Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
File:                     MCcwgVkVGUGrc0xyBhfff9zCQQw.mft (raw, json)
Hash identifier:          6/pd/PlrlQlfMtpwXjTa3HMKEh9W1rm1EoOcNCYxPJE=
Subject key identifier:   DB:C6:07:B0:B2:D0:FD:EF:E8:4D:1F:BE:13:DE:F3:68:5B:67:6B:6D
Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C
Certificate issuer:       /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C
Certificate serial:       105A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
Manifest number:          103D
Signing time:             Sat 14 Mar 2026 17:12:31 +0000
Manifest this update:     Sat 14 Mar 2026 17:12:31 +0000
Manifest next update:     Sat 21 Mar 2026 17:12:31 +0000
Files and hashes:         1: MCcwgVkVGUGrc0xyBhfff9zCQQw.crl (hash: 5y3bWEtAZYmoyp7cIdoxwUTbSWJFEKOS5QpDK2+x/WM=)
                          2: 1777F060A7CE11E980B87114C4F9AE02.roa (hash: UzYlF5kVoirkgLJ2+YAX7I5FrYpUxEnHb7ed/BCbCIw=)
                          3: D8C69E2A5C5511E98C4B6D6BC4F9AE02.roa (hash: Fgm+ElVjvC2qk51TNceoRhTvVi14rsJi9VmzJtf4CWk=)
                          4: 35A169488D8611E9B1106E6FC4F9AE02.roa (hash: Z++rBUNrYhvgRo99autUox/H1JSZhgsbn5NwK7G+bPg=)
                          5: 2E6E6386D21E11F0B5C0A977C4F9AE02.roa (hash: i8ISmSohzNFj4ZVdfD/LFHN7g4VElb5BUfPkcOjvKzk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl
                          rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 17:12:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4186 (0x105a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D17E8, serialNumber=3027308159151941AB734C720617DF7FDCC2410C
        Validity
            Not Before: Mar 14 17:12:31 2026 GMT
            Not After : Mar 21 17:12:31 2026 GMT
        Subject: CN=69b596ff-2ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2d:70:0d:1e:e9:ea:18:f1:e5:14:47:25:0a:
                    af:94:05:c4:79:35:b9:6b:84:b6:fe:33:91:6a:18:
                    9e:5a:85:89:ea:7a:df:cb:26:ad:89:d8:bb:a7:76:
                    76:c9:47:81:79:41:45:7a:36:1f:e9:ce:34:a9:5d:
                    63:29:60:b5:5f:fa:a0:25:9e:c3:f5:98:50:d2:02:
                    3c:04:2a:b5:24:da:03:5e:06:40:6d:84:d8:13:43:
                    0d:98:ad:03:ac:6e:23:2e:f0:cf:b8:da:03:b0:20:
                    31:03:96:dd:2a:02:cb:08:15:f4:42:60:e8:0d:82:
                    07:94:f4:c8:42:fe:c0:62:e4:71:32:57:0b:23:10:
                    14:a5:2b:fb:0f:54:18:94:8b:94:66:79:11:96:df:
                    9a:b1:e7:49:b9:3d:d0:5f:45:3d:64:d0:20:ec:ac:
                    af:f4:33:38:3a:c2:ac:5e:8d:f6:01:76:2d:f7:da:
                    74:4a:c0:a6:75:b3:6d:54:1a:2f:5d:21:83:ac:ff:
                    2c:9c:c3:16:c6:30:81:88:23:24:b8:8f:52:e1:69:
                    7b:0c:b0:bc:1e:c7:d4:82:62:3a:13:2a:fc:5f:ba:
                    5a:87:c0:7f:af:87:95:3d:42:2d:db:94:6e:c1:98:
                    7d:0a:58:b6:bd:5a:9b:06:fb:f3:74:c4:4e:a4:5f:
                    3d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C6:07:B0:B2:D0:FD:EF:E8:4D:1F:BE:13:DE:F3:68:5B:67:6B:6D
            X509v3 Authority Key Identifier:
                keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:39:45:ea:66:40:62:c0:5c:8f:c2:2e:b3:14:17:ca:71:55:
         bc:62:ab:88:80:27:5e:dc:30:1d:02:5e:33:f2:28:30:1e:d2:
         c9:10:ad:81:72:02:c0:56:34:86:d1:8e:81:0a:e8:80:46:91:
         fe:3b:5a:5b:52:6d:34:11:80:d7:1d:eb:48:bb:e4:0a:1a:7b:
         5d:38:28:34:88:74:fc:da:00:c6:c7:95:6b:65:0c:9e:eb:91:
         57:d3:ae:4a:11:c4:18:80:3e:26:74:1d:aa:85:b4:2c:05:ae:
         7d:1a:1b:48:0b:35:32:a5:db:c5:8f:88:75:c4:97:53:1c:2b:
         23:12:34:c7:b4:dc:d2:9f:22:4f:37:4e:01:b4:38:76:cc:69:
         64:b6:3c:47:b3:fc:88:9c:9c:71:ed:dc:78:e0:62:cc:db:d1:
         aa:70:8b:5a:82:7e:98:85:ba:19:f6:c8:16:64:47:92:74:82:
         98:49:82:d5:a3:03:c6:51:13:16:f1:9c:bc:49:a2:c4:f7:16:
         7b:b8:86:1b:d5:78:f5:5b:4b:7e:6e:c1:e3:0d:39:20:82:f3:
         b4:64:3d:ee:18:85:f8:bc:83:14:9a:2d:99:11:7d:10:e1:5a:
         c2:b6:05:48:60:f4:7e:97:57:27:5a:91:b3:12:f1:55:65:76:
         36:d9:a5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 10:00:02 2026 by rpki-client