Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
File:                     a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft (raw, json)
Hash identifier:          Co2D3YEecL8c/M5ODrjMpPV3Y4aLzngjZdlCZaItSYg=
Subject key identifier:   D1:7A:A0:17:31:0A:73:07:F5:3E:54:A6:0A:97:BC:D0:5F:2B:40:33
Authority key identifier: 6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70
Certificate issuer:       /CN=A91EAE3D/serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70
Certificate serial:       1517
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
Manifest number:          1500
Signing time:             Thu 12 Mar 2026 16:43:26 +0000
Manifest this update:     Thu 12 Mar 2026 16:43:26 +0000
Manifest next update:     Thu 19 Mar 2026 16:43:26 +0000
Files and hashes:         1: a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl (hash: YWwXmSDavX7DkunCKPHCntSeI0OGxzVA5JBfiKcM/ic=)
                          2: F693F2689CB811EB97F77E14C4F9AE02.roa (hash: YMv0r7cgJCxpk4HSp8I/SfGyxuRnawMQX2mraCd5KmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 16:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5399 (0x1517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE3D, serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70
        Validity
            Not Before: Mar 12 16:43:26 2026 GMT
            Not After : Mar 19 16:43:26 2026 GMT
        Subject: CN=69b2ed2e-0681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:06:52:1c:49:c8:21:fe:a4:ed:3d:c5:c8:
                    ee:7e:eb:c7:fc:02:85:55:c1:03:dd:7c:97:31:94:
                    74:03:fc:62:ea:8a:c9:4e:31:b4:01:6d:8f:4a:9b:
                    86:68:09:ee:32:99:a2:d3:d7:f4:c9:a1:ea:5e:5a:
                    33:88:a4:19:93:0e:3c:bc:aa:97:4b:62:d4:67:37:
                    da:b2:dd:35:3a:a0:ff:00:ec:85:a8:39:f6:37:cb:
                    98:0e:37:60:d3:b0:74:ba:3d:9c:fd:96:f2:e1:10:
                    3e:4b:20:60:a9:67:dc:5a:e9:1d:67:11:92:a1:53:
                    9a:38:84:d4:64:62:55:55:d2:48:85:1e:32:b5:fc:
                    28:a6:f6:62:35:91:ab:be:7a:c5:e2:9e:50:fa:d0:
                    ad:00:23:4c:3a:0b:57:cc:75:17:fb:83:5a:73:e4:
                    13:f6:fe:21:dd:e5:c5:d9:5d:86:c2:df:5d:91:77:
                    45:63:6b:b6:41:6d:28:5a:60:ce:6e:d1:ab:fe:9b:
                    48:d1:1e:51:d8:45:dd:e3:94:0c:b3:00:da:dd:79:
                    e8:64:bd:e6:a4:f0:9e:df:f9:3c:87:6c:fc:6d:50:
                    9c:af:4b:88:94:80:51:cd:0b:c2:fd:bf:8c:74:99:
                    7d:35:b6:ee:88:11:65:73:26:64:23:5f:2a:df:14:
                    77:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7A:A0:17:31:0A:73:07:F5:3E:54:A6:0A:97:BC:D0:5F:2B:40:33
            X509v3 Authority Key Identifier:
                keyid:6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e6:83:c7:5e:bd:58:26:d8:86:fd:21:4f:c0:05:23:ef:37:
         ad:94:c7:da:ff:f1:53:76:39:8d:ba:09:02:3f:57:72:77:1d:
         08:9d:2f:7b:16:94:22:8d:e8:81:c4:cd:0e:23:2c:a7:be:f8:
         5f:e5:f5:f5:b9:96:36:dc:80:01:ec:ec:67:40:b8:01:d1:62:
         1b:c4:8e:3e:b8:a5:5e:56:7a:b4:ed:02:16:00:f5:b8:64:78:
         80:50:d8:cf:b2:52:56:68:1f:78:85:14:4b:84:e2:22:73:32:
         e8:b2:9a:f7:8a:3d:29:c9:63:4e:96:24:7e:7c:44:2c:0e:f8:
         89:c6:c5:ed:49:bd:16:b4:63:3a:ac:12:51:8d:31:db:ab:d9:
         79:88:f8:16:22:ae:33:91:de:b3:11:4b:9a:56:08:d4:e6:2b:
         f9:df:2a:25:1c:59:c8:0e:93:e8:ae:cd:7e:a6:80:af:9b:c5:
         b9:79:81:4a:fb:71:85:e1:7d:28:83:d8:d7:57:ba:ef:11:2a:
         7b:e0:1f:3b:b3:3c:3a:ad:dd:40:8a:b4:30:96:04:dc:f4:5f:
         c5:a9:ad:41:50:85:6e:c3:e6:79:f6:d7:91:00:27:c2:06:84:
         17:d8:cc:7c:cd:ca:04:d7:22:08:d8:ba:2a:f2:cd:02:43:e9:
         c7:33:aa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:14:31 2026 by rpki-client