Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft
File:                     u759h-rKuKMp6DvLD_fVAIi-Cc0.mft (raw, json)
Hash identifier:          oyMzhc3s+k4n+P9wDoggZmIoBth5wZMjou2gZo4y46c=
Subject key identifier:   EC:7C:BB:A5:36:2B:8D:E7:A4:3A:76:4B:36:85:8B:2D:60:8B:98:B1
Authority key identifier: BB:BE:7D:87:EA:CA:B8:A3:29:E8:3B:CB:0F:F7:D5:00:88:BE:09:CD
Certificate issuer:       /CN=A91AF15E/serialNumber=BBBE7D87EACAB8A329E83BCB0FF7D50088BE09CD
Certificate serial:       032F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u759h-rKuKMp6DvLD_fVAIi-Cc0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft
Manifest number:          032F
Signing time:             Sun 05 Apr 2026 00:48:08 +0000
Manifest this update:     Sun 05 Apr 2026 00:48:07 +0000
Manifest next update:     Sun 12 Apr 2026 00:48:07 +0000
Files and hashes:         1: u759h-rKuKMp6DvLD_fVAIi-Cc0.crl (hash: SqUi0epahm4Wy+CBZx8+SOVLEY1s+h95gLvz8+MQNpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.crl
                          rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u759h-rKuKMp6DvLD_fVAIi-Cc0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 815 (0x32f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF15E, serialNumber=BBBE7D87EACAB8A329E83BCB0FF7D50088BE09CD
        Validity
            Not Before: Apr  5 00:48:07 2026 GMT
            Not After : Apr 12 00:48:07 2026 GMT
        Subject: CN=69d1b148-7662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4d:ac:a6:77:d0:cd:c9:df:49:41:06:99:4c:
                    e3:26:d7:13:a2:97:f6:5e:32:af:d1:38:cc:9c:b0:
                    d0:63:94:be:50:29:2b:44:6b:40:ec:07:ba:05:51:
                    c1:83:e4:ad:db:50:6f:f3:33:31:e7:71:cd:c4:9c:
                    95:18:e2:31:29:d8:9f:aa:a0:ea:3c:91:99:21:f0:
                    db:37:6e:58:ae:55:91:6e:b7:50:02:44:98:f7:65:
                    d6:0d:7a:c9:66:7b:d5:e0:c9:d0:1d:ae:ee:af:3c:
                    6d:17:df:bb:99:de:f8:47:bc:f8:ec:fc:84:32:14:
                    05:3c:37:c8:1f:97:57:a7:2c:dd:96:23:72:e9:37:
                    0c:4a:7b:26:97:9b:c8:e5:22:e7:c8:35:8a:b0:15:
                    0a:ae:8a:db:ca:09:f9:5e:8b:d0:57:d8:16:d9:0b:
                    b3:9c:4d:13:c9:9f:8c:a2:30:84:5d:2a:1c:17:a5:
                    3e:d6:0e:31:98:35:60:b0:63:ca:33:39:79:e8:4b:
                    45:27:ee:82:6b:73:5c:90:69:ed:12:65:e6:99:2b:
                    c6:bb:9b:b7:56:26:93:b9:d2:33:22:90:b3:e0:29:
                    f9:e1:70:e6:a0:c1:cc:d5:a4:f8:15:bc:f6:1b:c5:
                    2f:77:a3:26:6c:94:01:4e:32:f7:a6:27:c4:7f:4c:
                    1f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7C:BB:A5:36:2B:8D:E7:A4:3A:76:4B:36:85:8B:2D:60:8B:98:B1
            X509v3 Authority Key Identifier:
                keyid:BB:BE:7D:87:EA:CA:B8:A3:29:E8:3B:CB:0F:F7:D5:00:88:BE:09:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u759h-rKuKMp6DvLD_fVAIi-Cc0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:e4:ef:41:ba:95:8b:b9:36:bf:01:65:d3:07:68:34:22:21:
         f5:18:f5:90:2a:1e:8c:98:fd:90:ac:00:93:0c:de:3e:84:7a:
         2a:6d:ae:22:07:d2:6c:e4:ae:4d:13:94:4f:d4:53:80:db:b9:
         60:17:59:5d:88:96:61:61:43:c0:07:51:de:ef:15:83:08:64:
         a3:0e:ae:a7:22:a0:d2:b7:a0:90:65:0d:3c:4c:af:1e:d1:2c:
         91:6f:d0:5c:11:66:87:4b:e4:c1:bd:91:6b:52:d3:e2:bb:ed:
         7d:93:6c:a7:cc:88:41:f5:1d:ca:4c:e0:79:04:f7:ec:33:e5:
         dc:6b:01:9e:3a:31:1d:ee:78:16:09:54:97:ed:d1:1e:c3:38:
         0c:68:2d:d0:da:2d:75:2a:3a:86:fc:db:04:2d:17:d1:f6:24:
         6f:bf:d5:92:14:24:97:89:70:51:d5:88:f0:e4:82:e6:9c:33:
         67:93:70:8b:fe:49:b9:2d:6a:a2:65:c8:97:8b:e8:65:c6:7b:
         01:99:fd:52:27:79:93:dc:ed:05:53:f7:19:25:40:08:92:fb:
         a8:5a:53:e1:f6:98:3c:a0:b8:29:aa:6e:c0:7b:72:4a:6f:5e:
         98:1d:dd:da:f3:a1:18:ee:e6:03:74:b1:f0:db:c5:18:41:a5:
         d0:7b:7a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:21 2026 by rpki-client