Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft
File:                     N35PWGHm2AHWhx-GyUH1hwj687U.mft (raw, json)
Hash identifier:          8SIK0VmitfX9gAf3I2yPYBpEwP5uMR5Rf7FJ/rzM0YE=
Subject key identifier:   5D:9B:96:9C:C5:45:3A:D2:64:8E:44:B9:37:F0:59:91:A1:80:AF:84
Authority key identifier: 37:7E:4F:58:61:E6:D8:01:D6:87:1F:86:C9:41:F5:87:08:FA:F3:B5
Certificate issuer:       /CN=A91FDC84/serialNumber=377E4F5861E6D801D6871F86C941F58708FAF3B5
Certificate serial:       44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft
Manifest number:          42
Signing time:             Wed 25 Mar 2026 07:33:47 +0000
Manifest this update:     Wed 25 Mar 2026 07:33:46 +0000
Manifest next update:     Wed 01 Apr 2026 07:33:46 +0000
Files and hashes:         1: N35PWGHm2AHWhx-GyUH1hwj687U.crl (hash: /q22RqG/9hiPDUnMkVusjy9amK/EyWyZDfqVkN85JAQ=)
                          2: FFD0154CC51111F081EB9984C4F9AE02.roa (hash: s9ovKXk6i7U35KNY19JGw8V3ccjwmwtWthKx7l0Dc6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.crl
                          rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDC84, serialNumber=377E4F5861E6D801D6871F86C941F58708FAF3B5
        Validity
            Not Before: Mar 25 07:33:46 2026 GMT
            Not After : Apr  1 07:33:46 2026 GMT
        Subject: CN=69c38fdb-3b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:26:b3:d5:ee:e1:33:25:3f:7f:ed:d5:85:ab:
                    a6:05:dc:41:18:89:21:86:03:cd:9c:6c:84:fb:4c:
                    89:1d:9a:d6:ae:12:47:b9:80:a2:38:f7:28:3e:8e:
                    6c:ab:13:23:2b:d3:f1:79:42:80:1b:21:2f:b3:a9:
                    c8:b2:5b:f5:a8:3f:ce:f0:e5:bf:50:4a:87:8f:40:
                    06:96:55:86:cb:eb:63:f4:46:87:35:77:44:86:f4:
                    8b:3e:08:ba:56:7d:cc:41:ac:fd:3c:a3:9f:de:da:
                    99:fd:64:b0:51:4f:68:73:a9:53:b3:ea:f4:2a:b6:
                    99:b4:b1:b0:01:3d:14:ec:17:00:4a:fe:ba:a0:e8:
                    2e:09:e5:64:dc:88:4c:86:3d:e3:cc:53:a0:3d:bb:
                    78:97:b0:07:3c:eb:26:d5:c0:bf:53:e8:7c:c7:19:
                    09:99:79:27:fe:c3:26:c4:28:8d:30:fc:05:8d:04:
                    21:e4:15:4c:a6:4c:50:21:2b:eb:71:df:aa:72:a1:
                    7e:c8:d0:21:4e:6a:74:1f:94:2a:ee:ff:df:40:fa:
                    73:ca:08:62:06:26:fe:5b:df:31:ab:9a:96:63:31:
                    d7:a9:82:04:c0:16:99:d1:21:10:9d:0a:48:b2:e7:
                    16:d1:31:11:04:ce:e5:04:e9:a7:96:35:03:10:43:
                    05:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9B:96:9C:C5:45:3A:D2:64:8E:44:B9:37:F0:59:91:A1:80:AF:84
            X509v3 Authority Key Identifier:
                keyid:37:7E:4F:58:61:E6:D8:01:D6:87:1F:86:C9:41:F5:87:08:FA:F3:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:7f:ea:ec:9f:a6:10:c2:67:44:06:53:53:ef:db:39:5a:18:
         9a:8d:e6:b3:af:e5:09:23:cf:b5:66:fd:0b:e6:5f:74:6a:ff:
         ff:f9:dc:30:8d:13:6e:9d:5f:97:f6:f4:b8:b4:07:69:d7:8e:
         bd:b2:6a:3a:7e:eb:d3:5e:91:4a:80:fc:17:82:34:39:c0:6f:
         c1:89:68:6b:b6:4c:7a:24:1e:68:04:ad:0c:fb:b7:60:9b:6b:
         f2:71:5b:f3:89:66:d2:92:ff:9d:9c:cd:58:b4:65:73:49:80:
         be:63:1f:d6:b5:bb:fa:c4:91:7d:84:c6:21:af:8b:5b:26:5d:
         18:89:18:d8:fa:6b:44:55:7e:b1:29:b5:b6:f2:9c:6b:d5:b5:
         f5:ac:19:4d:14:df:d1:76:54:65:7f:ce:b2:27:88:c9:06:0d:
         e4:28:b7:f3:18:4d:07:24:0f:cd:3b:02:b3:d1:db:cd:0e:2b:
         fa:7c:5f:b1:b6:b1:b4:21:1a:52:b8:a8:83:d8:12:98:e8:86:
         6c:2d:d9:cf:43:ed:02:7c:15:74:fb:e7:88:6f:73:17:ef:2a:
         1c:9c:a1:72:17:34:08:ff:5d:dc:1b:db:94:2e:13:78:38:e1:
         b3:a7:1a:e6:e4:5c:bd:80:ea:5e:f6:13:ae:3e:cc:e0:3e:34:
         6c:51:83:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:26:36 2026 by rpki-client