Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft
File:                     755Sv59IZcr4eHrZXObeT2R2hA0.mft (raw, json)
Hash identifier:          FLyEB1aZ6dbuxakiwdpY90aMwVGzzzRHzhhO27axMjA=
Subject key identifier:   BF:8C:44:46:6B:FE:33:5D:9A:F6:26:14:1D:8B:82:17:6D:38:66:F0
Authority key identifier: EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D
Certificate issuer:       /CN=A91FCA4B/serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D
Certificate serial:       0B2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft
Manifest number:          0B1F
Signing time:             Tue 24 Mar 2026 19:06:23 +0000
Manifest this update:     Tue 24 Mar 2026 19:06:22 +0000
Manifest next update:     Tue 31 Mar 2026 19:06:22 +0000
Files and hashes:         1: 755Sv59IZcr4eHrZXObeT2R2hA0.crl (hash: OPu2Oa4q/su1jMe12RIcx6EwfhU35MsS6ae8eqgxh1Y=)
                          2: 9E1721445CFB11EAA377D527C4F9AE02.roa (hash: KFWCj0VeMTZsryK7dYwol+clwxvg1qf8whaXnrZDGPg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl
                          rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2862 (0xb2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCA4B, serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D
        Validity
            Not Before: Mar 24 19:06:22 2026 GMT
            Not After : Mar 31 19:06:22 2026 GMT
        Subject: CN=69c2e0af-211d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:36:7b:2d:8b:7d:59:4f:86:db:cd:2b:6f:80:
                    35:76:7d:92:41:b8:1f:46:07:8c:36:97:63:57:73:
                    2a:fe:dc:2e:3f:59:4b:82:b4:15:c2:01:4f:bb:81:
                    2b:7f:8e:d2:a0:84:16:67:d4:da:23:47:aa:46:19:
                    1a:fa:4d:a1:74:bb:28:a7:9e:3a:1e:8e:41:14:2d:
                    3e:ea:dd:30:0e:61:cc:5b:0f:8f:57:94:22:43:ea:
                    48:37:77:27:40:ee:e5:8e:9a:96:5e:64:d6:ef:99:
                    85:61:41:41:ca:94:18:d3:11:da:5c:23:e2:dc:39:
                    88:0b:3f:4b:45:c1:c8:16:82:a8:54:f0:3b:d9:a0:
                    bb:08:44:ca:6c:86:94:a0:8e:e1:1a:d1:9a:0e:35:
                    05:87:7f:9e:ff:35:46:33:97:63:60:f7:1a:1b:e1:
                    a5:29:2f:50:23:72:c5:07:26:c3:0c:1e:46:84:dd:
                    e3:7e:2e:0c:37:5d:61:30:2b:c1:98:41:f1:7c:91:
                    82:91:09:ea:2d:ff:12:9e:7d:55:0d:91:45:24:a8:
                    9e:bc:80:06:a2:14:d9:7e:dd:cf:ad:d1:96:c9:fd:
                    20:b3:0e:67:5a:a8:f7:72:5d:1f:2a:ed:c3:6b:5b:
                    e5:32:05:b7:0e:01:23:9b:1b:12:e8:00:de:23:a6:
                    a1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8C:44:46:6B:FE:33:5D:9A:F6:26:14:1D:8B:82:17:6D:38:66:F0
            X509v3 Authority Key Identifier:
                keyid:EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a1:b1:a9:52:09:04:1c:6f:00:d5:85:ef:9f:5a:4d:50:7e:
         54:99:59:dd:a8:85:dd:f5:63:ad:97:25:3d:2f:93:2b:61:a0:
         0b:8f:f1:bc:5c:c3:91:5f:66:18:f2:0f:4f:15:39:ef:a9:a0:
         ff:8a:da:c0:69:cb:56:63:f0:7e:86:a2:74:d4:a2:55:f7:b7:
         85:e9:17:48:8d:f4:1b:08:a0:91:5f:dc:d7:e2:42:19:5e:77:
         d9:27:34:ad:9a:83:b1:46:5a:e6:de:89:ce:43:84:b7:15:e4:
         1a:65:0b:f7:6f:29:d0:6a:ae:d5:36:c6:e3:12:9d:2b:ca:e3:
         c8:c8:86:a5:96:6f:86:c4:91:80:86:4e:de:bb:2c:6b:f1:7c:
         69:99:cf:35:c5:fe:7c:d4:74:47:09:14:53:4c:26:c0:be:95:
         99:e2:37:96:d1:e8:f2:b5:0f:10:fd:55:02:cb:7e:15:d5:56:
         3b:25:62:78:98:36:8c:2c:b4:38:a0:6f:11:58:b5:22:3f:03:
         00:e7:e3:65:46:f4:e8:aa:83:6f:b5:f4:5e:b4:cf:ca:8f:7e:
         a8:13:27:4a:8d:d8:dd:c4:ec:27:38:3e:c8:07:5b:35:06:ae:
         2f:73:43:8f:83:c6:d7:2a:23:f2:49:bd:ad:db:c4:3b:dc:e4:
         84:5d:c2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:48 2026 by rpki-client