Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
File:                     1dDY4fA9UQCIn0GApl9VCg1YC4U.mft (raw, json)
Hash identifier:          jvIRyFLwt54fbjpKl+KRifEMM36UNsYa9lOcl2swXe0=
Subject key identifier:   B0:DE:98:A3:4E:C4:F4:96:98:49:09:CF:4C:68:1B:E9:42:53:42:43
Authority key identifier: D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85
Certificate issuer:       /CN=A91647ED/serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
Manifest number:          36
Signing time:             Sun 01 Mar 2026 10:03:38 +0000
Manifest this update:     Sun 01 Mar 2026 10:03:38 +0000
Manifest next update:     Sun 08 Mar 2026 10:03:38 +0000
Files and hashes:         1: 1dDY4fA9UQCIn0GApl9VCg1YC4U.crl (hash: Kga9T+ak3r7wDfN3RpR/vWbd1Jp1QZN22k9LyiEGckc=)
                          2: CE34BEF810A111F195BE013C393D8C67.roa (hash: rDiCsLkX8LztFPRKhHu/8w/OO3VhnMwZmTtx/fy38wU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl
                          rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91647ED, serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85
        Validity
            Not Before: Mar  1 10:03:38 2026 GMT
            Not After : Mar  8 10:03:38 2026 GMT
        Subject: CN=69a40efa-aa48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fe:4b:4a:a6:92:8d:40:0b:ff:4f:55:a8:53:
                    f0:f6:e2:a6:65:71:b1:fb:8b:b4:fe:f4:63:45:a4:
                    b9:54:ba:63:11:1d:e0:f5:a3:60:25:50:25:db:ec:
                    dc:b0:08:12:b6:16:99:40:cb:aa:d1:7b:8d:7c:68:
                    ef:30:d7:5f:e9:0c:5d:a9:79:0e:5e:a3:4f:34:36:
                    d6:ad:c0:6a:5c:bb:c2:32:ef:9f:3f:2a:e6:d7:ce:
                    d5:d5:4f:74:ba:52:83:95:b6:1e:ca:b7:6d:4f:fa:
                    10:b1:88:37:e4:ad:29:57:4b:7f:a6:d9:6c:67:ce:
                    62:78:e6:ad:af:69:4e:12:56:cb:09:fb:2c:31:5a:
                    73:e3:ad:09:1d:15:62:c5:5a:7a:eb:6c:52:61:89:
                    9f:0a:bb:3a:55:ac:a8:57:b3:7f:dd:86:0c:d2:94:
                    74:f7:2a:77:c2:26:4c:db:81:78:2d:a4:fa:c4:a6:
                    7a:02:65:d0:8f:75:0c:a1:22:7e:e0:39:eb:2d:24:
                    87:73:68:85:d3:81:bc:20:c0:af:e5:4a:ea:ad:90:
                    32:cc:86:0e:cb:8f:4b:e8:74:87:87:34:00:ba:28:
                    f3:99:ba:44:bf:35:98:73:b4:54:c9:d4:ec:b2:dc:
                    a0:d1:f9:65:a7:90:1f:f2:23:ff:44:23:90:96:72:
                    b4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DE:98:A3:4E:C4:F4:96:98:49:09:CF:4C:68:1B:E9:42:53:42:43
            X509v3 Authority Key Identifier:
                keyid:D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:4e:34:4e:36:f8:ea:7c:2a:a6:97:a2:8d:b6:c7:02:ae:e0:
         71:5e:be:9b:7a:7f:2f:92:6e:c6:98:8c:56:15:7a:43:63:8d:
         b9:86:58:d8:93:23:a9:07:1f:6d:fc:c0:73:9e:81:8a:6a:90:
         ce:5a:fd:80:bd:57:0f:78:47:a0:7f:1a:2e:f6:9f:c0:dc:ec:
         40:2d:4e:68:47:62:52:21:d8:21:c7:2c:33:e7:3e:d4:ee:8b:
         7e:0d:a9:29:0b:92:5f:fc:fc:b9:e8:6f:37:e5:ed:18:48:2f:
         90:19:57:0b:1a:58:14:0c:de:75:c9:f6:75:4e:9f:5c:89:83:
         c5:4b:14:91:59:40:b3:cd:b8:ab:04:1a:2a:2e:b0:dc:23:7c:
         75:c5:ad:f8:21:65:7b:53:dc:24:0f:52:7a:14:f4:50:e0:f4:
         7b:57:5d:c2:71:74:49:30:66:4d:c3:b4:7d:85:c8:5f:3d:63:
         e3:2d:54:e3:9a:7b:d8:63:34:8e:43:8d:c1:c7:84:18:d5:a2:
         a1:1d:ef:6d:40:d3:38:33:b7:6d:fa:c1:c8:a9:80:f2:22:ee:
         35:20:12:9d:89:bd:b4:6f:fc:fe:d4:18:c1:36:5b:fe:9f:69:
         f7:ce:d4:05:39:44:2e:7c:2e:80:4d:43:0c:f6:b6:cf:4b:9d:
         7a:e1:66:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:56:02 2026 by rpki-client