Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
File:                     SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft (raw, json)
Hash identifier:          ANHPYl+wkAGhFP3vydsT35IUKiWtfpd1QVZ/bQ+QTos=
Subject key identifier:   FD:16:36:81:7F:7D:C5:30:79:B0:C7:C0:7B:B9:78:EF:F0:12:22:67
Authority key identifier: 4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7
Certificate issuer:       /CN=A91FB0D0/serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7
Certificate serial:       0394
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
Manifest number:          038F
Signing time:             Wed 25 Mar 2026 00:26:14 +0000
Manifest this update:     Wed 25 Mar 2026 00:26:13 +0000
Manifest next update:     Wed 01 Apr 2026 00:26:13 +0000
Files and hashes:         1: SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl (hash: D65IYd1CTxLoSp9FmoXAOifrtH9NT0u+H5SP36FbUO4=)
                          2: D9EEB222DBFC11EC82E85E69C4F9AE02.roa (hash: UoeTGdDWFi8XFqsO7bK2F7lfw58R0SVfg1rPBc2qAFc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl
                          rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:26:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 916 (0x394)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB0D0, serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7
        Validity
            Not Before: Mar 25 00:26:13 2026 GMT
            Not After : Apr  1 00:26:13 2026 GMT
        Subject: CN=69c32ba6-ac7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b6:6a:11:ad:c2:c7:d1:44:a6:79:dc:5c:f9:
                    ef:9e:9a:e6:92:29:98:f7:00:f4:08:45:39:40:c5:
                    fb:c8:88:3b:56:13:43:20:6e:d1:a5:07:9e:bc:68:
                    40:e9:46:5b:2f:2c:56:b5:a2:0c:c3:d0:6c:68:bb:
                    6b:bf:76:ee:76:67:b1:b7:c7:79:3f:af:5f:4c:53:
                    29:05:68:2d:62:4a:b9:4c:10:2d:78:73:6d:85:26:
                    dc:f0:80:4d:a7:3f:fb:d9:d2:55:d6:ce:41:37:7a:
                    c4:b3:36:7a:72:e5:2d:c8:02:45:df:cb:e4:70:d3:
                    8f:13:08:92:ec:7c:b0:71:e5:c0:da:00:8f:0f:70:
                    7e:82:e5:70:f9:08:87:de:32:1b:3f:dd:b0:49:da:
                    9a:81:7f:ff:7b:91:92:ad:0e:ca:46:c4:73:9d:02:
                    80:1f:05:ff:b6:1a:16:89:c9:20:02:10:61:e8:2f:
                    d0:43:24:a7:3e:72:b6:3f:ac:62:64:af:09:3d:39:
                    09:0f:40:9d:5f:e4:12:9b:06:f2:9e:9b:3d:73:be:
                    77:67:36:ec:de:7d:0c:97:38:30:c1:4e:23:06:82:
                    9e:01:b1:f0:42:e9:6c:49:53:5a:ca:25:a4:b7:bb:
                    9a:d4:b0:52:27:4a:a7:0b:a8:40:3f:e4:5a:a2:a9:
                    cf:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:16:36:81:7F:7D:C5:30:79:B0:C7:C0:7B:B9:78:EF:F0:12:22:67
            X509v3 Authority Key Identifier:
                keyid:4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:15:e2:af:0f:56:75:22:d6:12:3d:82:2f:d3:04:9b:22:d2:
         58:83:26:a9:c8:c8:2c:67:27:d3:26:58:24:af:5a:9a:0f:69:
         7f:66:1e:c4:1e:d4:93:7b:db:e6:c3:de:02:a3:7a:4d:bd:3d:
         40:68:de:f5:49:c1:0b:70:8a:43:04:bd:70:a2:ed:ea:a2:a8:
         e3:43:09:d4:4b:d9:60:25:20:75:21:89:2e:76:05:6a:0a:76:
         34:09:b2:63:0c:29:b0:8c:14:f5:9f:4e:2f:f2:c8:d5:5d:51:
         5d:8e:a0:0e:70:e8:75:11:fc:5a:10:f6:1f:8f:36:e9:44:f2:
         a4:66:4e:4c:1c:cb:e5:ea:08:27:d2:a0:2d:e7:3a:9a:ab:17:
         77:aa:fb:59:42:16:fe:83:61:9a:8a:27:9a:7b:95:a4:b5:68:
         5c:8f:e0:66:89:15:24:45:cf:d1:14:85:3c:ee:11:90:21:0f:
         12:66:68:ca:99:3d:ce:40:a6:9f:8c:42:93:a2:29:78:59:5a:
         fa:80:47:4a:72:9a:32:01:40:2a:d3:67:9f:93:2a:6e:62:26:
         0d:14:57:df:e7:88:ce:2c:cc:c2:86:f8:7e:40:b5:a9:4f:96:
         2c:f4:39:d0:b9:c6:59:d5:81:fd:91:b2:93:77:87:c1:6f:e0:
         bc:48:67:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:53 2026 by rpki-client