Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft
File:                     iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft (raw, json)
Hash identifier:          oIPy8tCL3Z2BV4cm5o23zOGfN5Eewhh0Ne7WoEW3DyY=
Subject key identifier:   3F:48:32:7B:97:B0:14:CC:46:19:22:E2:E2:96:CB:E2:A5:23:9E:6B
Authority key identifier: 88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A
Certificate issuer:       /CN=A91376FB/serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A
Certificate serial:       0492
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft
Manifest number:          0485
Signing time:             Thu 16 Apr 2026 23:57:51 +0000
Manifest this update:     Thu 16 Apr 2026 23:57:51 +0000
Manifest next update:     Thu 23 Apr 2026 23:57:51 +0000
Files and hashes:         1: iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl (hash: Qg2NaG5RBDaOaj+EBFSr1EyPDZj4EAVL3KuDMl28RrU=)
                          2: 25C61AECB7ED11ED9CF6A63EC4F9AE02.roa (hash: xofse8Wy66MIstuqq88GIwR6LgO/Bu5HVqHK6p5t5Hk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl
                          rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1170 (0x492)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91376FB, serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A
        Validity
            Not Before: Apr 16 23:57:51 2026 GMT
            Not After : Apr 23 23:57:51 2026 GMT
        Subject: CN=69e1777f-6153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2a:ff:a1:3f:8e:1b:c7:9e:e5:19:f2:44:c6:
                    47:7d:8e:43:71:b9:04:c2:09:89:98:49:df:a7:bf:
                    e5:64:30:ec:0d:13:66:2e:2d:97:c5:95:28:16:e6:
                    9d:90:05:c6:27:0e:33:9d:56:51:3d:60:bd:5d:88:
                    b8:c8:d2:9c:8e:c2:da:2f:da:c4:d9:ed:6d:d0:2c:
                    b5:8b:9a:b5:43:55:d7:3f:c0:12:92:ad:aa:c2:de:
                    4b:fa:be:ae:3b:47:b3:d7:de:c0:b8:f9:9d:bb:7f:
                    88:7e:ec:a1:36:76:47:83:e7:42:29:7e:bd:9c:f0:
                    e0:33:21:8e:67:42:0b:64:30:b2:a7:c2:33:6a:3c:
                    3c:18:e5:59:3f:d6:3a:4a:85:f4:6e:94:90:55:64:
                    41:75:4c:37:e8:52:ed:e5:7b:aa:01:cb:00:13:c2:
                    f7:c9:0c:a0:fb:14:65:4c:13:13:ea:ac:31:f4:e0:
                    76:35:12:80:0a:40:58:52:e0:2d:9a:bb:14:61:c0:
                    7c:95:62:e4:59:14:a8:06:b8:31:24:64:9b:1e:50:
                    eb:3c:02:3d:51:83:4f:0b:59:c0:0a:99:8a:73:df:
                    a6:d8:d5:5d:ea:c0:2b:57:a7:bb:f1:a2:06:e0:c4:
                    c9:93:a9:e9:eb:77:0f:41:18:e4:e0:31:ff:d3:9d:
                    8f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:48:32:7B:97:B0:14:CC:46:19:22:E2:E2:96:CB:E2:A5:23:9E:6B
            X509v3 Authority Key Identifier:
                keyid:88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e7:4b:79:38:f5:c7:38:d6:9b:ef:84:54:15:cd:c5:bb:e4:
         7c:33:fe:6f:04:42:a2:20:3a:1d:ca:2d:0c:c5:c6:e3:89:9f:
         8b:08:1d:ed:a1:97:4f:e6:88:19:73:6a:4a:88:27:53:8f:f6:
         c6:04:3f:d4:c4:54:ac:60:00:74:67:4b:4e:74:df:73:d7:c5:
         2f:f4:99:2a:02:8a:52:86:16:34:07:34:5a:33:ae:c3:7c:23:
         7a:94:32:8a:2b:c9:ee:ed:c5:5a:6c:e9:4e:17:d1:48:22:04:
         7e:81:19:97:bb:7d:09:8d:50:7a:e6:15:69:30:e1:73:93:00:
         db:fb:9a:40:59:a0:95:50:2e:5c:0e:0a:d3:8b:a6:f7:de:44:
         1c:3c:09:5b:af:4e:77:ba:76:28:c1:99:ba:3c:3b:78:34:ff:
         2f:b8:c6:80:1e:65:23:2e:0c:22:46:b0:b3:de:e2:0f:9a:e1:
         bc:a5:b2:fa:26:3c:cf:db:ac:dc:ab:0c:21:9e:a2:63:23:4f:
         8c:d7:31:e4:02:0c:b0:68:f1:ac:d1:dd:01:3e:bc:32:cf:c4:
         44:fd:a3:f5:b0:41:06:dd:8d:ea:2f:43:81:45:38:93:85:5c:
         e9:4a:5f:83:27:3b:8b:fa:9e:7e:38:3c:2c:38:22:d2:1e:e1:
         34:4f:19:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:18:24 2026 by rpki-client