Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
File:                     TihN8oxlIKdxEwQV85PINH1ubek.mft (raw, json)
Hash identifier:          ayRfxweKOfXwy4Aiz2t8YGrfa5m6EIUcwH5jCg/WhDQ=
Subject key identifier:   14:6E:4F:31:DB:DB:AB:54:9A:D6:0B:7D:23:FE:15:D6:55:D6:0A:9E
Authority key identifier: 4E:28:4D:F2:8C:65:20:A7:71:13:04:15:F3:93:C8:34:7D:6E:6D:E9
Certificate issuer:       /CN=A91FC765/serialNumber=4E284DF28C6520A771130415F393C8347D6E6DE9
Certificate serial:       1EE0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
Manifest number:          1ED4
Signing time:             Tue 24 Mar 2026 15:57:38 +0000
Manifest this update:     Tue 24 Mar 2026 15:57:38 +0000
Manifest next update:     Tue 31 Mar 2026 15:57:38 +0000
Files and hashes:         1: TihN8oxlIKdxEwQV85PINH1ubek.crl (hash: nSTPaejP/S875BrmbCs1sUCTL42gqEAhA6hAQG9xNNw=)
                          2: 9071A5E690CB11E6A804EF84C4F9AE02.roa (hash: BCoqh3XwiuOYuTN55f/bRuAb674C9ONaqrljAIYqfbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.crl
                          rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7904 (0x1ee0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC765, serialNumber=4E284DF28C6520A771130415F393C8347D6E6DE9
        Validity
            Not Before: Mar 24 15:57:38 2026 GMT
            Not After : Mar 31 15:57:38 2026 GMT
        Subject: CN=69c2b472-c679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:25:2d:ce:d7:9d:eb:da:c8:d6:2b:4e:f6:ee:
                    ac:cf:79:ae:21:c4:13:6c:bd:60:78:a4:53:cd:40:
                    17:71:03:6c:1a:d6:3d:c7:6f:b2:14:40:7a:f3:3a:
                    89:dc:24:94:30:fb:0e:77:02:cc:d5:96:03:f3:5e:
                    83:65:d2:25:c5:16:aa:b5:c2:8e:c5:ec:d8:01:c2:
                    df:34:df:2f:ed:0a:16:67:cd:1e:d5:66:ef:13:68:
                    a8:02:b7:cf:88:40:45:54:9e:c5:7a:56:91:6b:d3:
                    9a:e1:b0:9e:d6:c9:72:47:b6:6b:ca:21:be:4c:85:
                    b1:4a:88:19:fa:c4:fa:dc:d8:29:e2:bc:32:56:71:
                    ea:85:62:c7:e1:59:30:5b:87:ce:f7:d4:47:55:7e:
                    cb:eb:03:f1:2e:a8:50:21:26:9e:48:6e:22:fe:ed:
                    d0:91:8b:11:48:66:2b:ca:b1:f1:e9:ec:f1:4e:15:
                    52:f6:45:4c:19:3c:45:02:9d:30:dc:41:94:a2:5e:
                    f8:81:5e:98:62:8a:d3:8d:00:39:ba:a4:7d:b0:38:
                    91:f7:e0:bd:3c:9f:bc:bf:68:bb:47:59:5a:23:27:
                    99:28:78:2b:41:0f:2b:2b:26:e3:85:d6:2d:8c:f9:
                    85:cc:b6:e9:18:20:57:db:f9:4d:68:ec:44:b5:df:
                    bd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6E:4F:31:DB:DB:AB:54:9A:D6:0B:7D:23:FE:15:D6:55:D6:0A:9E
            X509v3 Authority Key Identifier:
                keyid:4E:28:4D:F2:8C:65:20:A7:71:13:04:15:F3:93:C8:34:7D:6E:6D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:81:8b:42:b8:7f:c3:e6:0e:20:19:bf:7d:62:b6:0e:4b:15:
         eb:43:cf:d5:4f:5d:2b:6c:c2:d9:25:eb:10:90:05:ca:27:05:
         5b:46:2c:35:9d:42:1d:f4:cc:0a:bf:84:12:2f:40:33:42:3d:
         8d:ed:25:00:74:f8:c0:c2:e7:12:d2:84:64:ca:c1:69:0b:7a:
         15:ed:53:1a:cd:24:ef:e2:7f:23:21:36:26:42:e1:e4:08:9f:
         4a:ff:87:e9:4d:8c:ed:40:89:69:a9:e6:21:54:78:9b:bb:f1:
         cc:10:7b:47:7f:4a:bb:9b:9c:90:1b:b0:9b:61:c7:16:15:ce:
         91:06:3b:e2:2b:a1:9e:7c:00:19:bb:71:9d:ab:25:cd:72:e8:
         eb:8e:0c:76:eb:5c:b5:d4:02:d6:2a:fc:2a:1c:5f:71:05:25:
         e4:7d:b9:8d:94:c2:fc:eb:d4:6f:28:e1:f3:a0:d0:65:21:54:
         2e:ba:3a:e6:c9:eb:fd:ab:c8:e0:f2:fb:63:ec:0c:ce:f5:03:
         2b:20:4f:c3:92:8b:4b:47:10:69:fd:2e:d2:b0:7d:4a:5c:8d:
         05:db:dc:20:48:54:56:25:90:c3:5f:7b:72:ee:56:1d:c0:11:
         08:38:04:a0:ff:9e:d4:cd:2c:58:e5:e5:60:c5:35:3e:59:d4:
         90:81:60:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:54:19 2026 by rpki-client