Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
File:                     RMCz5V6PTVgxhgXnITScArKJwv0.mft (raw, json)
Hash identifier:          Rm2E1XGuQlmPddO/lWG43xLEb99fvdVkb7gLsxDQKGU=
Subject key identifier:   85:14:C3:BE:D9:DC:D4:EB:48:02:70:52:DB:16:4D:4C:8C:20:6D:49
Authority key identifier: 44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD
Certificate issuer:       /CN=A91167F7/serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD
Certificate serial:       077B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
Manifest number:          0773
Signing time:             Sat 28 Mar 2026 21:27:37 +0000
Manifest this update:     Sat 28 Mar 2026 21:27:36 +0000
Manifest next update:     Sat 04 Apr 2026 21:27:36 +0000
Files and hashes:         1: RMCz5V6PTVgxhgXnITScArKJwv0.crl (hash: v9URETwdQCyF35BaetTbnvYySrGCwbD+Ys2+AKX0zP4=)
                          2: 980A0D7254B511EBAC30E864C4F9AE02.roa (hash: sbyF3KrKZsJPlhcWGIocE8R+wXMDx5Dh9kMEDZMegNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl
                          rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Apr 2026 21:27:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1915 (0x77b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91167F7, serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD
        Validity
            Not Before: Mar 28 21:27:36 2026 GMT
            Not After : Apr  4 21:27:36 2026 GMT
        Subject: CN=69c847c8-f7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:44:17:2e:ee:f6:d3:a5:e8:69:91:04:81:5b:
                    64:ea:e0:9d:f6:88:7a:d9:ce:24:c4:4b:f1:a1:a9:
                    66:3f:b6:82:ec:77:15:c2:48:7e:51:04:47:51:d8:
                    1f:fb:af:98:78:c4:85:e5:cb:88:36:16:24:72:dd:
                    df:3e:26:39:55:59:1b:1e:fa:97:52:0c:87:47:1e:
                    1f:f8:af:c3:f9:64:b0:2a:65:0b:ac:a2:f1:2d:0e:
                    82:a7:ed:97:31:10:54:06:43:db:37:1d:50:8b:ae:
                    e4:2c:c9:4b:4f:e2:43:8f:27:3c:75:fe:7c:dc:32:
                    09:6b:dc:d8:76:37:9d:71:b1:15:b0:8c:bd:e5:16:
                    ba:07:6d:15:44:c1:c6:34:e4:38:cc:8e:ba:0c:05:
                    fc:e5:5d:4b:2c:b9:02:c4:ab:38:d7:a5:44:db:86:
                    47:74:68:81:21:c4:e6:1d:65:77:f3:5e:15:61:98:
                    08:54:08:ad:ef:67:04:12:64:82:a2:40:d8:0e:34:
                    2f:ab:72:fb:a2:e0:f1:2e:5b:8c:b3:2b:1b:30:fb:
                    7c:2a:28:43:61:b5:d8:48:0b:78:b0:d8:17:6f:e4:
                    44:79:86:b6:3a:d1:8c:0f:d7:fe:02:d8:2a:b7:6d:
                    66:9c:d7:23:62:cf:e1:44:3d:fe:9d:89:e7:30:1e:
                    75:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:14:C3:BE:D9:DC:D4:EB:48:02:70:52:DB:16:4D:4C:8C:20:6D:49
            X509v3 Authority Key Identifier:
                keyid:44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ae:4b:8e:c2:f9:f1:d5:65:ac:63:19:b1:37:21:82:63:9d:
         14:07:54:1f:c3:71:46:16:ac:a7:27:76:b1:13:2f:2c:f7:4c:
         29:1b:26:d5:e4:55:97:e0:b0:a2:56:89:e2:20:cb:d8:c7:9c:
         7a:60:6e:12:bc:94:3c:8a:ad:39:b2:0c:b7:76:24:95:1d:d8:
         7a:df:87:a0:88:2d:37:4e:70:87:ad:ed:7d:8c:73:64:9a:44:
         61:9e:f0:e2:c2:2f:dd:c0:a6:e0:78:61:44:85:b3:08:20:8f:
         cc:79:9f:76:03:07:e3:f6:ef:04:a9:17:27:5b:7d:e2:b2:75:
         6e:99:9b:40:2c:fa:6a:2f:f7:ba:5d:8c:a1:fe:4f:e5:0e:1c:
         bd:23:33:60:28:75:fb:36:ea:60:8a:b7:49:aa:08:98:1d:fc:
         df:fc:3a:8d:4b:3c:bb:36:0d:cc:18:ee:02:1a:bc:76:e0:cd:
         b6:e7:47:c9:6e:be:49:56:8e:56:5f:85:61:74:eb:65:03:26:
         a5:5b:8a:12:f6:70:a8:aa:f4:8c:52:84:f5:b1:0c:e4:b7:7d:
         4c:31:d6:73:9e:ca:29:ff:9b:a6:3f:03:91:8e:a8:08:60:8a:
         33:2b:3b:1f:89:cd:96:3a:d3:8b:a9:fd:5c:6f:0f:6f:7c:8f:
         2b:c0:71:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 04:53:28 2026 by rpki-client