Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
File:                     AEu7wBxXH6cPIOpEBQBX2dyeutI.mft (raw, json)
Hash identifier:          DFNVssB7rA99c0nkYFEHBb/YsAAXlM+HhJ0DylinAPc=
Subject key identifier:   11:12:8B:7D:CC:77:59:D6:39:F6:B8:47:1A:5B:FA:47:54:7E:60:EC
Authority key identifier: 00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2
Certificate issuer:       /CN=A91326B3/serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2
Certificate serial:       018C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
Manifest number:          0187
Signing time:             Wed 15 Apr 2026 04:08:19 +0000
Manifest this update:     Wed 15 Apr 2026 04:08:19 +0000
Manifest next update:     Wed 22 Apr 2026 04:08:19 +0000
Files and hashes:         1: AEu7wBxXH6cPIOpEBQBX2dyeutI.crl (hash: yg3PZ9fVDKIGGrZG28hDx+cHgjMgolnxwU93Ve4DLcY=)
                          2: C4BA1CE6E69211EE99E71B6AC4F9AE02.roa (hash: MyCVqIOapLAqkPEbtp0lVmBHxbYqY2/3hoqeYDo7nAg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl
                          rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 04:08:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91326B3, serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2
        Validity
            Not Before: Apr 15 04:08:19 2026 GMT
            Not After : Apr 22 04:08:19 2026 GMT
        Subject: CN=69df0f33-8604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fc:1d:39:b6:35:5c:a5:11:09:44:2a:ff:10:
                    71:a6:59:3c:74:c5:94:3b:e6:d2:58:25:6d:24:8e:
                    5b:78:3a:f9:5e:ec:54:b0:b9:2b:f9:bb:1a:91:d6:
                    40:6b:d0:76:4f:69:59:d0:3d:bb:37:9d:00:cb:6b:
                    3e:ae:6b:50:dc:ca:2d:09:ec:de:f5:8d:6e:91:54:
                    2a:1e:bf:c9:21:ef:6e:83:67:cb:22:66:bd:04:ec:
                    20:bd:98:38:85:2e:bd:e2:c7:d3:d9:72:c0:ba:99:
                    09:bb:90:82:d6:48:ec:9d:9a:07:ae:31:a5:fc:9d:
                    4a:00:e4:4f:31:76:94:84:b2:f0:61:9c:a5:77:22:
                    94:76:f7:0a:68:8b:49:b3:00:8c:00:6e:08:77:f8:
                    1f:f0:b7:25:24:97:f8:25:9c:56:b1:1d:b9:9b:c3:
                    47:b4:e6:e0:07:43:36:93:78:89:1f:f0:71:6d:81:
                    bd:22:8d:fe:29:70:2d:74:39:59:8d:94:0e:2d:f0:
                    89:2b:86:78:48:b5:91:fb:c3:16:e8:73:17:48:41:
                    0e:b2:d6:4e:18:36:eb:45:5f:ba:f5:bd:4b:ce:7d:
                    f9:56:ef:03:22:89:34:18:b5:e0:2c:ac:84:ab:dc:
                    24:7f:da:25:82:04:fb:0a:1a:64:71:e7:8e:c0:93:
                    e5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:12:8B:7D:CC:77:59:D6:39:F6:B8:47:1A:5B:FA:47:54:7E:60:EC
            X509v3 Authority Key Identifier:
                keyid:00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:b5:3a:51:56:0f:f1:7a:65:0f:02:8e:6e:83:51:41:eb:01:
         46:c1:03:29:83:f1:3f:66:9a:d8:dc:57:86:8e:65:ad:b5:b2:
         b4:e1:d4:51:e2:50:0d:e2:7f:26:14:d5:8a:1b:54:a3:51:b4:
         9b:54:d6:7d:0f:30:fb:a8:7b:50:59:ef:b1:18:09:de:4a:83:
         cc:53:e9:b9:d5:4e:fc:4d:72:f0:c8:dd:7c:23:d0:31:b1:a1:
         bd:52:f1:69:77:d0:fd:ad:e5:b3:74:36:8b:f4:e4:72:80:54:
         1e:7f:27:92:f6:3c:fa:76:24:9a:33:54:05:86:f5:9c:a6:50:
         08:5a:12:53:2b:de:52:ba:6f:7e:b9:37:13:73:d0:c5:04:7a:
         f0:b1:26:a8:ea:88:8f:87:a4:d6:2c:61:ed:de:6c:e3:6d:c2:
         84:18:41:49:c6:95:58:26:b7:63:ed:21:7c:f3:fd:c4:f7:ab:
         8c:9e:fe:fc:02:bb:94:78:39:9e:37:f7:f8:35:bf:fc:1d:91:
         72:1d:c5:10:d7:a8:22:58:5a:85:0d:41:df:f4:b3:a7:7d:ee:
         82:f3:e9:18:74:9e:6a:39:d3:f5:23:da:a0:0c:7e:e0:49:b3:
         af:c6:29:4d:69:63:c0:b4:89:5c:c6:3a:e7:96:50:9f:2b:fd:
         76:fb:3a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:06:41 2026 by rpki-client