Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
File:                     nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json)
Hash identifier:          GbQ3EkTBz0c0uOIjYbwTc5zrKLXBbzUVcfb1hJBrO8I=
Subject key identifier:   CE:07:75:97:49:16:03:FF:87:9D:1B:53:0F:33:2E:9C:A7:6B:B4:7B
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Certificate issuer:       /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial:       05B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
Manifest number:          0587
Signing time:             Thu 16 Apr 2026 23:18:21 +0000
Manifest this update:     Thu 16 Apr 2026 23:18:20 +0000
Manifest next update:     Thu 23 Apr 2026 23:18:20 +0000
Files and hashes:         1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: 8QovXQ+qBT0/vMdQ2tf4wrAuaNqUYEH+d8iO6NMuSek=)
                          2: 9E3C65828CA011F0B1F47C12C4F9AE02.roa (hash: Q6qYKHjV9NmhmzxqH8ayk30H8rtTg6j37bugDkJvn/Q=)
                          3: 53B4619407CB11F19B0357131B3D8C67.roa (hash: FE2rPrjsmUgohHBi/GpAcZVW0Hos/Z/JQQ5dDQAETOY=)
                          4: 9EABFF288CA011F0B1F47C12C4F9AE02.roa (hash: xb+uRHoHsQjZ3bcCgpJzZNIAPd4nFn7kpkaspAVlz/c=)
                          5: FBBECF1A694111F08D368069C4F9AE02.roa (hash: HO1DGtNQx+OH3SloGIt02Rz1EoCoy8/3rF9m0kcImEQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
                          rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1461 (0x5b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
        Validity
            Not Before: Apr 16 23:18:20 2026 GMT
            Not After : Apr 23 23:18:20 2026 GMT
        Subject: CN=69e16e3d-1974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a2:d5:51:93:20:c5:74:eb:0d:db:6e:0c:de:
                    2b:2b:8f:e4:98:eb:f6:08:e0:df:7a:98:d6:96:01:
                    3a:50:60:ae:75:9e:65:6e:ea:13:7e:06:ca:67:3e:
                    9b:34:5a:e0:cb:8d:5e:80:35:01:21:ce:4d:88:bc:
                    ee:b0:d6:23:46:be:e9:33:89:3f:72:76:f5:d4:fe:
                    89:e0:05:19:fd:d0:67:84:8d:99:a3:07:d4:d5:e9:
                    14:1a:80:34:24:a1:22:10:86:de:bb:52:a7:a8:79:
                    ec:6d:45:91:89:44:5d:b5:3d:30:e0:2a:4a:fa:83:
                    da:56:39:51:f9:49:83:5b:47:ad:ec:1c:c8:4b:91:
                    bc:47:5a:9f:09:7f:64:4d:f9:a4:57:20:d8:ca:fc:
                    b7:e1:f3:fc:17:be:82:5c:c8:4d:aa:91:00:44:dc:
                    61:97:80:08:df:a6:71:93:19:98:af:b0:27:94:db:
                    96:b6:ee:82:b1:27:ae:2d:87:0d:3d:2d:62:4b:2f:
                    c5:f1:9d:7e:04:b9:9c:4a:b2:32:04:fe:34:61:11:
                    a9:db:94:89:46:a2:93:73:c4:c2:fb:d9:32:4e:39:
                    d5:85:8c:38:ad:ba:a1:9a:98:75:72:49:81:2e:0c:
                    8d:c3:1f:93:5a:60:d9:15:8f:2a:7c:e5:4a:6a:36:
                    1e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:07:75:97:49:16:03:FF:87:9D:1B:53:0F:33:2E:9C:A7:6B:B4:7B
            X509v3 Authority Key Identifier:
                keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:8d:fe:08:e4:60:67:76:3d:b9:f8:44:f1:63:70:52:db:67:
         e4:11:a2:d3:25:c5:1b:49:fa:35:19:c5:82:0b:c8:90:1c:26:
         fd:a3:36:c3:ac:cd:11:1d:ca:bb:dc:3b:8d:43:f0:3d:9e:43:
         62:14:21:07:9f:64:50:7f:b1:27:ce:bb:45:11:45:17:ef:8e:
         d0:2c:1b:65:62:db:d8:4a:9d:2c:29:b1:1c:fd:5e:9b:f3:2f:
         4a:90:f5:ff:7f:6b:45:a8:dc:9c:63:6b:1f:45:5d:0a:8a:4b:
         2c:5d:4e:20:a1:62:81:05:be:40:16:76:d5:ee:71:60:a6:5f:
         a5:4f:4a:87:b7:86:dd:ca:7a:27:b9:a8:2b:89:b9:7f:02:5c:
         22:76:c3:50:36:55:e4:13:04:00:3b:1d:0e:da:f1:82:d5:a9:
         60:24:1f:b1:83:8c:09:4b:59:6f:ee:a5:7b:37:33:d7:df:94:
         59:a8:94:d6:98:16:68:77:bf:1a:c9:ea:f8:8e:d8:db:2c:31:
         d6:c4:c8:2a:53:4d:86:64:57:3c:3c:4e:d8:b5:2e:28:eb:51:
         3f:81:35:57:e4:f2:d6:6b:e5:bd:c6:d0:b4:ff:8b:e8:88:14:
         95:0b:dc:10:cb:c1:c6:05:51:7d:8b:f0:45:a4:cb:6a:b8:1e:
         29:f2:1e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:41 2026 by rpki-client