Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.mft
File:                     V2i_S72Luw3lwVz_jwqRSKCyLtU.mft (raw, json)
Hash identifier:          mZeLRjwnheNiWaFXwFuLTaY9RgglqY9UqDQfnOa+1ec=
Subject key identifier:   3E:4C:0B:BB:15:B0:34:12:2B:B7:85:06:B0:CA:A9:D5:7F:24:C9:3B
Authority key identifier: 57:68:BF:4B:BD:8B:BB:0D:E5:C1:5C:FF:8F:0A:91:48:A0:B2:2E:D5
Certificate issuer:       /CN=A91538E7/serialNumber=5768BF4BBD8BBB0DE5C15CFF8F0A9148A0B22ED5
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V2i_S72Luw3lwVz_jwqRSKCyLtU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.mft
Manifest number:          47
Signing time:             Thu 16 Apr 2026 20:42:35 +0000
Manifest this update:     Thu 16 Apr 2026 20:42:34 +0000
Manifest next update:     Thu 23 Apr 2026 20:42:34 +0000
Files and hashes:         1: V2i_S72Luw3lwVz_jwqRSKCyLtU.crl (hash: qkETI7rJUfObeX+xpfDQzIK+a3rx4xF5hZmyrKXbbJA=)
                          2: CEDA6062150911F1B271807B1E3D8C67.roa (hash: GaJ7HxRYE0+l3L7iJs19B7gCjn2WV0Am/9oj7fC5tW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V2i_S72Luw3lwVz_jwqRSKCyLtU.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=5768BF4BBD8BBB0DE5C15CFF8F0A9148A0B22ED5
        Validity
            Not Before: Apr 16 20:42:34 2026 GMT
            Not After : Apr 23 20:42:34 2026 GMT
        Subject: CN=69e149ba-2f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:95:59:40:ae:1a:85:29:e7:32:4c:db:f8:23:
                    8c:c7:24:62:1e:ca:8a:8a:6f:85:98:8b:1e:66:55:
                    af:86:55:b9:5f:e5:31:64:e7:6f:3a:59:d5:28:32:
                    d0:7f:7c:fd:72:3a:85:a6:d8:42:36:3e:a0:66:de:
                    63:1b:02:c1:b8:dd:f7:f7:be:a4:b4:48:77:7f:d5:
                    33:0e:c6:95:54:99:24:bc:0f:91:55:79:78:f7:e7:
                    9a:37:2c:ea:ca:6d:a4:f8:db:f7:af:0a:d5:9c:77:
                    10:f8:73:40:99:e8:59:ab:68:47:28:98:e6:c2:99:
                    e4:3f:02:92:52:f7:87:96:a4:3f:bd:3d:cb:48:d3:
                    83:29:3a:a8:1e:59:57:af:8e:dc:3a:73:6a:c2:67:
                    d0:54:cd:8a:c5:25:7a:6f:d6:14:5f:c4:8e:4c:a4:
                    28:e5:61:3e:36:d3:dc:92:d7:9d:5c:84:c0:fb:9c:
                    6b:87:1c:19:7a:f3:bd:b7:bf:66:4a:72:45:95:cc:
                    e1:96:7f:06:2b:8e:58:5b:28:d9:d3:40:d7:44:37:
                    d7:bd:c3:ef:60:19:9b:38:ab:04:fe:38:7d:7e:1c:
                    73:db:59:28:f9:9e:20:ae:a9:20:71:0d:46:d4:05:
                    e7:6f:fc:f9:81:bd:97:43:91:9a:87:cb:f2:1b:4a:
                    a1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4C:0B:BB:15:B0:34:12:2B:B7:85:06:B0:CA:A9:D5:7F:24:C9:3B
            X509v3 Authority Key Identifier:
                keyid:57:68:BF:4B:BD:8B:BB:0D:E5:C1:5C:FF:8F:0A:91:48:A0:B2:2E:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V2i_S72Luw3lwVz_jwqRSKCyLtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:11:60:cb:46:52:cd:dc:18:7e:10:41:b8:4e:d3:65:8c:55:
         be:39:10:b5:ad:a6:57:63:bc:0a:4c:6f:3c:f1:a1:b5:e7:a1:
         46:1b:6d:65:35:2b:18:af:82:4e:a8:1a:a8:a4:32:70:bb:0e:
         57:db:04:b4:9b:85:ef:48:11:2b:21:d8:9d:87:48:b1:64:c7:
         15:5b:fe:e2:76:d0:09:e5:66:ef:f0:0e:4f:00:1f:e9:2d:fa:
         74:a1:a6:6d:2e:fa:23:d0:4a:cd:a8:eb:fa:0f:c7:83:aa:96:
         74:10:fa:07:d5:25:82:b5:c3:88:ce:43:d4:8f:2f:8d:e6:3f:
         cf:38:5d:8f:55:dc:11:4e:e9:0c:d7:85:ec:1d:be:3c:90:88:
         a7:8e:6a:bf:4f:ce:44:e9:2d:91:3e:ae:f7:2f:0e:4c:62:85:
         01:8c:44:f3:da:68:ac:b8:8e:4d:b8:aa:e3:08:38:0c:58:e3:
         db:64:76:a7:da:09:ab:0a:43:a3:1a:4f:a3:43:ac:0a:07:cc:
         4d:0f:57:f7:7e:c0:8e:a1:26:96:45:63:58:84:64:1f:c9:5f:
         c4:9b:d3:b4:67:0b:cf:ec:ac:b1:22:82:a5:e2:74:a0:1e:85:
         8f:1c:40:1e:eb:37:16:e5:34:d0:ee:f5:e5:8f:9e:e1:a2:be:
         97:a5:87:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:50:43 2026 by rpki-client