Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
File:                     toWM6JkRXyxWHHZl74vgaIBoEJw.mft (raw, json)
Hash identifier:          I36wXXQt814v7Z6ILc4qB8E0QmxxOvAAHybkjJK/x0k=
Subject key identifier:   FF:D0:20:FB:3F:C1:CC:A7:52:B8:87:11:AB:F5:56:A6:4D:7B:67:16
Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
Certificate issuer:       /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
Certificate serial:       09D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
Manifest number:          09AE
Signing time:             Sat 28 Mar 2026 19:51:44 +0000
Manifest this update:     Sat 28 Mar 2026 19:51:44 +0000
Manifest next update:     Sat 04 Apr 2026 19:51:44 +0000
Files and hashes:         1: toWM6JkRXyxWHHZl74vgaIBoEJw.crl (hash: WFaF9H2KCHMZ5eCVq+1tlsCYjZNxHpS3gWUU1OI1Ef4=)
                          2: 9C454274FB7711EDA78AAC1DC4F9AE02.roa (hash: hhZNB/58biqDU/puvBuRkIn6cgsCh7V3z4s20oQo9/c=)
                          3: 95DC9990D0A211EE9C97373FC4F9AE02.roa (hash: l2egmQd3zsdtRbINJVQmYS6+Vjf9g6ZTB8lsSZj6OnM=)
                          4: 1A4ED0E8A71811EA80A77B1FC4F9AE02.roa (hash: oq37cvFdf0Lwnn48NX4zkotyv1ewB96NkLUyO7/90Dg=)
                          5: 9D83F4E6FB7711EDA78AAC1DC4F9AE02.roa (hash: 8s3OLywFU0iSe0asfoBu9okI5WeihCkAQz7KzNUA7Rc=)
                          6: 8C79CFC6A6FD11EAA1B00744C4F9AE02.roa (hash: ZfiWnW2QWI/riqicAikvVoOAgBW+tB/Nt2Y+DVitm8Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl
                          rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Apr 2026 19:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2517 (0x9d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D120D, serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
        Validity
            Not Before: Mar 28 19:51:44 2026 GMT
            Not After : Apr  4 19:51:44 2026 GMT
        Subject: CN=69c83150-5820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:83:90:60:10:3b:25:b1:1b:d4:fb:84:e1:
                    e7:60:f0:1b:69:bd:91:14:01:99:8f:4a:d3:99:98:
                    7f:75:c7:65:61:44:e0:00:a2:d4:8a:ed:78:ca:63:
                    f2:73:5f:a0:a6:8e:d6:5e:97:5b:25:2a:e0:07:27:
                    46:e9:ea:da:13:ed:ff:c6:61:7d:19:1c:ea:aa:29:
                    c4:4e:de:2c:fc:9e:c1:20:73:8d:aa:71:f5:87:2c:
                    0b:33:09:7d:ca:bb:bc:37:f1:f4:55:87:0d:81:2a:
                    91:2e:aa:43:29:a5:dc:ff:c2:39:99:cc:9f:2a:4a:
                    62:be:7c:46:44:28:aa:7a:e5:68:fc:26:2a:e8:cf:
                    da:f7:3b:91:52:37:92:68:35:70:0c:66:f9:3b:ff:
                    2b:ed:b5:d4:fb:3f:0a:2e:d3:57:e8:ad:4b:31:71:
                    ad:bf:ad:22:d1:fe:66:7b:cc:80:d3:29:7a:61:4c:
                    83:d4:35:30:23:ac:97:f5:ae:e3:31:0f:b4:a1:27:
                    66:81:2c:e3:c5:31:ec:32:5a:5b:87:b5:f4:6a:71:
                    bf:83:30:90:c3:09:d0:b0:74:bd:57:b4:43:fe:86:
                    ae:c8:75:eb:c0:be:fa:ad:54:7f:4d:09:e6:fb:95:
                    5f:84:a5:43:02:34:df:1f:23:f6:01:78:a2:ca:66:
                    58:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D0:20:FB:3F:C1:CC:A7:52:B8:87:11:AB:F5:56:A6:4D:7B:67:16
            X509v3 Authority Key Identifier:
                keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:06:c8:44:77:ac:ef:12:33:b6:f2:0a:dc:98:c7:94:89:e9:
         57:73:6f:2a:b7:b4:d9:0f:05:d5:22:76:a1:f3:96:47:a7:c4:
         85:73:56:8b:e1:45:b7:7d:6b:77:d9:7f:a2:74:7b:e1:df:32:
         d4:dd:a3:5b:0c:cd:b7:e7:c7:df:b8:98:cd:47:8c:36:45:9a:
         ba:f7:1c:7d:43:63:99:bf:ea:5c:d2:3d:b4:cf:42:78:d4:31:
         74:78:28:ec:8e:d7:d5:a6:db:98:dc:58:18:16:ea:6c:30:27:
         68:cb:57:2f:22:a2:de:7d:f6:ba:e9:fe:52:15:9a:92:87:36:
         63:4f:f9:28:57:1e:ab:f6:17:2b:be:1c:2e:57:b9:ff:65:9a:
         4d:90:90:7c:46:79:97:b0:b4:8e:47:f4:c3:1e:de:52:a4:af:
         fe:bb:1d:59:3f:f6:08:7c:54:2e:20:8c:ea:c2:1a:3b:19:39:
         5d:bd:14:c8:9e:e0:a7:2d:da:f0:b5:9d:80:18:ea:51:2e:b9:
         ac:2a:62:ba:32:0a:0c:2c:db:d2:b2:1b:cd:df:c6:7d:32:6a:
         ae:db:19:26:46:6d:f7:3d:07:f3:60:b0:39:39:a4:06:c7:a9:
         d4:75:55:d1:0c:6d:4f:d5:18:d8:ef:12:31:20:9b:93:ff:ba:
         ff:97:b6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 02:55:15 2026 by rpki-client