Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft
File:                     rRUq9u8CmWIL-fd_1gzYsxQEF68.mft (raw, json)
Hash identifier:          OTpH9V1OTL8t9d78Zeo1AYjsO2L0RpbVw4Lhwly5KGI=
Subject key identifier:   93:2F:B3:7B:3C:4F:6D:6B:4F:C7:25:FC:8A:81:B6:5D:EA:BA:77:54
Authority key identifier: AD:15:2A:F6:EF:02:99:62:0B:F9:F7:7F:D6:0C:D8:B3:14:04:17:AF
Certificate issuer:       /CN=A91CB92A/serialNumber=AD152AF6EF0299620BF9F77FD60CD8B3140417AF
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft
Manifest number:          61
Signing time:             Sun 01 Mar 2026 09:29:20 +0000
Manifest this update:     Sun 01 Mar 2026 09:29:19 +0000
Manifest next update:     Sun 08 Mar 2026 09:29:19 +0000
Files and hashes:         1: rRUq9u8CmWIL-fd_1gzYsxQEF68.crl (hash: hXHbBhEThQk14OY9Q11d6uWHOtX70OYzjNvPKAkJgCQ=)
                          2: 8CAFF0E884AF11F0A1FF182BC4F9AE02.roa (hash: 1iSIVgVboXBGeGo/TqQ/0DwhhkF49H9wd1wvK0JsTR0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.crl
                          rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB92A, serialNumber=AD152AF6EF0299620BF9F77FD60CD8B3140417AF
        Validity
            Not Before: Mar  1 09:29:19 2026 GMT
            Not After : Mar  8 09:29:19 2026 GMT
        Subject: CN=69a406f0-404f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ca:7a:b2:f8:64:91:12:6c:9d:53:74:5e:d7:
                    f2:5e:83:c3:bb:ea:ec:c9:b0:48:c1:0f:9f:9f:d5:
                    94:e7:fa:66:d4:03:64:23:b9:db:7b:0e:a4:1b:20:
                    ec:39:ef:91:7b:30:d8:18:b6:82:fa:fb:47:16:09:
                    15:2c:68:e0:2f:3e:a7:9d:30:f0:7b:81:c2:79:f3:
                    40:86:14:cc:fc:00:f9:c7:3e:bb:d0:aa:73:43:04:
                    ad:37:4b:c7:68:c3:45:9e:c6:f5:cf:5e:f4:ab:33:
                    46:a6:2e:4a:82:71:5e:c1:9d:99:14:10:41:2c:eb:
                    1e:3e:7a:c8:dd:10:77:5b:ab:7b:5d:26:6f:93:c3:
                    5a:a4:1f:ab:ca:4b:c9:2c:fc:a3:31:9d:05:80:b2:
                    17:ff:11:b9:0f:05:4b:f7:11:7d:7d:e8:b7:a6:5d:
                    ab:9d:2c:41:ac:ef:b4:2a:e0:4c:49:9c:6f:42:51:
                    e7:ae:14:cd:96:3e:37:44:cb:9b:ac:69:bb:2a:a0:
                    ca:99:14:cb:64:f9:8c:ef:a1:7b:69:f9:cf:a7:87:
                    d9:ae:35:90:f9:3d:6e:13:e1:46:a0:0d:95:6c:c2:
                    14:46:5e:b6:77:af:9c:30:10:27:e1:1e:30:72:95:
                    26:d4:fd:93:10:60:1c:4b:07:cc:7f:3e:2e:53:51:
                    90:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2F:B3:7B:3C:4F:6D:6B:4F:C7:25:FC:8A:81:B6:5D:EA:BA:77:54
            X509v3 Authority Key Identifier:
                keyid:AD:15:2A:F6:EF:02:99:62:0B:F9:F7:7F:D6:0C:D8:B3:14:04:17:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:69:10:cc:10:2d:d8:bf:56:00:68:28:d4:59:59:0e:87:a7:
         53:0b:08:e2:ad:69:3d:79:84:8d:33:8a:e4:1e:06:33:04:09:
         a4:b4:eb:7a:f0:e7:50:3f:8b:03:b3:ed:53:d7:a0:14:d7:f0:
         60:e3:22:e2:3a:e2:ee:b2:32:a7:b3:c6:6e:28:ca:a8:f2:2a:
         9c:bf:ab:8b:2a:db:4e:e2:94:f6:c8:6d:e8:15:7c:75:cc:25:
         65:4a:ec:e6:17:89:30:54:b0:72:42:73:4e:21:6e:37:47:cd:
         d8:b0:54:80:a2:b2:b3:78:0d:a5:9e:73:ca:fc:1c:2d:3a:5c:
         d3:7d:78:cd:de:f5:aa:4c:12:6b:1f:19:34:56:97:e6:be:5c:
         88:b6:1b:ee:1b:00:a7:3c:d2:7d:59:bd:82:fe:58:1e:44:e8:
         3b:9d:25:45:dd:2c:5f:6a:a6:a8:e1:42:fe:0c:aa:93:cb:01:
         70:44:63:f3:4a:ca:f1:4d:e9:01:df:0f:80:23:ff:f9:14:ef:
         d6:7b:b8:5c:cf:be:d8:33:5d:e6:00:0a:d9:1f:9e:cc:97:56:
         19:e1:3e:98:f7:73:5c:dd:cb:1a:09:38:0d:18:44:e4:ed:20:
         25:75:fc:ec:55:ef:de:f1:41:92:67:6a:53:27:50:cc:7e:e6:
         82:cb:96:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:55:51 2026 by rpki-client