Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
File:                     _TtO-PebCuEn5x5LbBhp2Bsi6IA.mft (raw, json)
Hash identifier:          W4M+7Ks5Ur7mnuwM5Vu74eWL2kCwGybf5kGu0EQyPgc=
Subject key identifier:   6B:19:70:02:0F:50:7F:53:AF:45:52:D8:84:1F:B7:1A:46:91:BA:BA
Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80
Certificate issuer:       /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880
Certificate serial:       11CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
Manifest number:          0F5E
Signing time:             Sat 18 Apr 2026 18:42:57 +0000
Manifest this update:     Sat 18 Apr 2026 18:42:57 +0000
Manifest next update:     Sat 25 Apr 2026 18:42:57 +0000
Files and hashes:         1: _TtO-PebCuEn5x5LbBhp2Bsi6IA.crl (hash: lkDEXQ07au/YUNHYtgo+hAJUYVD4qjjFhY/RXYqb0PM=)
                          2: A40DF2FC959211EE839DCE49C4F9AE02.roa (hash: FjzFovZu6aXM8z/dlqSuAPqXLgKsrC/1lTjiwdyZmIg=)
                          3: 1930A6C2DE1411EA9309134EC4F9AE02.roa (hash: 3wvmSVm24Be4PT+QoB6fmiVi8khIAb17IJdvXSMd/Sk=)
                          4: A547705AF34A11EFA7A4C071C4F9AE02.roa (hash: BkPr25yKFO4OSu24mLv1IXHgIlBp7q8A5b/1fep419U=)
                          5: 52DDE6AEB97F11F085A49519C4F9AE02.roa (hash: bnegwZlpwrUjpNt+bkfeBbC7neEcLC/n9ASWauGsONI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl
                          rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 18:42:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4555 (0x11cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91620E0, serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880
        Validity
            Not Before: Apr 18 18:42:57 2026 GMT
            Not After : Apr 25 18:42:57 2026 GMT
        Subject: CN=69e3d0b1-6539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:f5:3c:c4:31:a0:cc:c1:49:70:d0:c3:70:
                    95:87:42:61:21:84:44:de:7f:4c:09:75:b1:6d:22:
                    a5:65:fe:d1:2c:8f:cf:48:08:e4:9a:3d:dd:98:56:
                    96:fb:12:dc:96:55:f9:bc:65:6c:c7:b3:c2:0c:ae:
                    0a:5b:e1:d5:39:cc:1b:50:d7:62:dc:c1:f9:1d:f0:
                    a4:f8:cb:76:7a:0a:cd:8e:c0:85:96:54:7d:f6:87:
                    77:46:04:c0:50:b3:b0:15:13:9b:8b:29:dc:17:c0:
                    bc:8c:34:cf:54:fe:6b:df:43:8d:af:67:fe:18:a3:
                    b3:8b:f4:5a:5a:4c:88:94:06:65:26:00:ef:5e:19:
                    33:5d:7f:d8:a8:30:85:44:7f:e3:a6:ed:10:52:5c:
                    38:0c:23:8b:7a:ed:c8:9e:28:51:5a:9d:67:2d:34:
                    a3:07:15:08:7e:15:d8:b7:74:b8:3e:45:65:e6:6a:
                    e1:48:92:59:6d:89:a7:0e:5e:8f:2b:23:3f:4a:ef:
                    d9:ea:ab:5d:2e:8b:3c:43:44:8c:1e:c3:61:93:a4:
                    e3:7b:ed:43:59:03:fb:44:a8:7d:48:be:42:49:ac:
                    6c:b1:68:5b:27:e2:f0:6f:b2:03:90:88:6e:d5:82:
                    23:93:d3:06:1b:1d:c5:30:0a:db:5f:be:86:f7:fe:
                    fe:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:19:70:02:0F:50:7F:53:AF:45:52:D8:84:1F:B7:1A:46:91:BA:BA
            X509v3 Authority Key Identifier:
                keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:03:dc:31:82:ff:a3:7a:1c:39:26:cf:c6:d0:26:41:21:3c:
         3c:89:9f:a2:e3:7f:ec:b8:5b:76:c5:7c:0c:c6:d9:0a:dc:ae:
         e3:c9:89:97:ae:91:62:5c:f2:3d:1e:8a:59:c9:dd:13:49:64:
         ce:9f:03:44:f4:c9:43:87:ea:9b:36:45:c5:a0:0b:3a:62:c4:
         5a:36:81:f7:e7:97:54:6c:7b:66:bc:9a:09:f7:4b:a0:cb:4e:
         35:b6:36:44:81:19:18:de:02:39:b3:12:89:f9:92:99:e8:91:
         ac:f9:9c:90:8a:5f:b9:3b:12:f0:a7:0a:13:1e:13:cd:59:e3:
         e2:e4:79:d9:4e:c0:cc:57:d1:c5:82:4e:65:71:7c:6f:e2:4f:
         b7:fc:71:84:7b:35:43:d5:a2:22:fd:c6:d1:76:a4:46:5d:4b:
         da:08:88:dd:cf:12:39:9d:13:44:da:e2:25:b9:ce:1f:f0:fb:
         2f:fa:a3:3c:6f:bd:d2:cb:c3:0e:99:d6:81:49:6f:6e:f0:b2:
         0c:a2:06:87:f9:4b:5a:b8:cb:87:92:70:44:b6:e3:49:7b:5d:
         0e:0c:8d:77:22:e1:83:df:39:ca:0c:d4:dd:c3:56:ac:7f:6e:
         31:ed:5e:0b:c4:59:30:38:8d:50:d0:a7:08:e4:eb:34:05:c4:
         39:bc:ea:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:15 2026 by rpki-client