Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
File:                     AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json)
Hash identifier:          5hHlnV4lGhwaeuiSDVlchDamWTDKAx0Jb0B2VHYnUuA=
Subject key identifier:   0D:7B:95:3D:8A:83:D0:B2:75:7E:55:8E:9E:AF:8F:00:09:E5:A0:BF
Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F
Certificate issuer:       /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
Certificate serial:       0290
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
Manifest number:          0274
Signing time:             Fri 13 Mar 2026 01:23:00 +0000
Manifest this update:     Fri 13 Mar 2026 01:23:00 +0000
Manifest next update:     Fri 20 Mar 2026 01:23:00 +0000
Files and hashes:         1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: xOphIuIflymZ1GougqKUtTUH5iiin6mZGud6/PsTYHM=)
                          2: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: CpnchC9OahhdANlSfhFvVdfnSg3biYPUOpoScQBe9aw=)
                          3: 3B6578C47F4211F084F6C541C4F9AE02.roa (hash: 6uwKNJvEHKpPiCqmXc5jxVWJ0Ysu4SZXJVBzZPWGq0k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl
                          rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 01:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
        Validity
            Not Before: Mar 13 01:23:00 2026 GMT
            Not After : Mar 20 01:23:00 2026 GMT
        Subject: CN=69b366f4-15fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1f:6c:c5:4a:5e:34:1c:e7:59:5f:33:e5:d3:
                    ee:48:7e:05:bd:85:ab:e0:fa:85:ca:41:4a:cd:a1:
                    1c:34:9c:7b:99:e5:b1:7e:f1:93:fd:90:e1:8d:80:
                    98:63:42:c1:af:38:b7:b0:49:e3:8c:fa:5b:44:bd:
                    c3:e3:88:c8:ea:84:6e:5b:1d:16:db:ef:70:e0:f4:
                    19:82:01:b2:ed:40:3f:ec:c1:03:91:b7:50:09:76:
                    de:e9:39:6d:da:c6:6c:6b:90:e5:5c:52:eb:1c:61:
                    2b:32:75:d9:c4:8b:0d:19:4b:49:08:5f:0b:40:53:
                    d8:62:50:0c:18:b6:64:8e:b5:a3:ca:c4:1c:55:ba:
                    ab:59:b5:06:9a:1b:38:3c:3e:ac:61:15:c2:8e:06:
                    e8:4d:82:29:d7:b5:1e:fe:fb:37:ae:50:52:3d:af:
                    31:7d:f6:0a:eb:d8:05:f8:a1:fe:c2:96:c1:b3:4a:
                    a0:89:d8:e4:1d:18:36:52:74:8d:f3:a3:d4:21:68:
                    05:8d:7d:f1:80:73:40:8b:90:ef:ae:a6:1d:d9:90:
                    4f:d6:11:2b:0a:ca:bb:65:26:75:35:ea:04:31:89:
                    59:5e:c5:f0:2e:ac:49:27:9e:3e:90:bb:47:c7:3d:
                    4b:32:f3:86:54:39:e6:b6:f0:10:fb:a6:8d:fd:f8:
                    f7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7B:95:3D:8A:83:D0:B2:75:7E:55:8E:9E:AF:8F:00:09:E5:A0:BF
            X509v3 Authority Key Identifier:
                keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d4:37:fa:03:14:dc:6a:5a:7b:d5:7e:5d:da:3e:2a:9a:e1:
         95:a9:9f:60:9e:17:2b:3b:e8:9b:09:63:b9:b8:21:a1:d0:53:
         33:09:92:8e:80:ef:27:b6:11:ae:bd:e0:f1:3b:b1:80:09:56:
         94:8b:2c:d1:c9:d3:d0:d5:ad:0a:8d:9d:ea:c6:d9:62:4b:1a:
         21:c7:ad:a8:60:9d:fc:73:34:f3:9b:de:48:85:5c:de:c0:b6:
         5f:fd:5f:4a:71:0c:6c:fb:15:41:e3:b9:b4:9a:3d:b6:69:cb:
         21:1a:76:40:52:48:58:9e:6d:17:7f:c3:e2:8e:81:7b:8a:f4:
         7d:53:52:0f:13:98:1c:04:e9:6d:85:74:1d:4f:8c:97:29:71:
         d7:75:46:f4:10:4b:b9:ee:b7:0e:a2:8c:82:af:5c:98:d2:bd:
         48:bd:64:d9:e5:95:ca:18:4b:99:bc:92:54:99:e0:e6:35:da:
         0c:45:db:33:32:dd:71:3f:c3:fa:60:ef:81:e0:1a:4f:a6:01:
         e2:60:a2:c3:3c:2c:b1:97:89:71:8c:94:9f:3b:5e:94:42:2d:
         27:28:cf:d2:3e:c0:19:af:34:08:e9:d8:e8:32:78:01:b1:00:
         e5:16:a0:96:94:99:b7:3f:e9:99:64:2a:31:68:73:4f:70:f7:
         ba:b8:81:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 21:46:08 2026 by rpki-client