Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
File:                     mMpJTfad7fYW5B0FmhTn9oec37M.mft (raw, json)
Hash identifier:          TXSWsJ1uqUxuWsSANrK1BGgh24a0cX7nR996Kt5YbPQ=
Subject key identifier:   E5:CA:0F:C6:1F:20:BE:8B:5A:EE:30:3A:D5:69:A7:E1:4D:78:F8:DC
Authority key identifier: 98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3
Certificate issuer:       /CN=A91879AC/serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
Manifest number:          0101
Signing time:             Sun 29 Mar 2026 05:49:43 +0000
Manifest this update:     Sun 29 Mar 2026 05:49:42 +0000
Manifest next update:     Sun 05 Apr 2026 05:49:42 +0000
Files and hashes:         1: mMpJTfad7fYW5B0FmhTn9oec37M.crl (hash: ybDrudLccnJYsa1BjEGMxptTIrNnIIp1Ud2+49VbA9I=)
                          2: 01D7E35CBC8411EFA72EDB72C4F9AE02.roa (hash: mdzMDwj2X3Ua3FnRlc2HjSVQDPO8dF0xSRBjaAA05Ao=)
                          3: F5BB256ECE9611EF97EBCF65C4F9AE02.roa (hash: A2j9A1LDxFn91KRfJQkzZYzQlvghcjV9LwvRtdCgpqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl
                          rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 05:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91879AC, serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3
        Validity
            Not Before: Mar 29 05:49:42 2026 GMT
            Not After : Apr  5 05:49:42 2026 GMT
        Subject: CN=69c8bd77-1f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:90:af:40:42:17:27:a8:05:69:6a:a9:79:
                    57:cb:d2:db:f9:51:94:29:f8:84:5d:6c:ee:5a:b7:
                    96:e1:b2:45:d4:b1:70:b8:29:29:5c:c5:c8:0f:5a:
                    77:f1:73:fb:d7:3b:ba:04:3d:6b:65:90:3d:c5:66:
                    e7:bd:26:c6:6f:ae:c2:da:71:07:ac:ad:60:20:bc:
                    b6:b9:c8:70:a9:9f:c7:9f:53:2e:1e:2b:f1:f1:4e:
                    d3:01:f8:ee:f2:f1:81:f3:e6:68:87:54:86:22:bf:
                    2f:fc:63:3a:e0:29:64:cd:66:66:9e:b8:dc:19:92:
                    f7:f6:cd:38:01:a8:d7:99:b6:14:93:c2:9e:6c:70:
                    3f:4d:13:58:c0:66:86:4c:fb:f8:74:24:69:60:d6:
                    87:37:cf:b6:e0:ea:0a:f1:77:de:5f:65:44:a0:19:
                    13:3d:83:f8:61:fa:2d:54:82:45:7a:58:1f:94:6f:
                    b3:d8:f1:46:80:4b:40:a2:09:dc:c6:27:bd:47:1c:
                    15:04:fa:91:08:c0:b2:d8:40:fe:40:e0:11:d4:b4:
                    47:5e:9d:27:a4:c8:b4:be:6b:1c:b1:4d:a0:44:66:
                    60:a2:6e:a1:0d:4a:28:cb:46:de:ae:a2:a5:c3:a9:
                    f4:d7:b2:28:56:43:b0:83:d6:bc:e2:d9:94:3e:f9:
                    a1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CA:0F:C6:1F:20:BE:8B:5A:EE:30:3A:D5:69:A7:E1:4D:78:F8:DC
            X509v3 Authority Key Identifier:
                keyid:98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:11:bc:57:99:47:b0:77:6c:9b:4b:f0:1e:73:b8:96:03:2a:
         fd:6c:14:67:57:e8:06:3a:38:d1:09:96:d5:9f:91:03:a4:83:
         3c:08:7e:a6:e1:75:8a:8c:76:0c:9a:14:a8:8d:15:e8:77:1a:
         b5:a4:ed:dc:04:b1:0d:ec:46:91:5f:8e:5b:4a:a1:b2:39:47:
         08:71:d9:26:f1:b0:2e:8f:18:a5:32:af:f4:5e:6b:5f:3a:bc:
         15:e9:7a:36:bf:3b:26:29:99:4f:2a:9d:fd:ec:bc:db:f3:43:
         0e:6e:a7:f2:35:6b:09:32:31:42:29:1f:d8:e2:6f:4d:87:87:
         76:ad:00:0a:bf:ee:73:d8:a8:a4:4b:1d:ad:15:b5:72:31:27:
         31:6e:61:b2:5e:e4:f0:f4:3f:62:9b:80:94:46:78:f8:d0:fd:
         d3:18:80:77:3c:6e:18:24:0c:96:c9:07:ab:94:02:01:1b:20:
         69:b5:89:3b:e1:26:7a:a7:e1:a4:eb:1b:24:68:20:56:c2:a6:
         32:a7:f0:d4:b7:17:80:16:9f:97:f6:70:94:37:9e:5a:87:60:
         90:28:d4:59:de:35:92:64:7a:4e:97:38:9b:3f:fe:90:3e:fe:
         09:f1:73:f9:f1:ae:1b:06:60:e9:88:99:c0:e0:57:96:b0:5c:
         4e:94:f9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 17:27:33 2026 by rpki-client