Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
File:                     A7x0msFoLEtG2iWat-tmKqIlsO4.mft (raw, json)
Hash identifier:          6nooN4Vvha+gAVY2dH13X2u+UOHkHZ2k96E74ZBo4v4=
Subject key identifier:   B0:C0:C1:DD:1E:71:48:F3:24:EB:A7:E1:C3:D5:66:75:BC:B9:CD:D5
Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE
Certificate issuer:       /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
Certificate serial:       0360
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
Manifest number:          033C
Signing time:             Sun 29 Mar 2026 01:01:36 +0000
Manifest this update:     Sun 29 Mar 2026 01:01:35 +0000
Manifest next update:     Sun 05 Apr 2026 01:01:35 +0000
Files and hashes:         1: A7x0msFoLEtG2iWat-tmKqIlsO4.crl (hash: REAeRbXNpcGWCKWF+0zkopWz6NXVFqley538fZLltS8=)
                          2: 810DCA288C6511EF813EB90EC4F9AE02.roa (hash: QKkyT4YbWo+H3D3PvJrtIZvYmn8vhyqDknx0lWhaPew=)
                          3: 0A9DA996655311EF8D61E41CC4F9AE02.roa (hash: qmSYFXBCxcqxkM5XH4uaUEDVYEJ9yUrEsaElHySAxKw=)
                          4: 7D4462BAC93311F0B048172CC4F9AE02.roa (hash: PP03+ns0fvbCbNTOcKnxUs6dGDBO7IGi9AfJ5ZcdUYQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl
                          rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 01:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864 (0x360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
        Validity
            Not Before: Mar 29 01:01:35 2026 GMT
            Not After : Apr  5 01:01:35 2026 GMT
        Subject: CN=69c879f0-8e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bf:61:ec:e2:64:ca:bd:b8:e2:bc:b6:77:98:
                    de:80:26:77:37:7b:89:f1:41:44:0f:27:fd:dd:d2:
                    b6:51:67:31:c3:e8:e6:13:0c:31:21:ee:0c:1f:fe:
                    42:ff:69:a9:37:5c:47:f7:f6:19:1c:cf:95:e4:a2:
                    ec:c4:1b:00:00:a9:e2:a2:dd:9d:2d:ec:ff:ae:58:
                    dc:9d:4b:37:bb:7f:cc:e7:99:30:54:37:0a:3b:6d:
                    90:12:6a:48:eb:b8:fb:7e:ff:ec:99:52:74:47:e9:
                    71:86:f5:a5:02:e0:e7:81:18:10:62:90:d0:d5:36:
                    d9:1c:43:d2:11:a6:e7:6a:81:fd:60:f5:17:ba:b9:
                    93:59:72:b4:87:48:33:97:e0:cc:ca:f4:e4:72:8a:
                    69:2a:d1:4a:f3:aa:4c:4e:fe:ae:bd:47:f3:13:f0:
                    3a:5e:16:50:d9:da:5f:45:d6:5e:2b:bd:a9:7f:31:
                    f8:0d:eb:4f:22:bb:19:0a:06:10:c1:fd:c2:51:26:
                    9c:50:03:17:26:bb:e1:5e:ca:17:98:33:ba:cf:1e:
                    37:97:e5:00:c6:3a:60:30:2a:be:b6:f9:0f:1a:da:
                    57:21:d4:2f:39:1d:f1:a1:03:51:15:4d:6a:de:1f:
                    8e:b0:30:02:99:e8:6b:ca:0d:eb:ab:3b:5a:81:ea:
                    f2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C0:C1:DD:1E:71:48:F3:24:EB:A7:E1:C3:D5:66:75:BC:B9:CD:D5
            X509v3 Authority Key Identifier:
                keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:dd:3f:83:72:ff:54:76:0d:ce:56:c6:60:b0:07:d6:e0:84:
         76:7d:d7:44:ec:27:f4:62:da:fb:a8:db:81:5c:4f:b9:38:df:
         17:74:ee:c3:d0:fb:0c:fd:8d:0e:6f:7b:57:f8:17:44:e4:f7:
         f6:33:9b:2f:97:92:1a:db:8e:42:62:4b:0d:79:36:db:c9:30:
         c6:a9:91:e3:f1:da:2b:30:04:a4:d6:c7:57:0c:63:39:63:0e:
         6c:94:71:3c:bd:0a:69:7b:97:49:1a:ce:dc:68:ea:83:de:42:
         70:b3:99:a9:83:91:06:92:9d:5c:01:e6:d2:3d:8f:41:8b:f8:
         ff:51:9f:a5:7e:62:c6:15:8a:b8:44:7b:ca:c5:b5:44:04:a2:
         c4:db:bb:84:80:5c:77:0f:be:a2:90:e8:94:98:72:0c:1f:a9:
         da:9a:91:80:cb:2a:e8:0b:d7:9f:63:54:ae:0b:f1:53:7c:59:
         5b:a0:ec:57:12:c9:c4:05:a5:10:98:90:57:a5:7b:97:b4:93:
         2b:26:94:66:0b:8b:32:a5:e4:a9:fa:72:54:4b:51:7a:64:2d:
         90:8d:fa:ae:bc:0a:44:89:0b:c3:af:20:8a:82:91:ba:a7:f9:
         71:ee:b1:9e:ae:b8:25:8d:6c:1c:6b:10:6a:cf:ed:57:27:f1:
         c3:30:09:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 17:26:29 2026 by rpki-client