Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
File:                     AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json)
Hash identifier:          1zIA0tA270b9RRP/3cfIeSCvmJE+CYmTx+Fsl08RuQo=
Subject key identifier:   D7:FD:72:66:6C:CF:09:6C:3E:E3:B7:22:6A:45:CA:31:F3:F9:E3:05
Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
Certificate issuer:       /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078
Certificate serial:       027C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
Manifest number:          0277
Signing time:             Sun 05 Apr 2026 01:30:49 +0000
Manifest this update:     Sun 05 Apr 2026 01:30:48 +0000
Manifest next update:     Sun 12 Apr 2026 01:30:48 +0000
Files and hashes:         1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: EZ4pGM8JBmvzkdruwHQdEdPruQENzIDbkomeV3nwer0=)
                          2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: fg88o765nCwItF2Hc4hiKhK6MdJibWRYf4SuZ9yJYVU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
                          rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078
        Validity
            Not Before: Apr  5 01:30:48 2026 GMT
            Not After : Apr 12 01:30:48 2026 GMT
        Subject: CN=69d1bb48-fcf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3c:af:51:dc:e7:7d:1d:d9:97:b6:3d:2b:39:
                    f8:43:b6:3b:2b:14:72:c3:89:5c:dc:d2:5d:87:13:
                    78:d8:e8:9b:36:b9:d5:7e:d0:cf:19:ae:ff:af:3c:
                    ea:c6:86:48:db:06:65:14:7c:5c:f8:2e:c5:e0:05:
                    58:ad:3c:4f:8c:0b:99:52:9a:50:df:68:a5:0e:5e:
                    be:94:fc:c2:4c:aa:18:35:72:9b:29:1d:58:fc:f2:
                    86:dc:da:c3:e9:04:c7:e6:31:81:14:a9:64:71:de:
                    b7:52:6f:fb:b1:46:0e:6c:71:79:63:b5:32:91:dd:
                    41:93:55:b5:3d:fe:d6:c5:13:8e:70:a5:a8:3e:0b:
                    a0:d4:d0:14:d6:79:83:08:70:63:5a:db:7f:8d:8a:
                    60:19:00:65:93:61:c7:48:b3:2e:d2:9f:74:39:3e:
                    7a:d1:7f:bf:f2:aa:51:0c:20:fc:f7:8b:13:de:78:
                    bf:e5:43:a1:64:b0:4f:08:27:d4:c9:d0:21:f2:1d:
                    9b:21:b0:c4:8b:2e:e1:3d:7d:37:35:41:42:ec:b0:
                    4c:d1:01:c3:be:d1:4a:97:01:26:6f:ee:a6:a8:6a:
                    63:cd:63:7b:9f:09:77:39:2d:15:41:d3:22:4d:db:
                    c8:89:75:5d:6d:d4:8b:a0:e0:69:2e:b8:0f:cc:d1:
                    fe:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FD:72:66:6C:CF:09:6C:3E:E3:B7:22:6A:45:CA:31:F3:F9:E3:05
            X509v3 Authority Key Identifier:
                keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:dc:24:33:a8:3e:03:de:af:b4:86:16:d2:1f:7d:f3:49:0f:
         f2:bd:83:36:58:ad:48:7d:c9:31:71:3b:85:1b:92:e4:08:07:
         c2:60:1a:77:e5:7f:11:09:03:bd:93:49:b8:70:1b:36:a9:fb:
         33:bf:42:c1:62:5e:49:64:79:55:b6:81:6f:48:f2:51:85:b6:
         e5:20:99:a4:34:d2:fa:c1:6d:99:30:fa:88:53:da:5b:d4:6a:
         be:8e:fc:70:dc:59:77:2b:6d:2f:ea:c5:8c:fb:e0:ae:75:b3:
         32:e2:9e:64:04:8f:5a:af:a0:b6:81:1d:2c:f1:87:fd:63:03:
         29:4a:0b:7f:22:e7:2d:f6:33:b6:25:98:37:6e:18:49:ce:5e:
         81:d0:11:1d:d5:99:ef:0c:d4:6d:87:fe:bb:33:55:df:b8:f4:
         cf:06:6d:04:4a:7f:39:05:50:d4:4e:78:2a:24:03:da:a6:6b:
         12:c4:de:f2:e0:a2:c4:15:a3:5a:09:c0:df:5a:b7:9c:34:56:
         0d:ac:d2:f0:dd:69:56:76:00:b9:06:27:c6:51:ec:f2:f2:51:
         50:1a:02:44:c4:89:8a:59:75:d8:38:9b:b6:ba:a4:27:c2:b8:
         0a:24:b3:55:ff:e7:a5:d8:16:37:69:72:55:70:d3:7b:46:8a:
         9a:14:de:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:57:19 2026 by rpki-client