Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
File:                     gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json)
Hash identifier:          9JM07GoE5EwlBp+fLg7IpUP8Y/j+9DC8/xO2/hKoCbc=
Subject key identifier:   BA:E9:EB:8F:1F:4D:7C:2A:58:4C:71:DC:5E:5A:BF:64:79:2B:16:25
Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6
Certificate issuer:       /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
Certificate serial:       0CA2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
Manifest number:          0C88
Signing time:             Mon 30 Mar 2026 18:34:31 +0000
Manifest this update:     Mon 30 Mar 2026 18:34:30 +0000
Manifest next update:     Mon 06 Apr 2026 18:34:30 +0000
Files and hashes:         1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: q+nD5mLnzyWTkZpgZnW616Syj1EQxbfU0vzxJtg7Hew=)
                          2: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: EANYonIlLAQsD77itNqvU5Ar2XS9wRUAE//HQHxkYJ8=)
                          3: 2D2322ECF53111F0B165BC265F6F56BC.roa (hash: tZiy66LheF6UARgLL7DjkA4ZOPMuv3MTdVKtCblCRCI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl
                          rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3234 (0xca2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
        Validity
            Not Before: Mar 30 18:34:30 2026 GMT
            Not After : Apr  6 18:34:30 2026 GMT
        Subject: CN=69cac236-cbb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:28:a5:db:2b:48:cb:3f:1c:aa:7b:42:e4:a8:
                    67:1a:e7:36:4d:40:32:49:bb:60:26:a7:06:d4:7b:
                    56:61:27:33:95:c3:fa:47:67:4d:a6:af:99:bc:23:
                    1e:3e:ad:7c:e1:23:96:7c:2d:b2:0e:00:25:4a:3a:
                    79:81:c8:d3:01:f4:35:5a:14:ff:9a:98:e3:8b:3f:
                    30:90:0d:20:c0:33:d2:29:73:45:ed:57:50:a9:24:
                    4e:55:ec:2d:8e:35:30:f3:7e:81:a3:02:d1:37:4d:
                    ec:7d:9f:93:6d:ad:46:e8:48:78:7c:06:d8:71:5e:
                    23:c5:5e:86:fa:b3:7c:23:05:3f:a3:61:e4:fa:a1:
                    59:60:72:ac:96:d2:3b:6f:8f:7a:1a:e8:3f:88:4e:
                    9b:be:ec:91:3f:fc:f0:68:77:3d:a3:ab:09:a1:01:
                    14:98:72:d9:a5:5c:16:14:66:6d:80:0a:d7:bb:14:
                    0c:70:84:7e:f4:b9:63:fa:bf:c3:89:98:91:b1:83:
                    a4:47:dd:5d:f8:38:ed:ca:be:de:bd:28:0e:ae:88:
                    44:a6:fa:34:0e:bb:3d:c5:b3:54:54:d0:b1:28:e4:
                    f8:ea:5f:df:23:2b:b7:d6:b6:33:b3:c9:a6:7f:b6:
                    68:08:ae:f6:e3:3d:8f:94:bb:5d:94:9b:61:75:32:
                    e7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E9:EB:8F:1F:4D:7C:2A:58:4C:71:DC:5E:5A:BF:64:79:2B:16:25
            X509v3 Authority Key Identifier:
                keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:86:1b:0f:4d:ae:89:27:9a:29:9f:ea:65:cb:02:1f:9a:41:
         2c:c3:d1:f1:ec:b9:16:5a:40:14:93:2d:43:35:92:01:c0:69:
         e3:ae:9c:e3:ca:96:84:65:94:2d:c3:ec:3d:5d:6b:04:16:0a:
         67:ba:fd:cd:97:3d:0a:89:72:e8:cd:c3:ff:b6:0d:0d:0b:0a:
         a9:ad:77:50:00:f8:b0:2c:ce:e4:5f:fc:62:9d:6f:5f:82:1a:
         0a:ad:78:01:89:ad:92:37:18:2a:79:21:a2:1f:67:e1:e7:2f:
         ac:2d:d9:f3:9c:af:bd:77:cb:75:1b:33:9d:cd:ae:ee:2e:8c:
         18:df:6f:e5:6b:39:85:14:8b:a8:b1:8a:3b:da:79:3b:38:c3:
         00:65:e8:ce:43:5d:86:7e:10:f3:34:71:a2:6a:3e:a6:1e:00:
         96:a0:ea:d5:81:67:44:d6:92:6d:be:ca:0a:e3:b2:96:9a:38:
         cb:38:86:44:b1:a0:69:86:1d:30:b4:34:7d:be:2d:8d:1e:bb:
         31:ff:95:25:20:d7:b8:40:4e:ed:0e:28:6f:ce:3a:74:e9:32:
         c1:91:1a:95:16:20:67:65:c0:45:7d:ff:0d:1c:d3:57:f0:e8:
         5b:70:41:6f:61:bf:41:48:86:07:18:07:cf:18:99:50:37:af:
         1b:e7:4b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 11:26:49 2026 by rpki-client