Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
File:                     1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft (raw, json)
Hash identifier:          LPDNfiihS/gWVCeAn6IewH2oYUItwBPw4xzSmaiPfm8=
Subject key identifier:   F7:CF:E5:2C:31:FC:61:03:95:2A:9C:C6:C7:34:63:3E:D7:4A:70:36
Authority key identifier: D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D
Certificate issuer:       /CN=A91174ED/serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
Manifest number:          98
Signing time:             Fri 17 Apr 2026 07:11:08 +0000
Manifest this update:     Fri 17 Apr 2026 07:11:07 +0000
Manifest next update:     Fri 24 Apr 2026 07:11:07 +0000
Files and hashes:         1: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl (hash: zMadhtugybcAA2haOSpHDGQ4yNcRE4KsKbLPjbJwpeI=)
                          2: FE892768620711F0BE75F534C4F9AE02.roa (hash: w6R9tkWMN6zGFTVsCrdtlZOXuO5ohHrK0PqrImTn4O4=)
                          3: E7BD97EE5D9311F0AFF08443C4F9AE02.roa (hash: wMqZyUHwFnm2prR30bhRvxTQaRsk2FAxurhzAGgKS+I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:11:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91174ED, serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D
        Validity
            Not Before: Apr 17 07:11:07 2026 GMT
            Not After : Apr 24 07:11:07 2026 GMT
        Subject: CN=69e1dd0b-5463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:e2:a0:6f:79:d1:84:a1:22:28:4b:f6:d4:
                    3c:4b:15:31:ea:cf:88:cb:a0:14:cb:0b:43:4c:8c:
                    94:a3:77:4e:e2:0a:01:d8:88:f1:dc:cf:2b:a1:54:
                    58:bb:2d:8f:31:ad:cd:79:a7:00:bf:80:48:09:36:
                    d4:41:8f:61:2a:ec:90:8b:fd:d2:76:27:c3:36:b5:
                    47:5e:8a:bd:b1:ce:c0:82:6a:fb:dc:5c:bf:86:bc:
                    72:e7:ca:94:19:43:27:aa:1c:f6:ab:d4:89:6f:5f:
                    8b:37:57:4c:85:29:8c:e8:27:28:b6:9c:0c:ff:c2:
                    35:ff:92:56:af:f7:8b:33:42:a1:58:71:fb:db:3b:
                    d3:24:ca:52:db:4b:a0:33:a8:fc:de:32:f4:62:44:
                    12:bc:e8:3f:e1:8b:54:74:00:0e:80:0e:62:cc:17:
                    36:a0:69:27:ad:65:41:3f:43:79:51:2f:e2:67:37:
                    8b:fd:67:50:04:5d:62:84:31:60:bf:87:82:27:5a:
                    51:a2:55:82:4a:42:67:33:33:66:c4:c9:f3:6b:e5:
                    e2:0f:2b:83:05:05:98:91:59:d2:20:1f:e8:19:c9:
                    73:8a:64:12:a4:06:14:c7:b5:16:14:aa:f6:3f:c1:
                    b0:8b:e7:af:48:93:ad:d5:ec:ae:5b:44:00:01:ab:
                    f7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CF:E5:2C:31:FC:61:03:95:2A:9C:C6:C7:34:63:3E:D7:4A:70:36
            X509v3 Authority Key Identifier:
                keyid:D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:dd:78:2d:f9:8c:bd:b0:e5:34:cc:f0:a4:f5:9c:d9:b1:29:
         eb:cc:f7:77:68:80:e3:82:75:84:45:00:b2:38:aa:2a:08:b5:
         96:0d:42:2c:44:d1:c9:0f:1f:a0:67:60:fe:56:45:8f:6d:6b:
         9b:55:63:c8:9d:ca:b5:87:d4:65:82:41:fe:fa:5e:d2:88:13:
         33:67:f5:89:93:b6:63:9c:e2:68:9a:91:11:42:02:03:1d:11:
         d0:85:8e:0e:73:6d:74:68:4d:7c:7a:5c:46:b9:f1:fa:4b:a6:
         6a:39:8b:d4:22:88:d4:7d:f4:1b:d5:04:d5:ba:e4:3c:63:b8:
         46:20:61:5d:a1:97:82:db:1b:e6:06:48:b0:31:2b:d6:10:b3:
         30:78:ec:04:90:a7:c8:57:f0:2d:90:7a:e7:64:f8:c7:1f:30:
         83:90:f1:27:4f:fc:7c:1e:dd:8f:64:c8:f2:3f:8f:2c:90:10:
         54:bc:44:1c:f8:cc:c2:a5:92:c7:ed:2f:4f:f0:70:76:f8:b6:
         93:57:9d:da:fe:6e:74:44:3c:97:8c:87:8a:bc:00:d3:f9:3a:
         1b:e2:a9:d5:f8:d8:d8:08:20:38:f0:be:a4:ca:5e:fa:d2:cd:
         c9:5c:31:3e:a3:83:42:6f:d8:a5:c2:1a:47:a7:a4:b5:52:c3:
         7e:ec:59:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:09:48 2026 by rpki-client