Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
File:                     up0rragmh4TwCuhYcC744p5ytLw.mft (raw, json)
Hash identifier:          hUaw2i4Jchrv9syFpxknMYpQZaxiwjBR0e+ERwYwfC0=
Subject key identifier:   9F:4F:E2:5E:65:E9:F7:B8:C5:5D:2F:0A:87:A3:9E:FA:04:03:2B:B9
Authority key identifier: BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC
Certificate issuer:       /CN=A91A9EE2/serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC
Certificate serial:       355B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
Manifest number:          3541
Signing time:             Sat 04 Apr 2026 14:30:03 +0000
Manifest this update:     Sat 04 Apr 2026 14:30:02 +0000
Manifest next update:     Sat 11 Apr 2026 14:30:02 +0000
Files and hashes:         1: up0rragmh4TwCuhYcC744p5ytLw.crl (hash: AGf59qSTDfSi+1eplNox1UniiS1uAft5B5JLCa3yDSc=)
                          2: 58D5764A683311ECB9C17757C4F9AE02.roa (hash: y6Cb0qWIx1yRlu9RsKzzdkQCpXsOgAgmZ5vTiuWgcQo=)
                          3: D4A8FF0273ED11F08E63C02DC4F9AE02.roa (hash: tHMeyTgXVjqu1F3xAY8dG3i7T9LkiFUkLAwr5V1RAGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl
                          rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 14:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13659 (0x355b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9EE2, serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC
        Validity
            Not Before: Apr  4 14:30:02 2026 GMT
            Not After : Apr 11 14:30:02 2026 GMT
        Subject: CN=69d1206b-9d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ac:17:7a:30:b1:5e:b3:2a:9f:0d:5c:8a:eb:
                    01:6a:96:dc:60:d4:07:d4:a6:e2:27:94:99:cb:f5:
                    aa:95:ce:e9:66:d9:6b:e6:5d:2b:7b:04:fb:8d:66:
                    92:07:68:a2:62:06:09:68:e3:a9:ce:50:8a:e2:ed:
                    59:72:f9:c2:3d:f0:24:35:0e:c5:db:a6:91:f3:99:
                    bd:f9:13:a4:3c:a8:8b:a7:16:8a:ff:aa:41:71:59:
                    9f:88:7d:17:e0:52:a4:0a:fb:51:94:05:84:ea:29:
                    e5:ac:be:33:d9:27:3c:09:73:27:86:b7:f2:d5:11:
                    13:10:09:df:7c:a1:13:f0:6e:15:39:be:b9:d5:db:
                    95:26:80:0b:97:05:d9:06:2a:60:1a:5d:e1:b3:09:
                    48:65:39:3c:05:f4:e5:31:33:e7:74:c0:f1:53:39:
                    7d:ac:32:1c:2e:63:c9:25:63:c1:94:0f:49:f2:da:
                    54:19:88:99:fe:ac:d4:41:15:f7:05:fa:25:ce:77:
                    51:46:36:77:0b:f3:c8:9c:56:16:3f:15:91:02:18:
                    b6:1d:f2:9c:03:5f:4d:0f:df:cc:b1:5f:a2:ca:b2:
                    d3:dc:8f:ff:bf:f3:26:2d:1c:df:0e:c6:d1:32:38:
                    49:19:77:46:7b:15:af:9a:fc:e7:8e:48:86:ad:77:
                    37:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4F:E2:5E:65:E9:F7:B8:C5:5D:2F:0A:87:A3:9E:FA:04:03:2B:B9
            X509v3 Authority Key Identifier:
                keyid:BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:8c:59:63:b8:d5:26:a7:74:5b:64:5f:41:a1:83:a8:d6:73:
         13:d0:11:7c:d9:fe:2d:c8:fa:b3:b1:a8:9f:e9:e3:98:77:fd:
         36:95:06:da:cb:05:92:df:7c:bd:35:a7:f2:fc:ee:21:9e:eb:
         6e:ad:7b:15:2f:33:6f:53:76:40:ba:6f:92:ff:7f:13:ca:ca:
         00:fb:71:63:20:fb:77:13:25:a4:d1:b5:ea:c1:92:b5:ac:a5:
         1d:55:b1:43:66:13:6a:77:a0:22:55:d2:76:9c:ec:66:f3:a6:
         0d:98:46:a0:df:50:fa:c4:76:85:77:06:57:90:ba:7d:ff:40:
         b7:9f:05:1d:c5:8e:02:84:17:df:34:2d:c1:9f:36:a3:c1:58:
         4c:74:da:76:7e:cd:5f:f6:c6:34:0e:68:73:d4:32:67:70:54:
         43:58:76:ce:d1:11:e9:4c:cd:e7:d2:76:e6:a8:ab:c0:89:c6:
         de:74:82:bd:2b:57:1e:f4:f1:10:49:c7:59:39:a3:5c:0f:17:
         89:ed:48:aa:8b:a9:e6:fb:6a:16:a3:2b:f9:17:88:07:7b:10:
         ad:20:9e:b8:ea:a8:1a:2c:29:a3:00:a9:ad:b9:ca:69:30:23:
         55:45:6d:f5:fd:0a:60:1e:ea:f0:60:56:de:46:c2:15:db:5f:
         5c:99:c8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:03 2026 by rpki-client