Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
File:                     rdsr88QYJtbQ--jSvy8FLZil2Uk.mft (raw, json)
Hash identifier:          sDN6vvI3PSZ45aQIhv/icKo4khD1YTk1DdYmW6BkBS0=
Subject key identifier:   23:9E:E0:AB:DB:72:4B:97:2E:A6:B9:B6:11:59:21:6B:22:02:52:49
Authority key identifier: AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49
Certificate issuer:       /CN=A91689C8/serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949
Certificate serial:       CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
Manifest number:          0330
Signing time:             Fri 17 Apr 2026 01:53:27 +0000
Manifest this update:     Fri 17 Apr 2026 01:53:26 +0000
Manifest next update:     Fri 24 Apr 2026 01:53:26 +0000
Files and hashes:         1: rdsr88QYJtbQ--jSvy8FLZil2Uk.crl (hash: pI7+q+sTMuniq0HI2AlzMFacv+l5fL/6fzvB5RqbEuQ=)
                          2: 3BB70A86092211F08BA72686C4F9AE02.roa (hash: n2/dWwwbsPVQvjLILKjQ6cAG3MMBLfAzkKw6aR2yhc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl
                          rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91689C8, serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949
        Validity
            Not Before: Apr 17 01:53:26 2026 GMT
            Not After : Apr 24 01:53:26 2026 GMT
        Subject: CN=69e19296-a92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1b:25:0d:9c:21:1a:0a:38:19:82:c6:ab:d4:
                    39:7c:ae:40:f7:7b:19:e5:34:6a:8d:9d:6d:c9:d5:
                    4e:28:f4:a3:65:42:1a:e7:10:fb:27:3a:5d:15:36:
                    6b:e9:71:c0:44:1a:87:18:d7:9f:73:a5:04:83:da:
                    9d:5c:51:e5:76:d0:8a:fa:3d:fd:5d:21:f7:89:86:
                    be:14:b6:ce:bd:b1:03:45:32:a3:49:8a:f8:d7:5e:
                    39:61:ef:72:b0:c4:11:21:b5:08:06:3c:b5:70:6c:
                    13:25:31:e3:32:96:ab:48:f8:f3:07:64:cc:51:84:
                    58:7c:6f:02:e1:bc:ec:4a:7d:08:4a:43:10:ea:ef:
                    b2:2b:3d:ec:91:e5:c7:89:0e:c9:5b:c6:0c:f7:b4:
                    65:ea:43:d7:85:76:b1:ff:06:6b:dc:d9:e9:6a:c9:
                    39:d7:3d:0d:84:7c:a7:72:ac:e4:cb:b6:25:aa:44:
                    15:63:a6:cf:e0:b4:eb:d3:7b:a3:c7:31:f0:ac:65:
                    eb:75:65:f9:dc:9c:7d:c7:1f:fd:b0:12:90:8e:ac:
                    f5:67:3d:65:be:df:e6:20:e8:b0:8b:d2:99:00:7a:
                    75:93:c7:ff:e9:66:2a:b0:f6:ad:13:73:77:41:4d:
                    d8:3f:dd:98:1c:9a:4d:c0:43:d0:cd:94:f1:fc:70:
                    c9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9E:E0:AB:DB:72:4B:97:2E:A6:B9:B6:11:59:21:6B:22:02:52:49
            X509v3 Authority Key Identifier:
                keyid:AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:e1:97:b8:c6:9e:25:86:77:79:7c:51:78:da:c5:26:55:fc:
         d3:3b:92:cc:f2:16:fc:3a:5c:fc:7b:7a:a2:c2:90:96:1b:cf:
         66:39:bb:5b:2d:a6:6a:69:87:e9:84:88:b6:f9:a3:1b:43:82:
         60:f7:dd:28:7e:21:b5:b8:15:6a:52:59:2f:59:d5:4a:dc:0f:
         33:91:67:49:7b:ce:8c:f3:5d:af:e8:09:2e:ef:a4:dd:08:c6:
         09:b8:d5:14:92:d7:00:8c:32:39:a9:ae:94:d4:64:34:d0:a7:
         ba:37:55:aa:63:8a:9c:22:f1:a5:47:a0:12:57:65:9d:16:26:
         7b:0f:93:6d:06:dc:c6:78:b3:34:1a:55:cf:1d:6f:f8:0f:cb:
         a4:30:de:c4:7f:b3:9f:ac:fc:f3:09:97:15:7f:df:d1:83:da:
         01:88:8a:05:9c:c1:60:74:6c:fa:46:88:57:5a:92:91:0b:3e:
         eb:eb:f4:c6:b9:aa:dc:6b:dd:66:05:a4:dd:b4:47:c2:e9:c7:
         d0:03:70:e4:a1:07:fe:4d:18:76:1d:9e:d2:aa:d4:cc:4e:a5:
         ec:a9:3b:f6:72:4c:a8:f6:33:c0:04:2a:d1:78:8b:7e:78:57:
         16:ae:6f:72:4e:be:1e:c3:82:99:c4:b9:a6:fa:ac:a9:f2:b7:
         b0:b2:5d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:58:04 2026 by rpki-client