Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
File:                     pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft (raw, json)
Hash identifier:          rTapFucKy0yLxFcoS1IgFd6f47x2dq+7HE2Y/D+tbf8=
Subject key identifier:   5F:25:E0:D7:CB:C5:C8:E3:3D:09:6F:14:A4:88:72:31:E8:75:D7:13
Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
Certificate issuer:       /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Certificate serial:       09CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
Manifest number:          13BC
Signing time:             Mon 30 Mar 2026 19:42:02 +0000
Manifest this update:     Mon 30 Mar 2026 19:42:01 +0000
Manifest next update:     Mon 06 Apr 2026 19:42:01 +0000
Files and hashes:         1: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl (hash: H1hAvTVrmn0r/upilje9JcQet1Cm7eeOeBiHkJlUFRE=)
                          2: 2921D24E067C11ED882FC127C4F9AE02.roa (hash: fkiwxN+FDUMk1YJfttIFKif5qgzxiSgVetIrMWaLkc8=)
                          3: 214232EC4FD311EF90027A63C4F9AE02.roa (hash: yMhZC4asbcFKaEcwYCiNsgA1feOljvXgQMxhyDbkjXs=)
                          4: F9E12AD89D0011F08C93B545C4F9AE02.roa (hash: sLhj2zyAg6egVDc0WrsXEOyJk+cLRHE/hif82VB3if4=)
                          5: 32751AAE67B811F0962F0730C4F9AE02.roa (hash: 5GgOEVTUj+luRWBl8T2htbl23XYiADuNdZgfk2fUYTQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl
                          rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2509 (0x9cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
        Validity
            Not Before: Mar 30 19:42:01 2026 GMT
            Not After : Apr  6 19:42:01 2026 GMT
        Subject: CN=69cad20a-f8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2f:09:9d:fd:31:cc:64:f9:49:ba:f7:93:ff:
                    9f:bd:20:14:9f:7f:eb:d0:c7:33:da:dd:18:c1:08:
                    10:42:65:79:e3:a6:1d:99:56:99:85:cb:88:6a:43:
                    2d:00:99:c1:95:f8:b5:69:ea:f1:84:78:fb:35:9c:
                    fc:a6:cc:d3:64:54:93:20:b6:e7:7a:f9:98:9b:65:
                    cf:dc:34:c9:ba:9a:b6:bc:23:0a:0e:52:b5:4b:c7:
                    ef:50:71:8c:c7:ed:41:a6:3d:27:50:4d:9d:af:68:
                    1b:80:56:8e:5d:35:7a:9c:b2:f9:51:35:b7:5e:fc:
                    32:d2:f5:db:1c:84:68:c6:ff:13:d3:7f:0a:da:25:
                    cc:ed:1a:ae:5f:b8:69:cf:e1:75:15:b4:29:f4:05:
                    42:51:82:b6:03:5e:a9:3e:b7:98:6c:6e:34:8e:78:
                    de:61:c6:3e:cc:52:98:be:44:37:b4:aa:51:9c:d4:
                    29:7a:1c:87:cf:c2:b2:06:54:c1:a9:d7:d7:fc:fa:
                    3a:51:30:3f:33:d0:1a:62:89:cc:54:2f:e6:b7:f2:
                    94:03:d0:6e:89:d5:ab:51:d3:4a:c8:6e:13:4f:0f:
                    ae:88:e0:49:a3:05:2a:ad:1a:2d:ef:3f:a5:65:0a:
                    2c:05:f6:50:6a:29:ee:5d:e8:08:87:c0:b4:42:9a:
                    e3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:25:E0:D7:CB:C5:C8:E3:3D:09:6F:14:A4:88:72:31:E8:75:D7:13
            X509v3 Authority Key Identifier:
                keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c3:56:12:dc:3a:6c:dc:09:23:2b:3e:fa:80:56:8b:95:85:
         96:ad:81:7d:20:c5:9d:2e:6d:20:8d:9f:f1:d2:cb:93:c4:61:
         d0:89:1f:73:4a:3e:15:1e:f3:0e:98:73:20:0b:8a:23:3d:7e:
         7b:00:4c:c6:34:c8:75:6b:b6:74:50:d6:b4:c9:4f:60:ca:ac:
         14:8a:0f:61:92:4a:8f:07:4d:84:43:00:e0:9f:de:03:8a:e8:
         c3:f5:be:61:c9:97:1d:b9:b3:e8:14:66:55:42:a7:16:57:b1:
         38:1a:08:e4:dd:52:b9:98:88:f6:4b:ea:bc:c5:2b:27:93:77:
         79:c8:f4:69:c4:4b:7a:1e:a7:5d:c9:ea:1f:20:aa:ed:6b:53:
         64:b5:0e:3d:fd:21:32:30:c2:15:e8:05:86:4c:b3:63:bd:43:
         86:e0:4d:92:78:a0:79:53:89:df:00:8b:32:7c:98:45:f6:72:
         cf:74:61:28:45:d5:da:69:04:64:e3:18:e6:e8:25:62:45:78:
         a4:02:90:de:ac:ad:a2:db:c6:4f:b4:07:4e:ca:27:f4:1d:16:
         c6:ce:c3:0c:98:2b:74:0f:11:f2:b8:8e:35:ef:3e:ae:bf:26:
         29:6f:c3:bd:a9:6d:6a:8e:00:e4:05:5a:2d:1d:86:5d:d0:ff:
         33:51:25:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 06:45:06 2026 by rpki-client