Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft
File:                     c27zV-8j8z6sB7J06l4_7A3-5Yo.mft (raw, json)
Hash identifier:          pMWjsRKo97+P/GSbeeKiYrbdQGfmahhsYTczY3gP9SE=
Subject key identifier:   69:7A:25:DC:1A:1C:B3:B8:6B:9D:02:8F:F3:77:58:6A:93:7D:C4:A7
Authority key identifier: 73:6E:F3:57:EF:23:F3:3E:AC:07:B2:74:EA:5E:3F:EC:0D:FE:E5:8A
Certificate issuer:       /CN=A91A4ACD/serialNumber=736EF357EF23F33EAC07B274EA5E3FEC0DFEE58A
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c27zV-8j8z6sB7J06l4_7A3-5Yo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft
Manifest number:          35
Signing time:             Tue 03 Mar 2026 08:16:11 +0000
Manifest this update:     Tue 03 Mar 2026 08:16:11 +0000
Manifest next update:     Tue 10 Mar 2026 08:16:11 +0000
Files and hashes:         1: c27zV-8j8z6sB7J06l4_7A3-5Yo.crl (hash: 9jjgLffs53KdfDMAQ+U44IgJL3G3DEy2bhj3ek/Q4pQ=)
                          2: B2A566E2CB9B11F0A4EC673AC4F9AE02.roa (hash: IfHqfPuuN3I7BqsHVQ/rF6LxoZBDe7oRliH9Hyof7OI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.crl
                          rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c27zV-8j8z6sB7J06l4_7A3-5Yo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4ACD, serialNumber=736EF357EF23F33EAC07B274EA5E3FEC0DFEE58A
        Validity
            Not Before: Mar  3 08:16:11 2026 GMT
            Not After : Mar 10 08:16:11 2026 GMT
        Subject: CN=69a698cb-e6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6f:d4:08:7e:db:2e:15:e4:57:cd:9c:e2:5a:
                    78:a1:c2:d5:f4:d0:a0:7b:65:b4:43:72:dd:1c:a1:
                    a7:5e:3b:b2:75:43:54:f9:80:3b:64:eb:e0:61:ea:
                    b1:c1:e9:36:49:be:36:97:9f:54:a1:02:d7:01:a9:
                    ab:e0:35:1b:3e:ee:f4:af:01:9a:a9:5d:ef:0a:86:
                    7c:f9:31:0f:6b:07:be:ba:62:a6:2c:8b:c6:0a:26:
                    0f:f5:37:c1:05:6e:c5:9e:c8:00:61:b8:8e:43:86:
                    0f:8e:be:16:40:db:27:3b:19:ae:63:df:c5:60:95:
                    d6:aa:21:e1:f9:71:45:d1:2e:81:c5:ce:0c:cd:90:
                    12:89:6e:d1:03:5c:e7:08:b1:9a:24:af:e7:1c:88:
                    3c:f4:8f:71:25:4c:32:f1:0c:14:e8:53:8d:ed:a6:
                    4a:74:da:da:ac:08:f0:39:18:36:33:41:39:e9:ab:
                    73:13:4b:d9:2a:db:47:0c:12:64:89:f3:44:75:27:
                    d7:07:b6:1e:e3:81:87:40:9f:35:8c:f9:4f:1c:4d:
                    d5:b7:27:b8:54:96:8e:fd:8d:00:97:84:48:b9:76:
                    80:3f:74:ae:92:c5:cb:b4:6a:55:9e:d7:9d:16:27:
                    e6:90:a5:44:a3:8b:13:e0:bd:0d:b9:81:bf:7a:1c:
                    54:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7A:25:DC:1A:1C:B3:B8:6B:9D:02:8F:F3:77:58:6A:93:7D:C4:A7
            X509v3 Authority Key Identifier:
                keyid:73:6E:F3:57:EF:23:F3:3E:AC:07:B2:74:EA:5E:3F:EC:0D:FE:E5:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c27zV-8j8z6sB7J06l4_7A3-5Yo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:45:d6:72:73:a8:ff:c2:47:b7:36:d8:2a:bb:ec:a2:ff:7f:
         e9:83:b6:8b:24:9d:a2:2b:07:2e:4b:e9:48:44:e2:27:a7:71:
         68:35:d3:e9:d9:2a:99:b2:dc:92:c0:05:82:b2:7b:db:f3:d2:
         e7:97:0d:43:b9:86:f5:e8:81:7e:41:bc:af:42:f9:5f:c5:7a:
         f7:bc:f8:79:92:26:c9:a8:73:19:0c:cc:41:1c:02:5a:08:27:
         e3:7e:28:37:59:72:aa:b8:61:fb:ee:1b:fb:77:36:2c:57:82:
         6a:7d:bc:d9:66:f2:1e:d4:b9:16:d0:b4:f1:ff:fb:a1:2a:f4:
         9e:cf:de:67:21:0f:4d:f0:c1:ce:9e:99:e3:4d:53:d0:98:e0:
         bb:6e:9e:2e:29:e8:d5:02:f5:db:cf:c1:aa:a6:48:d3:fd:ae:
         b6:6c:b6:71:27:7a:61:52:fa:45:02:ff:ef:68:c2:6e:12:c1:
         dd:3d:b1:bd:28:a6:4d:1b:0f:c7:0a:67:b3:d3:54:3e:0b:b5:
         d7:e2:d1:cd:37:24:93:3b:67:ae:ff:78:9a:4d:0c:72:8e:a6:
         4d:67:7a:8c:a2:07:e4:4a:13:3a:af:19:4e:07:ac:96:7c:d6:
         7b:1b:7b:3a:18:14:ab:05:a6:48:b3:ca:b0:a1:a2:aa:3d:ff:
         23:f1:cb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:39:59 2026 by rpki-client