Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft
File:                     fT3bIK_-cUyPNUllHB7oD1VgEbg.mft (raw, json)
Hash identifier:          Eu6kv3NkkjvREz2CoMhTLQu9LqIJNVxuMPFtzRDEVDg=
Subject key identifier:   74:EF:0C:A2:46:5A:83:12:3B:43:B0:E7:40:47:CE:03:99:16:29:91
Authority key identifier: 7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8
Certificate issuer:       /CN=A91319EA/serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8
Certificate serial:       0357
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft
Manifest number:          0351
Signing time:             Fri 17 Apr 2026 00:50:09 +0000
Manifest this update:     Fri 17 Apr 2026 00:50:09 +0000
Manifest next update:     Fri 24 Apr 2026 00:50:09 +0000
Files and hashes:         1: fT3bIK_-cUyPNUllHB7oD1VgEbg.crl (hash: nMv8xUf63U1XtSg49mUVc6yxaBWwN/+7yWzJl8pJzig=)
                          2: BFD5E8EAF8EB11EC9C39C677C4F9AE02.roa (hash: ogTzdNf1gHD/xTlxA8D6h7pqJeFDXQYw5yT4vowpzqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl
                          rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855 (0x357)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91319EA, serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8
        Validity
            Not Before: Apr 17 00:50:09 2026 GMT
            Not After : Apr 24 00:50:09 2026 GMT
        Subject: CN=69e183c1-e391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b7:02:56:48:cd:4b:d1:46:14:cf:bc:1e:26:
                    df:8e:ab:ee:ab:bb:bb:dc:c3:5e:20:cb:03:c3:7b:
                    6b:2d:1b:f6:ba:f2:7a:78:fb:b5:bb:1e:b6:db:e1:
                    80:c1:1b:57:6b:eb:92:23:af:b8:4b:0a:04:08:d8:
                    fe:4b:ee:87:59:79:79:64:dc:cc:00:4e:0f:c1:8e:
                    88:8c:83:95:ee:f9:70:ac:1f:50:b5:76:15:a8:cb:
                    92:18:a6:26:cd:42:23:c8:b7:14:84:25:9d:bc:0f:
                    d2:ce:79:e8:b9:b4:64:91:45:47:ad:6c:1f:57:6f:
                    de:ff:11:b3:00:e2:01:d8:23:99:d7:f5:67:30:bf:
                    3c:0e:3b:e4:0c:24:35:22:06:86:12:ba:77:c8:12:
                    39:40:8e:a1:d8:84:2d:e6:53:59:47:70:5e:4d:a9:
                    3f:c7:23:b9:ca:64:87:70:e0:ef:98:b3:63:bb:59:
                    53:74:ec:86:ab:50:85:b5:40:3b:c4:84:06:7c:e5:
                    64:44:26:b2:ae:97:3a:3e:e7:fe:0e:f7:fc:6d:d7:
                    1c:4e:db:c4:fa:17:84:ab:0b:4c:82:54:42:c2:29:
                    93:0f:93:6f:4b:92:bc:cd:b3:19:f1:42:f6:6d:b5:
                    e1:dd:80:d4:93:86:35:30:3e:c8:1e:36:67:5e:47:
                    13:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EF:0C:A2:46:5A:83:12:3B:43:B0:E7:40:47:CE:03:99:16:29:91
            X509v3 Authority Key Identifier:
                keyid:7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:40:06:5e:2c:a9:1a:fb:b7:ca:49:74:83:b2:00:7c:7a:f6:
         e4:9c:59:09:18:da:69:23:55:17:ca:f6:92:d9:7e:f3:9c:a7:
         b9:11:0f:c4:d3:d7:38:39:bb:29:fa:fe:e0:2b:38:95:97:9c:
         dd:22:dc:f7:8b:cc:2e:83:51:a0:67:2c:2b:12:08:2c:15:f0:
         05:9a:57:d7:10:03:ba:bd:7f:84:8c:4b:35:68:7b:8b:ac:14:
         5f:90:e7:00:7b:97:f6:82:84:7b:f0:f1:92:96:07:aa:ba:79:
         c0:52:04:02:55:eb:81:e4:ed:17:c3:35:79:b4:96:bb:2a:f1:
         46:12:26:7a:f1:d7:f2:fd:0d:21:0b:14:88:64:96:40:47:34:
         ce:93:df:7e:da:b8:eb:42:1f:da:a9:87:1a:e4:f6:32:9b:04:
         01:07:bc:33:7f:10:97:13:00:f9:b4:92:a0:38:c1:fd:88:bf:
         9b:55:0c:85:f2:04:21:e2:71:7f:21:1a:69:2e:5b:f0:20:08:
         09:9d:d2:18:62:03:58:29:23:83:65:03:73:18:02:d7:f2:c7:
         0d:fd:8a:ae:eb:4e:64:2e:87:6d:71:7c:f2:0a:72:b0:d9:b1:
         b4:9d:f7:3a:c2:79:ed:52:f0:08:1b:c0:05:16:cd:12:8a:b4:
         99:89:04:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:50:53 2026 by rpki-client