Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
File:                     McvtHUoCFwgxgH13RKxKr_JqBuY.mft (raw, json)
Hash identifier:          S3N36xriMIAldtd5M9e9DgFCeNFCTsCaK0r0is2lrHM=
Subject key identifier:   02:1E:58:23:5B:FE:AB:81:CD:02:DC:C8:21:D7:D5:8A:70:46:D0:40
Authority key identifier: 31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6
Certificate issuer:       /CN=A91C607C/serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6
Certificate serial:       01E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
Manifest number:          01DA
Signing time:             Sun 05 Apr 2026 03:04:04 +0000
Manifest this update:     Sun 05 Apr 2026 03:04:03 +0000
Manifest next update:     Sun 12 Apr 2026 03:04:03 +0000
Files and hashes:         1: McvtHUoCFwgxgH13RKxKr_JqBuY.crl (hash: SAWFYkUZwbmhVwnCFCXeXGPtOrXr/gPdnRPWfufIJpg=)
                          2: 6F94DE3C628911EEA2D58C10C4F9AE02.roa (hash: ikPMKuaPv3O9li0UmdRfo3QhOBtyL4n4r3spbr+lypM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl
                          rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C607C, serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6
        Validity
            Not Before: Apr  5 03:04:03 2026 GMT
            Not After : Apr 12 03:04:03 2026 GMT
        Subject: CN=69d1d124-7c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6e:53:1b:fc:45:41:c1:39:e0:9b:53:d9:b1:
                    09:17:c9:12:49:2a:e1:33:c0:66:bd:cf:32:56:b9:
                    22:f9:11:d7:96:d1:14:99:c7:b8:b0:b1:30:0d:68:
                    78:6a:6b:bc:cc:bf:d8:3e:82:04:84:86:a1:ff:38:
                    4f:5a:cf:17:58:cb:0f:83:1a:eb:8a:b4:51:a6:da:
                    cd:04:50:eb:bb:45:ba:2b:0f:3f:d2:9d:91:b9:0f:
                    93:03:3b:09:7f:e4:13:76:02:de:cb:68:b3:d5:56:
                    aa:72:af:1b:10:49:69:88:d4:9e:2a:30:11:ba:63:
                    dc:7c:e5:3b:db:d4:b4:14:be:c8:86:89:94:c7:17:
                    63:d7:92:29:0e:bb:ca:86:0d:83:34:e7:d3:86:d6:
                    ef:5e:91:1e:57:3d:5f:6e:13:eb:2c:3d:d5:5f:40:
                    fd:68:c9:47:96:1c:66:1f:d9:77:fd:f5:ec:83:d0:
                    e1:93:7a:2f:71:e0:11:a9:71:4c:97:36:d5:82:4f:
                    b4:9b:2c:17:a1:29:18:22:2a:16:00:aa:7d:1d:fe:
                    08:58:59:dd:e8:15:7c:22:5d:57:b7:20:65:d8:ac:
                    80:89:45:da:af:a7:71:93:6f:61:d9:b6:f9:70:f5:
                    7b:be:4b:0e:4e:4e:a0:96:e9:cc:81:79:4e:57:d7:
                    3f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1E:58:23:5B:FE:AB:81:CD:02:DC:C8:21:D7:D5:8A:70:46:D0:40
            X509v3 Authority Key Identifier:
                keyid:31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:73:72:80:30:b0:98:01:d4:e8:a1:0d:99:89:14:af:ba:83:
         34:99:6a:97:7f:b1:52:c2:43:cf:f7:d2:c8:50:62:1a:8c:6a:
         b7:8a:1f:cf:e9:0c:e9:fd:22:a8:e8:7a:7c:b7:e7:9e:5a:1e:
         44:f0:90:48:3d:f6:61:54:46:59:84:1e:7c:75:15:8b:74:95:
         b1:e0:b3:72:99:74:32:eb:58:67:48:b4:2f:01:fe:fe:f9:9f:
         3e:9b:b3:26:ce:ab:6a:69:ef:9f:47:16:ed:f4:e2:b9:78:b3:
         0a:12:6e:d0:a8:14:80:f7:b8:f3:c8:91:79:8b:54:75:e2:00:
         8e:68:d2:3d:2c:f7:5d:95:c0:2e:ba:cf:34:2f:dc:3c:1d:46:
         4f:2e:c2:36:39:85:be:fe:cf:83:d6:8d:80:15:b0:d7:57:74:
         9d:88:51:ca:5f:db:1a:da:e4:78:1b:70:71:14:a8:7c:0c:74:
         3f:73:57:ee:56:6b:90:28:01:f0:95:96:61:82:08:1d:df:a7:
         58:46:20:21:29:03:f9:73:2c:07:8e:9b:95:50:49:69:c4:ad:
         5e:65:02:ed:e4:c5:b6:e9:76:3f:98:17:fd:25:ca:28:d2:6d:
         8c:89:e3:68:36:c5:52:c0:25:20:b4:b6:ee:31:ad:92:0d:29:
         94:21:a7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:59:05 2026 by rpki-client