Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
File:                     34Jss7t6i7KhHuS64uCH6sOnIdI.mft (raw, json)
Hash identifier:          DvQUL2F6W2TcWNt9btIowX8Tqp7cxqNz+5KIOv5w/gQ=
Subject key identifier:   38:68:41:CA:02:16:5F:5A:E4:F7:AE:58:16:22:DF:BF:C6:1C:E4:ED
Authority key identifier: DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2
Certificate issuer:       /CN=A91162DE/serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
Certificate serial:       031C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
Manifest number:          030D
Signing time:             Sun 05 Apr 2026 00:59:30 +0000
Manifest this update:     Sun 05 Apr 2026 00:59:30 +0000
Manifest next update:     Sun 12 Apr 2026 00:59:30 +0000
Files and hashes:         1: 34Jss7t6i7KhHuS64uCH6sOnIdI.crl (hash: dyRPlrcM05NfWQeH1A4dJLxT2lcNHLy1fEmEO2h5ej8=)
                          2: 7C754058415411ED8133414DC4F9AE02.roa (hash: yWFxqgc57Lpty88+MtSZirY1smEBvRoN1cv9SnBzAuw=)
                          3: C303879E415111EDBC3A1D19C4F9AE02.roa (hash: KnGlEyG5to94pHkynoYZJXGNW9EYXTwet6VMEUfkCuY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl
                          rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 796 (0x31c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91162DE, serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
        Validity
            Not Before: Apr  5 00:59:30 2026 GMT
            Not After : Apr 12 00:59:30 2026 GMT
        Subject: CN=69d1b3f2-aa19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b1:3f:24:bf:20:91:62:83:de:59:0a:aa:8c:
                    f5:19:09:2a:00:6e:2e:b3:98:df:f8:7c:b8:79:97:
                    d1:0c:48:85:9a:5c:92:8e:c9:cd:28:5b:be:e1:b1:
                    89:49:bd:eb:f0:25:9a:34:fc:06:d4:4c:dd:f6:30:
                    2c:a1:c5:85:b4:08:74:af:c6:d6:4d:11:96:9e:85:
                    49:a1:d1:b4:9d:45:74:23:24:56:df:0d:34:c6:73:
                    03:28:ae:56:23:c9:38:17:b7:29:de:a4:4e:f5:ba:
                    45:b8:37:58:48:0a:d0:12:88:ef:7d:80:63:dd:e4:
                    ae:8c:e3:ec:0a:0a:bd:3e:df:6c:0b:1c:ac:3b:6d:
                    88:31:b9:a1:9c:6f:37:81:3e:43:e9:fb:ae:83:37:
                    d4:85:84:44:ad:73:9a:a2:dd:01:e6:9f:26:1a:f9:
                    e1:39:b4:be:5d:b6:13:4c:2d:33:a8:14:f0:ac:87:
                    57:f3:fa:5b:87:2d:ba:5d:47:1c:f4:bf:77:db:7e:
                    81:be:fb:15:a0:94:6d:b8:f2:7e:1d:6d:59:04:17:
                    e9:1b:c0:de:39:94:16:e5:59:31:15:bc:61:20:4f:
                    92:2c:c1:bf:98:10:39:83:2d:82:fe:9e:5c:57:9a:
                    92:a7:45:5f:fd:d9:f3:22:70:1f:ee:c5:4d:3c:1e:
                    b8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:68:41:CA:02:16:5F:5A:E4:F7:AE:58:16:22:DF:BF:C6:1C:E4:ED
            X509v3 Authority Key Identifier:
                keyid:DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:d3:b6:7f:73:8b:b7:22:27:4c:1d:48:5b:c2:7a:05:4f:c3:
         76:72:d6:8b:76:4d:a6:e1:58:f2:99:c8:e1:ba:c9:87:dc:db:
         5a:7b:03:46:3d:d5:27:f7:28:b5:68:a6:ad:d9:7e:7c:3b:31:
         44:a2:dd:b6:0c:7b:6d:3c:3c:ef:cd:50:2f:3d:e9:4f:7e:24:
         fa:80:78:70:c7:be:77:be:3b:63:78:a0:96:3b:9c:cf:d9:c4:
         f9:c5:11:07:2f:82:f2:db:7c:ba:e6:1b:fc:f2:3d:f4:32:28:
         ef:86:16:5d:a8:42:e3:0f:d7:69:13:4a:21:c9:97:a5:98:21:
         61:7b:a6:a0:b9:b2:f3:e5:c4:c9:c5:18:a0:c3:c3:4f:89:91:
         b5:69:89:75:89:b1:14:22:7f:79:f8:7f:1a:0b:06:78:7c:d1:
         96:e7:98:10:a6:9c:ee:2c:39:58:8a:d2:f3:cc:55:65:ed:24:
         3a:5f:83:67:ae:ed:24:a5:38:30:79:82:4e:3d:75:8e:80:84:
         1d:b1:ae:b4:5f:bc:f3:5b:6d:f8:59:e4:cf:78:a1:52:53:18:
         bd:fc:b0:98:4b:85:f7:9f:0e:49:12:a3:e5:c6:e8:92:0d:36:
         57:6d:26:bf:df:dd:70:75:d8:4e:55:2e:57:ed:b2:85:1e:78:
         c4:75:0e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:19 2026 by rpki-client