Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB3/79379276E24411F0B953D896716F56BC/SKYQvx6BAahCT58kGCuWfnoDoe4.mft
File:                     SKYQvx6BAahCT58kGCuWfnoDoe4.mft (raw, json)
Hash identifier:          SuzYzpbbl0HSwIXqSiM/Pu/IuNh613XIcFFkgpP0uMY=
Subject key identifier:   A0:B1:D2:5E:B5:9C:F0:6C:64:7C:C4:71:29:B7:22:1F:E1:1C:D1:08
Authority key identifier: 48:A6:10:BF:1E:81:01:A8:42:4F:9F:24:18:2B:96:7E:7A:03:A1:EE
Certificate issuer:       /CN=A91F9BB3/serialNumber=48A610BF1E8101A8424F9F24182B967E7A03A1EE
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SKYQvx6BAahCT58kGCuWfnoDoe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9BB3/79379276E24411F0B953D896716F56BC/SKYQvx6BAahCT58kGCuWfnoDoe4.mft
Manifest number:          36
Signing time:             Wed 25 Mar 2026 07:50:34 +0000
Manifest this update:     Wed 25 Mar 2026 07:50:33 +0000
Manifest next update:     Wed 01 Apr 2026 07:50:33 +0000
Files and hashes:         1: SKYQvx6BAahCT58kGCuWfnoDoe4.crl (hash: mrw3mSEdCyvSktGki6SIT4Ji0AnMPXxYQ27FJW48f7k=)
                          2: DB206508E24411F0BBC3E4F5716F56BC.roa (hash: wu90pAYchiWG+3QsrJ+YtF29NZQI1h2PzPmNs4nG9hY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9BB3/79379276E24411F0B953D896716F56BC/SKYQvx6BAahCT58kGCuWfnoDoe4.crl
                          rsync://rpki.apnic.net/member_repository/A91F9BB3/79379276E24411F0B953D896716F56BC/SKYQvx6BAahCT58kGCuWfnoDoe4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SKYQvx6BAahCT58kGCuWfnoDoe4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9BB3, serialNumber=48A610BF1E8101A8424F9F24182B967E7A03A1EE
        Validity
            Not Before: Mar 25 07:50:33 2026 GMT
            Not After : Apr  1 07:50:33 2026 GMT
        Subject: CN=69c393c9-ad34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:96:0a:8d:b1:71:26:a5:e6:b7:82:5a:cd:7a:
                    c4:c8:e5:a3:0c:78:26:f9:f1:6b:21:1a:2f:ed:8a:
                    a2:58:d9:3f:c7:f6:27:55:0e:8c:7b:5b:f1:ec:77:
                    35:82:51:97:3e:1e:a0:d0:f6:01:d1:c0:02:a3:48:
                    a5:d8:44:4b:76:64:70:40:de:56:25:2b:3a:44:cb:
                    44:71:89:37:de:08:9b:ad:27:65:dc:63:4e:b2:90:
                    3c:24:a0:43:3e:9a:8b:41:cd:4c:8c:37:19:b2:f0:
                    2e:98:b3:18:f3:5c:5d:c1:35:37:93:d1:91:45:da:
                    11:ed:00:2d:ef:0f:89:39:6f:7f:b1:7e:50:7c:8b:
                    bd:af:ad:40:83:c4:2a:61:02:d2:80:66:0d:fa:cb:
                    63:4e:47:94:ef:b8:6b:9b:44:fa:5e:79:c6:85:5c:
                    db:0b:b4:b8:3d:c3:10:7f:5e:14:5e:8f:e9:5d:fd:
                    76:9d:3d:cc:1a:9b:af:10:d2:85:34:18:18:25:b5:
                    b6:95:37:bd:e2:f7:47:c4:ad:61:aa:6c:dc:ad:f2:
                    77:d8:a2:6e:e8:c4:33:fc:f6:2d:8e:cf:5c:0f:60:
                    05:54:c9:c2:c8:3f:86:ab:d4:e7:ad:f0:4e:c5:96:
                    d3:b1:02:a0:9b:cb:01:bc:cc:29:c7:da:3a:0b:83:
                    17:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B1:D2:5E:B5:9C:F0:6C:64:7C:C4:71:29:B7:22:1F:E1:1C:D1:08
            X509v3 Authority Key Identifier:
                keyid:48:A6:10:BF:1E:81:01:A8:42:4F:9F:24:18:2B:96:7E:7A:03:A1:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/79379276E24411F0B953D896716F56BC/SKYQvx6BAahCT58kGCuWfnoDoe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SKYQvx6BAahCT58kGCuWfnoDoe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/79379276E24411F0B953D896716F56BC/SKYQvx6BAahCT58kGCuWfnoDoe4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:11:77:24:55:1c:c9:59:ee:7b:c9:d1:9a:1c:b2:bb:33:b3:
         8c:a9:8e:63:36:82:ce:d9:12:24:60:65:5b:f1:9e:58:03:1f:
         8b:ba:d8:1f:01:88:bb:bd:9f:cf:86:dc:5c:d8:46:95:30:10:
         e4:a2:0c:7c:a8:28:c4:01:53:71:00:ea:56:fa:29:99:c9:b1:
         93:93:dc:77:a7:d0:ef:68:4e:a6:ec:00:37:1b:fc:4f:d1:f4:
         44:52:67:0b:68:7d:8d:3e:a1:19:33:5b:dc:ea:60:cf:8b:bf:
         31:bd:56:0f:78:4d:56:66:16:11:ee:64:9e:5a:ab:7c:10:85:
         81:bb:a4:59:c5:78:3b:c3:6e:5e:04:0c:34:43:e4:68:08:dc:
         ae:b5:54:33:96:5c:3e:fd:c2:fe:a5:d1:a5:f3:dc:9a:24:84:
         c3:88:25:ee:4c:1e:fd:a2:d0:c0:dc:52:d8:f7:34:a1:45:35:
         8a:dd:63:6a:eb:34:e6:0d:77:8b:60:96:af:36:4b:84:a6:0a:
         e5:39:7f:fc:a2:14:d5:45:f1:cd:4a:8b:a2:e3:ce:48:dc:31:
         7d:7e:e8:82:04:16:4e:0e:c9:4b:9f:de:bb:a4:5c:d0:62:22:
         22:90:2a:f8:17:99:98:19:c3:4a:69:47:11:55:d5:b9:83:f8:
         4b:e1:d5:ac
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
OUJCMzExMC8GA1UEBRMoNDhBNjEwQkYxRTgxMDFBODQyNEY5RjI0MTgyQjk2N0U3
QTAzQTFFRTAeFw0yNjAzMjUwNzUwMzNaFw0yNjA0MDEwNzUwMzNaMBgxFjAUBgNV
BAMTDTY5YzM5M2M5LWFkMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5lgqNsXEmpea3glrNesTI5aMMeCb58WshGi/tiqJY2T/H9idVDox7W/HsdzWC
UZc+HqDQ9gHRwAKjSKXYREt2ZHBA3lYlKzpEy0RxiTfeCJutJ2XcY06ykDwkoEM+
motBzUyMNxmy8C6YsxjzXF3BNTeT0ZFF2hHtAC3vD4k5b3+xflB8i72vrUCDxCph
AtKAZg36y2NOR5TvuGubRPpeecaFXNsLtLg9wxB/XhRej+ld/XadPcwam68Q0oU0
GBgltbaVN73i90fErWGqbNyt8nfYom7oxDP89i2Oz1wPYAVUycLIP4ar1Oet8E7F
ltOxAqCbywG8zCnH2joLgxczAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoLHSXrWc
8GxkfMRxKbciH+Ec0QgwHwYDVR0jBBgwFoAUSKYQvx6BAahCT58kGCuWfnoDoe4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5QkIzLzc5Mzc5Mjc2RTI0
NDExRjBCOTUzRDg5NjcxNkY1NkJDL1NLWVF2eDZCQWFoQ1Q1OGtHQ3VXZm5vRG9l
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvU0tZUXZ4NkJBYWhDVDU4a0dDdVdmbm9Eb2U0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5
QkIzLzc5Mzc5Mjc2RTI0NDExRjBCOTUzRDg5NjcxNkY1NkJDL1NLWVF2eDZCQWFo
Q1Q1OGtHQ3VXZm5vRG9lNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCFEXckVRzJWe57ydGaHLK7M7OMqY5jNoLO2RIkYGVb8Z5YAx+LutgfAYi7vZ/P
htxc2EaVMBDkogx8qCjEAVNxAOpW+imZybGTk9x3p9DvaE6m7AA3G/xP0fREUmcL
aH2NPqEZM1vc6mDPi78xvVYPeE1WZhYR7mSeWqt8EIWBu6RZxXg7w25eBAw0Q+Ro
CNyutVQzllw+/cL+pdGl89yaJITDiCXuTB79otDA3FLY9zShRTWK3WNq6zTmDXeL
YJavNkuEpgrlOX/8ohTVRfHNSoui485I3DF9fuiCBBZODslLn967pFzQYiIikCr4
F5mYGcNKaUcRVdW5g/hL4dWs
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:43:57 2026 by rpki-client