:
                    29:fa:59:05:13:a8:1b:c2:0f:41:a7:a4:d3:4b:4f:
                    89:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F0:0E:30:53:BC:87:8E:2C:25:C7:FC:D3:93:7D:56:26:CC:1B:13
            X509v3 Authority Key Identifier:
                keyid:68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:1b:03:1d:3c:03:33:d1:8c:64:bd:29:f6:0a:cc:f0:29:d3:
         56:5b:63:0a:b2:2a:83:60:d2:48:47:8d:05:cd:bb:e4:97:ae:
         84:a0:bd:f0:ea:7e:44:34:52:f9:bc:e2:0b:a6:91:b0:88:67:
         92:3d:0c:0d:78:63:a2:7a:ab:c1:6d:39:44:c3:93:2a:eb:28:
         8a:a3:ba:30:86:84:c6:93:f0:89:4d:48:bc:15:dd:41:f8:7c:
         b6:02:71:13:55:c0:c6:e6:ee:83:4b:03:66:ed:9b:80:77:02:
         e9:83:0d:89:36:27:15:6b:5c:80:c8:0f:d5:35:20:38:05:9b:
         49:23:c6:c4:68:33:4f:0f:e0:e7:a8:de:6f:9e:67:0b:88:a3:
         ef:1a:8c:1e:28:05:50:f6:9b:df:f7:59:98:20:04:cd:b3:ce:
         09:43:ed:f0:75:89:a9:87:ac:43:f0:a5:92:ed:fb:8a:59:23:
         e3:6c:40:b8:55:d9:08:81:62:50:40:49:70:94:ad:b0:ad:ca:
         28:13:58:67:37:4a:b2:61:db:4f:80:9c:c4:33:22:d5:03:af:
         d8:69:7d:64:a8:91:3b:a6:14:f5:a6:28:7b:64:b5:83:b6:27:
         77:58:fb:5e:ea:f8:90:fe:ee:59:a3:58:be:0b:27:2d:9b:2b:
         63:de:9d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:47 2026 by rpki-client