Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft
File:                     _j6YxMGnkStakW0WM0d4xKt6ZTA.mft (raw, json)
Hash identifier:          RWlNs2pPka/OyW5o2RXZA5H52jiRNb8/4fLLA6GJmXw=
Subject key identifier:   20:F8:0D:F7:52:E7:E3:79:68:9C:FC:D6:0E:35:C3:3B:DE:D6:F7:71
Authority key identifier: FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30
Certificate issuer:       /CN=A91A0D9C/serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530
Certificate serial:       158A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft
Manifest number:          1578
Signing time:             Mon 30 Mar 2026 16:46:42 +0000
Manifest this update:     Mon 30 Mar 2026 16:46:41 +0000
Manifest next update:     Mon 06 Apr 2026 16:46:41 +0000
Files and hashes:         1: _j6YxMGnkStakW0WM0d4xKt6ZTA.crl (hash: tBA5taLY1k/OqLlzXL+HEA7LbeAvJ9p+xONnozeiDuw=)
                          2: 95DDE9D6909A11EF94AF3B26C4F9AE02.roa (hash: Dm9+B/EL1Dfdx6TdXOjf1eL0O0G9uMoL3EQ4RqzUVrg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl
                          rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5514 (0x158a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0D9C, serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530
        Validity
            Not Before: Mar 30 16:46:41 2026 GMT
            Not After : Apr  6 16:46:41 2026 GMT
        Subject: CN=69caa8f1-1dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6f:3f:82:07:78:b0:df:d6:a7:21:2a:cf:28:
                    a3:ed:23:51:2f:71:fc:29:61:cb:97:fe:c3:3c:d0:
                    c5:07:7f:b9:98:0b:dd:a5:54:dc:0d:87:58:b5:33:
                    ac:ae:1b:15:72:11:d8:54:bb:14:55:af:02:db:29:
                    32:0e:38:8a:44:e3:96:0c:8e:c0:49:77:f2:db:97:
                    28:52:18:6e:70:87:c8:66:57:24:59:2d:62:32:06:
                    8c:2f:44:cf:ac:68:00:8a:ca:9a:f1:68:dc:fd:20:
                    18:63:f2:1b:8f:e6:a8:f4:ea:e5:94:d7:8f:9c:38:
                    ba:78:56:a7:35:6f:83:a1:1d:b3:eb:14:43:f9:df:
                    39:19:14:a4:87:65:b8:09:bf:f6:26:ac:95:54:d9:
                    6a:dd:7b:94:47:b1:2f:d6:fa:6c:68:6d:75:02:ad:
                    3a:aa:fe:9a:10:53:8b:83:8e:91:c3:29:1a:d0:69:
                    7a:e6:5d:f1:65:b0:00:fe:2d:86:ed:f2:26:cd:3f:
                    16:b2:d4:9f:ec:7f:a5:08:bb:7a:06:d2:bf:c3:e2:
                    62:58:99:37:e2:9f:4a:fa:a3:70:40:00:57:bb:b3:
                    df:dd:db:69:71:e2:6f:9e:b8:01:a5:dd:24:e3:6c:
                    ee:59:98:33:6d:73:12:1f:e1:e0:be:f8:90:40:89:
                    14:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F8:0D:F7:52:E7:E3:79:68:9C:FC:D6:0E:35:C3:3B:DE:D6:F7:71
            X509v3 Authority Key Identifier:
                keyid:FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:79:2d:0b:e0:11:66:67:ed:f0:f5:58:d0:06:ac:97:67:b9:
         a6:6e:47:78:a0:85:04:68:2e:d4:14:77:f5:30:7f:a1:53:d9:
         10:95:95:fa:3d:ce:6a:33:32:05:76:f3:b3:35:87:cf:4b:1f:
         6b:27:28:75:f1:97:fe:18:59:4f:a6:8a:73:e4:0c:d7:ed:93:
         97:5c:40:43:61:dc:9a:91:0b:63:bb:2c:bd:de:97:8e:2e:58:
         99:d8:66:57:c2:8b:f5:88:7f:28:84:db:01:2e:30:69:f4:ba:
         3e:c6:b5:78:bd:d3:26:4f:c4:79:96:17:3e:6f:0f:17:ce:ce:
         08:e3:3c:1f:d8:4c:56:55:ae:b6:53:b3:e6:07:5b:45:8a:20:
         fb:03:01:76:b1:76:31:94:b1:9d:7b:86:65:6e:d5:ec:c7:e1:
         71:24:70:19:e6:87:cf:59:23:ad:16:63:33:94:29:ef:2f:6c:
         1e:cf:09:d1:90:c3:9a:a4:e8:68:54:ac:2d:a8:d0:41:8d:a8:
         39:62:c6:2d:dd:b5:fd:36:29:d9:f2:e4:1e:9b:be:51:8d:5b:
         2d:08:2e:49:30:56:25:26:e3:fc:5b:1b:c5:0c:3d:fa:69:8d:
         d7:4d:a6:a0:fd:d4:c6:f1:d6:94:1c:84:ad:63:d8:5b:07:a5:
         c8:b7:68:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 21:25:06 2026 by rpki-client