Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft
File:                     _rv4NRuAvuL_tu8l-lfwhy9QkfI.mft (raw, json)
Hash identifier:          1Fjw3ho3VeXEH0aQqzvqYc5eHemt2EnTwZer1j/5wQc=
Subject key identifier:   63:18:9F:CA:17:92:9A:E3:40:73:CF:86:35:1E:4C:A1:BB:0F:73:F4
Authority key identifier: FE:BB:F8:35:1B:80:BE:E2:FF:B6:EF:25:FA:57:F0:87:2F:50:91:F2
Certificate issuer:       /CN=A91133BE/serialNumber=FEBBF8351B80BEE2FFB6EF25FA57F0872F5091F2
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rv4NRuAvuL_tu8l-lfwhy9QkfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft
Manifest number:          2A
Signing time:             Fri 17 Apr 2026 08:27:14 +0000
Manifest this update:     Fri 17 Apr 2026 08:27:13 +0000
Manifest next update:     Fri 24 Apr 2026 08:27:13 +0000
Files and hashes:         1: _rv4NRuAvuL_tu8l-lfwhy9QkfI.crl (hash: c/aisaFEtBrV0ziTzS02DJIQMo6zv6qqv47xcHQcfNc=)
                          2: D030482C001011F18942B574406F56BC.roa (hash: sbfrnLF6dkRPUD2i2wrrg7/6Vn8Z0is3ukK/xyl/U6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.crl
                          rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rv4NRuAvuL_tu8l-lfwhy9QkfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91133BE, serialNumber=FEBBF8351B80BEE2FFB6EF25FA57F0872F5091F2
        Validity
            Not Before: Apr 17 08:27:13 2026 GMT
            Not After : Apr 24 08:27:13 2026 GMT
        Subject: CN=69e1eee1-2baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:cd:8a:a8:67:1f:5a:cc:bf:da:04:eb:d5:
                    ab:7b:5c:cf:4b:72:eb:3e:3b:15:d6:0a:f5:f4:98:
                    ad:d4:18:2e:5b:80:38:1c:4a:dd:51:c0:d7:cf:4e:
                    17:a9:ef:6f:d9:78:09:e9:2f:ad:fb:f2:21:28:68:
                    25:0e:6f:96:6d:d5:1c:5c:b3:6c:93:0a:d3:c4:ca:
                    88:af:a8:b7:09:e2:38:5b:7f:88:70:00:f7:16:e2:
                    68:42:1c:9c:78:78:6d:45:bf:3c:c1:ed:c8:1c:72:
                    ff:b3:55:99:13:03:7a:4b:25:95:79:2d:de:e4:c7:
                    37:4c:db:13:14:4d:d5:a8:4e:a4:ef:31:73:25:12:
                    06:7e:27:9f:e3:24:76:78:ed:67:e9:4c:e7:7b:54:
                    fc:71:70:8d:42:5d:37:09:90:cb:b9:85:8c:12:89:
                    eb:95:c9:38:67:91:71:c0:04:c3:0c:66:fb:da:f7:
                    70:c7:85:00:04:7d:9a:36:77:86:f1:aa:7f:ca:7c:
                    cd:e4:09:a1:76:1b:08:66:e3:cc:f2:fc:25:bb:0c:
                    2e:48:1a:27:5c:2f:a5:bd:74:8b:f0:ee:0c:6e:cc:
                    de:c7:3f:af:08:59:7e:ce:eb:e0:d3:fb:e4:b5:95:
                    c2:64:85:ed:de:8f:83:f0:69:71:fe:e6:8b:79:06:
                    7b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:18:9F:CA:17:92:9A:E3:40:73:CF:86:35:1E:4C:A1:BB:0F:73:F4
            X509v3 Authority Key Identifier:
                keyid:FE:BB:F8:35:1B:80:BE:E2:FF:B6:EF:25:FA:57:F0:87:2F:50:91:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rv4NRuAvuL_tu8l-lfwhy9QkfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c0:ba:93:bd:bd:d3:0d:84:17:a4:b5:49:53:f1:26:78:97:
         05:64:dd:fc:66:85:42:d5:e9:d6:bd:1f:0e:ef:60:cf:7c:49:
         b9:7d:5e:c9:36:67:bb:80:51:cf:00:0f:2c:18:1b:c6:93:9e:
         63:65:bc:34:33:30:44:32:e5:6b:16:58:a7:c9:df:c4:9f:07:
         ef:0d:c9:ad:7a:e5:be:b1:42:2c:fe:64:ae:47:4b:e6:ba:dc:
         4d:01:53:06:c4:b4:65:e2:bb:4c:63:5a:2b:99:08:d2:d5:65:
         4b:38:f3:29:28:41:a2:31:8b:7b:82:f5:cf:29:2f:f8:f8:b1:
         99:95:52:0c:2d:39:60:08:a4:e0:33:5d:66:75:33:6a:ba:c2:
         5e:f2:4b:ed:2b:b9:08:57:05:dd:22:4e:75:db:f2:7a:6c:7d:
         d8:6b:cf:f3:31:43:92:df:a6:61:a6:55:06:1b:39:70:cb:2c:
         b4:6b:52:91:f3:b8:b5:50:b7:a7:0d:10:5d:75:38:1e:91:2b:
         f0:03:b7:95:5f:e7:eb:5c:cb:94:f7:5d:36:bc:0a:74:22:89:
         7f:e0:64:a6:b9:d0:51:ae:b4:d3:1b:15:b7:71:fb:dc:76:34:
         1a:e2:3b:28:f7:ad:3b:7d:04:92:be:15:24:cc:5a:8c:e7:7a:
         b8:39:e1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:49:51 2026 by rpki-client