Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
File:                     bRscXsmpziDouF2j9sHjzdQu-Dk.mft (raw, json)
Hash identifier:          /TOpXw+Zl0N90Bt+CR2FfDfX99QpPRF/E4H4lBwubCs=
Subject key identifier:   5E:70:90:6E:88:16:10:61:E4:80:30:67:D4:9A:D5:59:69:3B:A7:B8
Authority key identifier: 6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39
Certificate issuer:       /CN=A91B4378/serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839
Certificate serial:       3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
Manifest number:          38
Signing time:             Sun 29 Mar 2026 08:12:51 +0000
Manifest this update:     Sun 29 Mar 2026 08:12:51 +0000
Manifest next update:     Sun 05 Apr 2026 08:12:51 +0000
Files and hashes:         1: bRscXsmpziDouF2j9sHjzdQu-Dk.crl (hash: lE613eavB8gL2eV5qmSummbODfnJVS3kEPEg6+tQDWY=)
                          2: D106F48C1D1911F19643AB4F103D8C67.roa (hash: Vnwa52V2rw4iQn/D3rDg54HehQEyfCOLvGurPGwR3Vs=)
                          3: 21656302D9A211F09604B56168D3641D.roa (hash: J7YgpNqOcaYjOCo1OiB0WdtVs6cboNKClgYeNKdHnYI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl
                          rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 08:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4378, serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839
        Validity
            Not Before: Mar 29 08:12:51 2026 GMT
            Not After : Apr  5 08:12:51 2026 GMT
        Subject: CN=69c8df03-0d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:09:9e:aa:b7:88:f9:a8:24:70:8f:10:19:ea:
                    0d:b1:ed:6e:07:1b:86:2d:00:bf:8e:aa:7a:07:f9:
                    1f:33:bd:ea:62:2d:42:00:ad:b9:20:64:0f:47:04:
                    35:db:48:68:23:88:0a:27:c2:a0:18:f6:01:7a:b4:
                    1f:39:c7:17:0b:f3:80:6f:e0:24:c9:3d:d9:44:44:
                    a8:7a:0c:88:09:40:44:46:43:24:64:18:85:81:08:
                    39:0c:27:ee:68:2a:7c:a5:80:05:ad:a2:ce:b2:06:
                    5f:fc:38:be:49:eb:f4:0a:55:9e:02:09:2c:f2:77:
                    32:9f:03:f8:64:cc:13:d6:26:a4:cd:7b:54:b8:40:
                    8b:4f:b4:f3:13:3f:ce:7b:bc:e1:f0:00:f1:7e:51:
                    04:38:e7:f4:ac:65:b1:2e:d3:70:4f:97:2c:db:c6:
                    94:03:36:69:46:c4:d8:b2:c6:e5:5e:69:3b:6e:5f:
                    47:3d:a1:f7:49:23:7f:5b:b3:42:cc:e0:10:fd:af:
                    b6:ff:90:cd:17:5d:51:90:82:96:69:a5:20:c8:ab:
                    92:5e:cc:2d:a0:e8:8a:a5:8e:e2:07:12:e9:d2:fb:
                    76:94:84:e9:64:c9:ed:09:7f:08:10:39:21:88:c5:
                    2c:a1:00:65:a9:a6:ed:a4:60:78:73:a7:7e:62:ae:
                    5e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:70:90:6E:88:16:10:61:E4:80:30:67:D4:9A:D5:59:69:3B:A7:B8
            X509v3 Authority Key Identifier:
                keyid:6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0c:c8:d3:8a:a9:b7:b2:0a:8f:ee:29:0a:99:85:40:27:1f:
         ab:f4:f7:b9:74:b7:53:ac:3a:f2:3d:89:d4:5d:8f:c0:45:18:
         8b:9a:91:13:d4:a1:d8:c3:4b:89:a5:6f:e3:cd:97:28:bc:67:
         66:b1:81:55:f6:54:62:d4:5d:ba:3e:40:a5:db:0c:a4:da:d4:
         3a:e8:4e:71:33:ce:31:11:30:e4:39:36:c6:23:6d:39:67:3d:
         bb:33:93:19:23:ff:89:9c:19:b5:9c:2d:38:25:23:d9:d6:e4:
         25:c5:33:17:da:e5:92:58:fa:24:88:bd:de:74:21:4c:70:0c:
         c9:51:fd:a3:d7:b7:d2:9c:39:37:c2:68:9d:0e:59:1e:46:93:
         35:84:21:12:f5:54:72:3b:90:21:77:03:69:9a:30:b1:db:8f:
         41:b3:ff:5b:06:92:fd:33:59:d8:e8:ed:a3:a8:c5:4f:8a:17:
         75:00:89:0c:2c:42:3a:3c:ce:58:f7:50:89:ac:d1:c8:0d:bf:
         0f:0f:04:6e:2f:bd:6c:42:41:17:d0:12:29:21:cb:46:38:c1:
         db:48:a6:4f:ad:c5:f4:2c:e3:5c:09:82:41:6b:48:19:d2:7a:
         84:55:80:7b:54:59:73:b0:94:de:93:d4:5e:f3:18:6b:80:99:
         8f:ef:24:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 15:45:40 2026 by rpki-client