Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
File:                     9jTAsSwZeK8-iQxSj8csj3R9uYA.mft (raw, json)
Hash identifier:          WD78OzfNmHmKmpnn5ak/wpYAAypsKqQobNN9jJC5Qxs=
Subject key identifier:   52:2C:F6:67:5E:54:06:2F:49:FD:11:10:E7:86:64:F4:7C:8D:55:AA
Authority key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80
Certificate issuer:       /CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
Certificate serial:       03E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
Manifest number:          03DB
Signing time:             Sun 05 Apr 2026 00:19:17 +0000
Manifest this update:     Sun 05 Apr 2026 00:19:16 +0000
Manifest next update:     Sun 12 Apr 2026 00:19:16 +0000
Files and hashes:         1: 9jTAsSwZeK8-iQxSj8csj3R9uYA.crl (hash: 9HkaTVLidoDVspQRGZBobbT66EO2FPHIRuM8e1I4xUo=)
                          2: 2173FE4EC0A611ECB6A6996CC4F9AE02.roa (hash: lbvKMon3phKT4kxAzoVpvvRCe8EmYTdmkdcCNNB8PIY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl
                          rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 993 (0x3e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C798A, serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
        Validity
            Not Before: Apr  5 00:19:16 2026 GMT
            Not After : Apr 12 00:19:16 2026 GMT
        Subject: CN=69d1aa85-2f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:df:df:fa:6d:1b:76:4a:f9:be:1a:6e:44:c1:
                    17:b0:e4:42:5b:59:4c:6b:b1:bd:0a:a9:61:9b:96:
                    aa:24:24:54:13:63:e7:0b:aa:26:4d:f8:46:96:e9:
                    8f:ff:48:04:a6:8a:2e:eb:7f:2b:8c:0d:30:20:a4:
                    e4:05:8d:f7:c5:3c:09:3e:be:3d:a0:81:9e:5a:98:
                    d9:ed:a7:77:35:0c:ef:1f:2b:39:8e:09:6f:3f:c4:
                    63:ad:95:89:76:9b:39:f0:2f:22:f7:87:7a:5e:1d:
                    0b:d7:f7:cd:dc:bd:2c:16:de:de:b6:d6:ef:77:ae:
                    8b:0f:ff:a8:9d:9c:1c:24:60:08:02:da:7b:88:41:
                    ab:b2:0e:f7:b7:7c:1c:cd:c0:ce:23:22:da:47:4b:
                    64:dc:8d:aa:43:35:f6:b9:c9:ee:6b:13:26:67:3c:
                    11:00:9e:00:51:31:b6:14:70:a6:7c:f6:b9:a7:fc:
                    b9:b8:66:a2:7a:ce:2e:2e:de:dc:f3:c5:d5:24:af:
                    32:4d:de:40:5c:1c:35:08:cd:f9:3a:83:6c:7e:fc:
                    b5:94:00:4a:45:27:80:e4:63:42:21:13:5c:c2:3f:
                    62:4e:61:a8:86:74:80:85:55:9e:16:bd:6a:27:8b:
                    f2:23:dc:af:da:13:d8:0a:67:b3:90:80:6e:c2:e5:
                    eb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2C:F6:67:5E:54:06:2F:49:FD:11:10:E7:86:64:F4:7C:8D:55:AA
            X509v3 Authority Key Identifier:
                keyid:F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f6:e3:41:cb:04:6b:54:2d:97:bb:6d:27:b4:bb:72:20:d5:
         8d:4b:9d:9f:fe:f3:49:de:a1:f1:52:61:b9:cf:50:9c:69:9c:
         47:58:66:71:37:81:47:2c:ae:9b:f9:6f:db:13:ff:f4:96:da:
         f4:31:cf:3e:db:26:25:2b:1b:90:2a:4f:2a:ba:e4:48:f5:64:
         14:b5:1f:9f:04:89:e5:5d:f3:20:ff:35:2d:7f:2b:c9:ff:5b:
         30:00:8a:27:e3:62:13:9b:89:15:65:14:76:69:4d:e1:c1:b1:
         3f:2c:71:64:7b:1e:12:63:f9:50:b4:d3:5f:99:f1:f1:83:e6:
         0b:78:fc:bf:86:ae:74:1a:3c:7a:2d:cd:74:d0:db:45:25:08:
         0e:72:c1:fe:cc:64:c9:cc:f5:6f:56:8c:f7:b2:24:60:cd:75:
         61:6e:a3:f2:71:6d:c6:57:0e:0b:c1:82:6b:4b:7e:f2:6f:b5:
         a5:0b:bc:3f:b6:0f:f8:6e:ba:30:2b:c6:4e:e1:5e:05:05:fe:
         45:84:f0:98:8a:28:e1:1f:e0:53:41:db:d3:ef:bc:2f:68:14:
         cf:4f:bb:0f:36:00:61:13:81:a0:ea:2d:19:d7:58:a8:e2:b3:
         ea:94:a5:93:b4:bb:77:48:e1:88:4f:5d:f6:21:85:be:b0:78:
         20:43:ef:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:06 2026 by rpki-client