Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
File:                     MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft (raw, json)
Hash identifier:          D++0w1nOyJEqxNWDErNS5wB96tAHiJlMLLyC7K0OuPo=
Subject key identifier:   47:91:F9:0F:34:1A:2B:A5:F6:C2:71:8D:6A:B1:13:17:06:3E:1A:EF
Authority key identifier: 31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38
Certificate issuer:       /CN=A91DEF04/serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38
Certificate serial:       072A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
Manifest number:          0710
Signing time:             Thu 12 Mar 2026 21:31:27 +0000
Manifest this update:     Thu 12 Mar 2026 21:31:26 +0000
Manifest next update:     Thu 19 Mar 2026 21:31:26 +0000
Files and hashes:         1: MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl (hash: H0e6gtNMJG2beUu+whlEYWRfaxjj4ojgEvldj+LH2H8=)
                          2: 3366E7583CAC11F0997EAC45C4F9AE02.roa (hash: z3vfFzyCiPp7COCzQy7KY/5fnPoAbILohbFaBxoPiG0=)
                          3: 1F8EE77ECEF111ED9D71580AC4F9AE02.roa (hash: b91CN8KbCA7CsKadVYDYS+4haRrVejoxjdnfqbIrH3A=)
                          4: 74543474865311EFAD6A3A72C4F9AE02.roa (hash: p8nOzs2MGPpJBZ2dYf3NfouwimR2DwXOeH0VUZbqjmA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl
                          rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 21:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1834 (0x72a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEF04, serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38
        Validity
            Not Before: Mar 12 21:31:26 2026 GMT
            Not After : Mar 19 21:31:26 2026 GMT
        Subject: CN=69b330af-a9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:aa:29:08:9b:34:91:6a:64:48:f6:21:d4:dc:
                    f5:f2:2f:a5:60:29:0d:5d:fe:24:5d:04:ab:62:5e:
                    7b:cf:75:d8:24:5e:d5:81:c6:b7:2b:3b:24:a0:86:
                    4a:14:b3:13:6f:da:86:dc:67:e2:f6:04:ad:53:b9:
                    d0:ef:5a:20:95:f1:28:d1:55:51:cd:04:38:38:9f:
                    72:a1:4c:3a:0b:c5:d9:71:50:6a:45:8a:5b:e6:4b:
                    ad:aa:ac:a9:49:54:8b:d6:7a:3f:92:2e:a8:7f:74:
                    92:10:33:98:bc:8e:bc:e5:e6:b3:47:03:67:a5:2e:
                    9e:c0:e8:df:73:d0:fa:f3:9b:ea:f5:44:4f:a2:33:
                    15:1e:db:ff:66:40:d3:64:4b:31:dc:90:31:8b:c2:
                    e5:32:da:27:ae:35:a4:6e:92:ee:9d:f0:46:3d:3a:
                    d2:1e:52:1b:b0:eb:ca:32:f7:c5:ec:a0:aa:89:cd:
                    52:0d:f6:94:2e:e5:79:56:74:3b:74:fb:61:6a:07:
                    ff:a5:ae:93:19:69:1d:53:53:0f:4f:a7:de:46:d4:
                    fb:8c:00:4e:a5:1a:36:56:60:c6:b4:25:bb:11:55:
                    9f:70:d9:a7:ce:43:22:4b:10:47:20:02:24:92:83:
                    72:bc:50:2e:16:70:74:ac:16:10:86:c1:a6:71:40:
                    c7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:91:F9:0F:34:1A:2B:A5:F6:C2:71:8D:6A:B1:13:17:06:3E:1A:EF
            X509v3 Authority Key Identifier:
                keyid:31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:6b:3c:16:03:8c:f0:aa:fb:0a:a8:24:54:a1:85:7e:d9:d4:
         49:93:da:82:12:2b:ec:86:5f:46:34:27:f2:f8:fb:ca:31:b6:
         3c:4f:5f:f7:96:f3:70:af:f7:70:23:da:fa:bc:7c:84:22:99:
         ba:45:9c:4a:ef:37:f3:5a:72:d1:56:80:66:9f:4a:9f:8d:b1:
         ba:a0:4f:51:be:fe:53:10:e2:00:b4:b5:fd:ad:e7:2a:a5:0d:
         a8:09:98:d6:9b:2b:4d:fd:b8:26:2f:d0:28:b2:e7:35:a1:2a:
         77:4b:99:76:ba:c4:78:57:8e:b2:9d:3e:e9:36:5d:3c:27:9b:
         70:fb:b8:4b:70:65:8e:f9:af:be:79:14:9f:a2:3c:d2:e0:49:
         7c:05:03:69:62:16:fe:50:d7:8f:e9:d1:a9:22:b1:51:ca:ed:
         de:66:e7:1d:59:39:43:d3:18:ca:a8:63:f1:4b:f1:82:fe:ab:
         19:2e:55:cb:2a:6e:aa:8b:0b:e4:66:a2:e9:11:d9:7b:6e:fe:
         e2:79:12:9d:4e:df:4a:2e:ac:12:65:e3:5c:55:54:82:08:44:
         9f:78:89:d1:54:fc:22:c5:f7:74:e4:46:2d:3c:1a:29:7c:69:
         4c:9b:6f:c8:3d:f5:2e:a0:43:9b:fe:f9:95:a9:8c:c5:78:73:
         78:05:e1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:12:57 2026 by rpki-client