Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
File:                     A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft (raw, json)
Hash identifier:          7/DkAqYlPFFZoYoLWDiRg8i+vXQZfL2Z7JQ5cuQ2OaE=
Subject key identifier:   BF:02:9C:FE:DC:F3:3A:D7:C6:A9:D5:2A:AB:6C:12:32:6B:56:AB:D7
Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
Certificate issuer:       /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Certificate serial:       0C7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
Manifest number:          0C71
Signing time:             Sat 04 Apr 2026 18:26:53 +0000
Manifest this update:     Sat 04 Apr 2026 18:26:52 +0000
Manifest next update:     Sat 11 Apr 2026 18:26:52 +0000
Files and hashes:         1: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl (hash: JvnY2EGHWavJe43tXv6umJtHhXbqrO9F9SZUSfe43ss=)
                          2: 37EA3E261ADC11EA8EB46F37C4F9AE02.roa (hash: 40R+DRWbI6AD7X69y+O2s0U8qVSzuQdPnKR80+3niV8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
                          rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3194 (0xc7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91822BF, serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
        Validity
            Not Before: Apr  4 18:26:52 2026 GMT
            Not After : Apr 11 18:26:52 2026 GMT
        Subject: CN=69d157ec-f10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9a:23:12:c6:ef:8c:b6:c9:07:b5:b3:7d:e7:
                    79:fb:58:90:6c:c1:6b:6f:bc:b6:44:b9:ab:b7:64:
                    31:0a:4a:54:bc:c1:7a:c0:a3:6f:a1:f0:f6:f6:86:
                    9f:0e:86:ef:96:9a:dc:06:d9:46:ee:df:af:a5:a9:
                    84:0d:a4:94:3d:63:28:69:66:a9:fb:a1:07:c2:80:
                    a5:30:1a:a5:e7:e6:6a:56:d3:53:23:8e:55:90:8e:
                    bb:ba:f0:42:65:27:3b:5a:1b:f7:88:4f:8b:db:02:
                    c3:90:86:0e:f0:5e:8e:e0:76:28:63:bd:b3:60:96:
                    0a:7b:1d:b8:ba:40:49:ac:23:56:3c:9b:94:1e:de:
                    e8:ab:8f:fc:d1:c9:4c:96:d8:0f:b4:02:20:8f:ca:
                    b5:e2:dd:59:c4:a4:7d:5a:39:41:b9:d8:e9:6b:6d:
                    81:93:f6:60:1c:3c:62:48:12:80:be:18:ff:1c:cf:
                    99:9b:bc:85:58:1e:fa:0a:8a:7b:3f:de:82:cf:14:
                    c0:12:7e:eb:0f:1a:09:64:56:01:db:3e:e0:f1:df:
                    00:aa:ba:bb:ca:45:d7:17:9c:3f:78:97:c5:92:3f:
                    2e:c2:de:39:b7:37:16:6c:63:d0:81:3f:68:e4:bd:
                    0c:b1:eb:a4:bc:ce:b9:16:95:8a:51:69:cc:c5:bc:
                    18:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:02:9C:FE:DC:F3:3A:D7:C6:A9:D5:2A:AB:6C:12:32:6B:56:AB:D7
            X509v3 Authority Key Identifier:
                keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:43:44:27:9a:d4:09:d4:97:f0:7f:41:46:ae:73:f1:b7:29:
         a1:de:a9:6f:8f:17:c1:41:dc:00:ca:8e:20:d1:64:4a:e8:db:
         ec:ae:f5:46:0e:15:9d:c4:77:24:79:61:40:07:cc:b2:76:01:
         cc:d7:f6:ab:b7:85:0c:da:59:c8:4c:76:c0:8b:5e:bb:e3:97:
         d8:3e:d7:1b:89:1c:fe:1c:7b:ea:dd:cf:30:8a:b7:5c:24:96:
         7d:ea:42:e4:62:7e:37:3e:e1:2f:a2:df:51:5a:6f:e6:3d:c7:
         0f:d6:a5:b6:1a:38:f7:4d:10:ac:89:42:aa:a6:3f:1b:b1:d0:
         ea:31:63:ab:fa:eb:46:44:bd:d2:02:fe:c9:00:82:37:31:89:
         54:eb:9c:68:8e:1a:77:07:f7:fb:9c:b1:ba:97:b5:9b:6f:ac:
         7a:87:4e:1f:42:20:f6:7d:d8:af:ba:81:82:ad:e2:ac:92:c7:
         f4:eb:ac:d8:39:47:be:ff:dc:a2:52:9a:58:4a:56:25:0e:6c:
         ad:67:67:10:37:23:6d:64:10:71:a1:94:35:9c:46:2e:2e:f4:
         42:9b:4a:14:bc:20:60:4a:39:c6:39:14:46:d2:b6:b9:a2:2e:
         7e:72:ba:a5:8a:41:9a:bd:1f:fe:41:68:13:c6:d1:4d:76:29:
         ec:57:19:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:13:02 2026 by rpki-client