Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
File:                     4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft (raw, json)
Hash identifier:          Qfb8/g45ae52TafHsLdxeR2CxnFKJmLpB8q7QpEyHdM=
Subject key identifier:   96:A4:82:81:C3:8B:50:2F:F6:E8:B4:76:FC:F9:3E:8A:40:77:48:5B
Authority key identifier: E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A
Certificate issuer:       /CN=A91493FC/serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A
Certificate serial:       026D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
Manifest number:          0260
Signing time:             Fri 17 Apr 2026 01:58:02 +0000
Manifest this update:     Fri 17 Apr 2026 01:58:02 +0000
Manifest next update:     Fri 24 Apr 2026 01:58:02 +0000
Files and hashes:         1: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl (hash: /3wqQm9zNkt0fwWMJH2GX2hSuwU/XcXKcVKZbucEeMw=)
                          2: 38702E769AF611ED8D41985BC4F9AE02.roa (hash: nnTjgZ46HqO0Mpo0brQW7RdIt/A/0sbmdcDjLarFt5g=)
                          3: D076B1A49F2911ED937CF05AC4F9AE02.roa (hash: ruF2i3AOGgPYwroRD2rSZSmDfGWURXx0prKXNcqPrNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl
                          rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91493FC, serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A
        Validity
            Not Before: Apr 17 01:58:02 2026 GMT
            Not After : Apr 24 01:58:02 2026 GMT
        Subject: CN=69e193aa-5f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8e:a4:7f:4c:32:42:bb:73:d4:0d:62:81:3c:
                    e1:29:12:9c:b5:dc:60:9b:2d:83:b2:1c:a6:8a:3f:
                    a3:09:7e:93:df:55:e7:34:05:ca:2b:f7:68:db:2c:
                    01:3a:0c:7c:32:92:af:3b:9b:28:90:dd:19:ae:dd:
                    8e:b9:68:cd:42:cf:0b:92:1d:18:de:6c:38:af:61:
                    32:6f:2b:31:b1:f3:34:d5:8f:f5:e6:80:d6:f0:b7:
                    25:0c:f6:ff:75:8c:03:03:88:02:3c:ae:e0:14:4e:
                    32:0d:54:67:b6:82:7d:6c:17:c5:f3:b5:c2:c7:4c:
                    3f:d6:ca:55:e8:ce:99:9e:fc:3c:a7:06:52:59:98:
                    f8:c2:73:21:50:e2:5b:b8:e6:c5:2d:4a:cc:05:e0:
                    8b:18:31:a8:e5:67:80:a5:34:4a:95:31:fa:a0:7c:
                    b0:1d:29:8c:1a:18:f3:83:9a:1b:04:93:92:49:0f:
                    0b:6d:31:01:93:e2:85:b2:71:49:0a:1e:9b:7d:dc:
                    d1:c5:c4:07:67:ba:42:d7:d7:61:91:c2:8a:7a:63:
                    99:a0:29:33:17:51:36:8c:c9:21:d1:f4:c0:bd:af:
                    3a:99:e1:68:27:75:98:f8:99:a6:e6:06:ed:03:df:
                    dd:76:aa:23:8f:df:ab:f7:84:05:3e:6b:09:fb:a0:
                    65:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A4:82:81:C3:8B:50:2F:F6:E8:B4:76:FC:F9:3E:8A:40:77:48:5B
            X509v3 Authority Key Identifier:
                keyid:E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:c1:69:ed:41:3f:ec:2f:c2:f9:26:34:10:82:0a:9c:7a:6d:
         32:52:2e:bc:a7:ea:9b:88:91:2f:77:9c:c1:01:73:c6:a5:fa:
         58:30:87:d3:d4:25:35:f8:12:c0:9c:37:f4:f5:38:96:c6:e1:
         11:92:36:25:51:88:e5:64:56:ba:cc:84:7b:94:84:ee:1d:70:
         d6:17:03:8d:29:6c:c7:a7:dc:de:df:85:c3:99:83:37:2d:ef:
         8a:9a:7c:eb:20:9f:f3:af:8d:fb:ce:a6:dc:da:4b:96:5f:c4:
         78:69:a2:7f:73:13:f5:da:e6:0f:a5:4c:35:49:d2:f9:21:aa:
         3f:2c:8e:cf:a9:1e:11:34:3c:5f:e5:b9:8d:ec:eb:5f:dd:bd:
         12:05:4b:57:db:51:08:17:2d:eb:6b:f8:14:92:ec:68:a1:ef:
         55:53:6e:90:74:84:12:d5:0f:b0:49:2f:b2:72:f1:88:32:ff:
         fc:d7:1e:1e:3c:8e:65:3e:38:49:3c:b2:91:f1:a1:9b:25:b5:
         9d:9e:59:f7:fe:89:9c:ed:25:f4:2f:10:ec:51:b9:0b:d6:42:
         37:48:27:e0:46:f9:6b:92:e2:65:83:9f:97:47:ce:93:d0:10:
         f6:b6:8c:eb:80:fb:ae:2f:96:a8:f7:13:29:3f:df:0c:de:a6:
         64:88:3c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:18 2026 by rpki-client