Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
File:                     C_K1lEw6LMq2wdErw2pa88Lc938.mft (raw, json)
Hash identifier:          5hyAkRUqa9w4XUq4iHeIOtTFwSqzS5XiZ3gKJgj5/Vo=
Subject key identifier:   FC:51:D2:EC:B1:DF:4C:2F:D6:E2:D2:70:33:84:2B:CB:4F:38:27:DF
Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
Certificate issuer:       /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
Certificate serial:       0D66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
Manifest number:          0D4D
Signing time:             Thu 16 Apr 2026 17:55:17 +0000
Manifest this update:     Thu 16 Apr 2026 17:55:17 +0000
Manifest next update:     Thu 23 Apr 2026 17:55:17 +0000
Files and hashes:         1: C_K1lEw6LMq2wdErw2pa88Lc938.crl (hash: aJweJIOTL6n9N7FXsHJTd8/3sxamFtgTdHVPEQPNAao=)
                          2: F5660FBC160611ECB3912A7EC4F9AE02.roa (hash: jSGQxP09SiqSKhxNXc5lw5g218RQ1wLEioMxa2d9E88=)
                          3: C981BB3CF36A11E983B1D764C4F9AE02.roa (hash: utJ70W8kwk0UrAZBtfvLLdbnNC7YzT3hBvwvulsC1zU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl
                          rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3430 (0xd66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91473F8, serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
        Validity
            Not Before: Apr 16 17:55:17 2026 GMT
            Not After : Apr 23 17:55:17 2026 GMT
        Subject: CN=69e12285-cbdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:37:92:0c:19:a3:98:28:80:55:b5:e9:1c:84:
                    b9:e6:dd:bd:1c:00:8a:16:b8:01:f2:96:af:15:06:
                    4b:3d:46:30:a7:98:af:59:d7:c6:ec:51:61:b0:46:
                    d7:e7:bc:c3:35:02:be:30:54:21:47:6d:30:8c:b9:
                    3e:aa:91:48:2a:32:6c:e2:e2:d3:ac:43:ec:1c:0e:
                    41:17:ea:b3:69:6d:5e:e6:7f:7a:2b:22:35:74:22:
                    c6:7f:ed:ce:cd:02:6d:ad:9a:24:32:97:32:04:f6:
                    c5:32:fc:78:e5:73:d9:9f:db:b0:ac:80:1a:0b:3f:
                    94:c2:bb:0a:f6:aa:07:88:67:87:87:41:5a:b6:c1:
                    bd:18:8c:23:a9:6e:c6:96:55:ad:9c:08:1c:37:84:
                    15:f1:ec:af:cd:65:65:09:8f:ec:9e:b5:f4:11:41:
                    80:a3:b2:fc:9f:e3:2f:db:48:81:62:37:2b:8d:cf:
                    5e:b7:3a:09:6b:0e:57:58:c8:63:79:6c:c4:8f:2d:
                    3d:1e:65:5a:85:2c:e8:3e:d6:81:d2:13:e4:71:87:
                    49:73:09:9d:d5:32:d8:8c:4a:c0:50:b4:af:21:59:
                    30:3e:ac:a3:f6:14:52:ee:96:aa:ad:91:d9:df:42:
                    be:11:50:34:8b:8e:cf:15:3e:21:0a:9d:85:54:42:
                    db:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:51:D2:EC:B1:DF:4C:2F:D6:E2:D2:70:33:84:2B:CB:4F:38:27:DF
            X509v3 Authority Key Identifier:
                keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:6c:c2:0f:5a:b4:1d:d1:a3:a3:5b:9c:a2:83:00:e7:d5:9f:
         a3:2d:8a:f7:c2:dc:63:11:53:dd:8a:32:d3:f0:a5:e6:a5:57:
         52:7d:f9:a9:d3:68:54:d2:2d:40:cd:80:43:30:00:df:07:bd:
         31:80:87:db:3a:6a:cd:6d:df:d7:df:ff:17:29:0c:88:54:44:
         6b:ac:25:ad:90:f3:8d:3c:91:97:d3:7b:75:a3:d1:1e:f5:aa:
         cf:a4:1c:f9:98:18:91:d2:71:b9:fa:20:26:bc:4e:1d:82:46:
         9a:10:98:7f:fc:61:e2:e4:a4:11:65:08:f6:f8:1d:4b:c9:83:
         0c:da:72:df:ab:0c:44:38:bd:86:0d:3c:70:d8:3e:9a:4e:ad:
         a1:fa:bf:9f:c8:7b:88:70:3c:42:ec:18:ff:92:15:97:19:9e:
         ba:27:4b:02:b4:99:c6:cd:f8:ac:d0:a7:07:22:86:38:43:05:
         0e:2c:48:e7:37:87:2d:c2:35:92:93:48:b7:9f:a5:78:6e:4c:
         2d:41:2c:6a:02:87:66:d8:eb:64:73:20:7b:d2:24:9f:65:65:
         ac:e5:36:e4:c9:14:e3:65:0f:79:b5:7a:60:5b:55:dd:7b:da:
         a7:1d:03:65:3a:22:04:b2:15:a7:c3:b9:26:4b:e2:d2:0e:55:
         46:41:89:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:32:16 2026 by rpki-client