Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft
File:                     nB5FqAhMMR3VAEShc2BejuPEzJU.mft (raw, json)
Hash identifier:          MenY2PyXnvg2j2EvH2IEQddGxAqnNXoiOOKVQMiFU8U=
Subject key identifier:   5D:43:DF:6D:B1:16:B2:6B:A8:AF:4B:10:33:94:C8:E1:2E:A4:C3:11
Authority key identifier: 9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95
Certificate issuer:       /CN=A91491CC/serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft
Manifest number:          6C
Signing time:             Sun 19 Apr 2026 07:29:04 +0000
Manifest this update:     Sun 19 Apr 2026 07:29:03 +0000
Manifest next update:     Sun 26 Apr 2026 07:29:03 +0000
Files and hashes:         1: nB5FqAhMMR3VAEShc2BejuPEzJU.crl (hash: EbcdWJbEv00STW5JegGxFlw6OUpJIJUa+QMqcYfNm4U=)
                          2: 31E9004E9A0F11F0BC057E7DC4F9AE02.roa (hash: lMXIM574jb3Z0QsqRGCGYyP7C5VSgFPD1a4YIovILSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl
                          rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91491CC, serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95
        Validity
            Not Before: Apr 19 07:29:03 2026 GMT
            Not After : Apr 26 07:29:03 2026 GMT
        Subject: CN=69e4843f-9bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ab:35:57:8d:49:af:f2:50:2f:9b:55:cd:c1:
                    97:7f:7c:4c:5d:26:54:cc:ec:7e:46:a9:2f:23:d9:
                    e3:8a:03:91:1a:cf:e4:d4:d8:b6:e7:5f:a2:df:0f:
                    0f:60:6e:74:d2:20:da:f9:e2:f3:53:40:68:4d:c5:
                    42:14:5e:fc:45:9c:1d:b5:c1:ef:ee:0b:13:47:03:
                    41:c2:0a:11:a4:91:db:55:06:9d:a4:af:7e:80:e1:
                    78:8c:1f:7c:3f:0b:59:59:c9:99:f7:1e:c5:76:53:
                    91:3f:6a:05:a2:f7:75:ad:8a:a3:7b:87:37:70:cc:
                    fa:91:00:e9:48:53:e9:7b:74:5f:2d:14:78:d2:2c:
                    1c:08:47:16:19:ad:a4:5b:28:c4:2f:ec:11:1e:69:
                    92:d7:8f:ef:62:c9:43:c8:2a:d1:fd:5b:a6:7a:74:
                    46:10:d6:9f:cf:ce:09:ef:f6:70:b9:26:da:17:88:
                    ed:ba:0f:45:b8:c4:3d:73:ab:30:59:60:ac:f7:56:
                    7a:81:97:60:e3:a6:0e:2d:48:d3:f0:7b:7f:06:db:
                    0e:b3:3e:6f:77:23:1a:88:6d:29:db:4b:83:9d:40:
                    c7:b1:c5:e1:21:f8:3c:a8:5f:ed:90:bb:fb:30:79:
                    54:94:6e:79:48:04:54:c8:0f:ed:e8:70:34:1b:c8:
                    72:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:43:DF:6D:B1:16:B2:6B:A8:AF:4B:10:33:94:C8:E1:2E:A4:C3:11
            X509v3 Authority Key Identifier:
                keyid:9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:53:ff:22:01:73:6d:ab:55:9e:33:fc:a9:ff:74:28:22:07:
         5d:56:13:1b:86:b0:64:3d:c1:44:5a:c1:eb:e2:87:c8:cc:a1:
         04:58:80:8c:c7:24:1c:91:25:fd:0d:09:bb:f1:1d:28:06:6d:
         91:b4:43:8d:6d:ad:2d:0c:5b:6e:77:d1:3e:68:45:b9:24:ec:
         b6:06:c6:5a:c7:a1:96:a9:0a:1a:ee:7e:e7:30:18:d9:1b:ab:
         f4:db:c4:f7:0e:d6:ec:4e:7e:07:af:d5:b2:00:53:16:39:98:
         f4:86:fa:dd:a5:fa:5b:01:d0:d3:22:1c:b3:12:a3:08:0a:0b:
         8e:12:19:1a:ef:f8:0e:d3:6c:dc:bf:c4:e5:a4:a8:ca:b2:3f:
         1b:26:7b:7a:f3:c3:7f:36:cc:83:2c:ab:ec:fd:14:0a:51:40:
         d2:bd:ed:27:0b:c9:d8:1b:6a:7a:0a:b2:9d:5e:cc:a5:b0:f3:
         d7:be:f7:35:a8:7c:fb:66:57:63:18:2a:a3:b2:6c:37:d2:1a:
         72:e5:00:da:96:89:cb:ec:f4:06:5a:e1:80:a5:cc:02:6b:33:
         c1:69:33:41:90:93:bb:0e:d6:81:90:a3:b5:17:c4:95:16:f0:
         70:0a:62:3b:25:b5:31:8f:1c:7c:ad:bf:f2:49:70:28:ab:70:
         f2:b7:17:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:23 2026 by rpki-client