Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft
File:                     aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft (raw, json)
Hash identifier:          P4ZQkNEYxFHCQRqB2iWS8HJM5BdSnEs9i1LK7VWIbck=
Subject key identifier:   51:0C:C7:6B:07:0D:85:52:9B:72:0F:25:90:27:AC:6C:03:58:51:66
Authority key identifier: 68:7F:BA:20:E2:F7:89:17:E0:FB:03:B9:12:B8:C8:56:37:C5:37:3D
Certificate issuer:       /CN=A913B243/serialNumber=687FBA20E2F78917E0FB03B912B8C85637C5373D
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft
Manifest number:          58
Signing time:             Fri 17 Apr 2026 07:50:37 +0000
Manifest this update:     Fri 17 Apr 2026 07:50:36 +0000
Manifest next update:     Fri 24 Apr 2026 07:50:36 +0000
Files and hashes:         1: aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl (hash: zTm8qWqNlKNgpVaetsLcdPNYGHd5UMM0NfuXzR43GIQ=)
                          2: F800618EBBA511F0B0EA597FC4F9AE02.roa (hash: SKL3oSLnK/OGS9FsL+y9x7HH2AFOMsHaA5PqrntVpi4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl
                          rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B243, serialNumber=687FBA20E2F78917E0FB03B912B8C85637C5373D
        Validity
            Not Before: Apr 17 07:50:36 2026 GMT
            Not After : Apr 24 07:50:36 2026 GMT
        Subject: CN=69e1e64d-4f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:09:27:6f:59:a6:fe:c2:7e:34:7e:98:20:86:
                    77:26:51:41:82:1b:2a:34:8c:1e:ee:c0:59:89:e8:
                    bf:62:22:89:9d:c7:c2:30:84:2b:be:85:c7:f7:3b:
                    7b:e4:56:95:72:f8:58:38:9c:39:27:99:b1:69:17:
                    00:06:52:61:9a:60:1d:97:26:60:f3:37:1f:89:fa:
                    29:f9:70:ab:5a:de:41:0a:e8:e6:88:43:c1:c3:d7:
                    f7:4c:14:d1:86:4e:6b:a7:b8:26:76:98:91:fb:b8:
                    1e:bd:a7:40:2f:9c:4f:d3:1a:db:c1:d2:7a:3a:a2:
                    b6:f5:6e:65:93:66:34:f6:03:15:5b:54:bd:c3:73:
                    bc:00:93:2c:e2:ad:03:a6:77:23:91:f6:25:97:e4:
                    ca:ff:86:74:6e:ec:b0:af:e8:39:03:16:c5:87:b4:
                    8e:a5:36:93:03:d7:30:da:c1:86:c2:7b:06:ed:a1:
                    27:77:1d:c2:c8:96:24:97:cb:cd:67:74:23:e8:b7:
                    c2:ec:c4:d1:49:61:e8:36:6f:37:9b:e4:60:4b:3b:
                    a1:39:50:e6:f2:47:52:6d:cc:02:5a:fc:5c:a9:67:
                    23:1d:1c:50:4d:14:58:af:d0:06:f5:f5:ba:4e:e5:
                    a9:d1:d9:07:cf:ea:48:f7:46:9f:67:7d:7f:15:33:
                    b1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0C:C7:6B:07:0D:85:52:9B:72:0F:25:90:27:AC:6C:03:58:51:66
            X509v3 Authority Key Identifier:
                keyid:68:7F:BA:20:E2:F7:89:17:E0:FB:03:B9:12:B8:C8:56:37:C5:37:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:6a:e4:8a:c5:d8:84:81:05:de:7b:1d:c6:4a:6a:d2:9f:b9:
         2b:16:5c:5b:7a:f2:4e:f9:4d:c7:d4:b6:eb:63:86:0f:83:1b:
         f1:36:49:99:f8:25:83:56:bc:52:d7:8d:01:ca:d5:33:07:08:
         c6:03:e1:2a:c2:d3:04:8a:9b:5e:4e:6b:05:03:34:be:38:3d:
         1c:2d:96:79:2a:de:3a:05:46:39:f9:1f:95:6b:ef:2e:a7:1e:
         71:7e:8f:f3:c3:dc:84:1f:09:b4:a3:c4:c8:51:77:50:a0:46:
         6f:53:5e:6f:41:36:2e:43:ae:83:cd:02:0a:5b:52:4b:be:eb:
         4d:b5:b0:d0:42:fc:4a:d8:ac:82:6d:5e:f5:38:2f:29:95:24:
         a8:58:e7:1f:84:4e:e1:dd:1f:2a:b3:c9:14:ef:61:65:91:b8:
         03:1d:62:78:06:55:83:be:81:3d:43:a0:a6:22:d0:5c:a6:29:
         d9:8d:f9:84:15:79:db:da:62:23:70:e2:81:db:03:df:ae:a1:
         e6:b3:ca:06:74:75:11:3d:26:62:e0:a1:48:7c:e8:20:06:d0:
         96:e1:2e:37:e2:db:aa:ef:cf:91:69:1d:a3:0b:c4:96:83:d4:
         2d:e2:1b:81:e1:fa:3b:3f:19:ee:0c:6c:72:1d:4b:99:82:68:
         2e:d9:9e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:44:46 2026 by rpki-client