Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
File:                     b35Y0Iljiffn_k6HlapVXVxVUYg.mft (raw, json)
Hash identifier:          XMrHVeDKt+f4sk3ei3ZXtf2H72suvZUS6cmIALE/meo=
Subject key identifier:   02:19:60:FE:14:D3:DE:B3:45:D4:FC:73:7D:32:23:37:1E:96:EB:79
Authority key identifier: 6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88
Certificate issuer:       /CN=A91706E4/serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
Manifest number:          010C
Signing time:             Fri 17 Apr 2026 05:44:11 +0000
Manifest this update:     Fri 17 Apr 2026 05:44:10 +0000
Manifest next update:     Fri 24 Apr 2026 05:44:10 +0000
Files and hashes:         1: b35Y0Iljiffn_k6HlapVXVxVUYg.crl (hash: EMK8dPekHAfkeDh2geUdvAkb/ei1LEsDTOFhoIHP1nw=)
                          2: 31E9AEC6E30411EFBC0C3B2CC4F9AE02.roa (hash: uV8rFDqMxRMdCRvkDEsV2MUMii9vsIlS/hRAm+P4Yu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl
                          rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91706E4, serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188
        Validity
            Not Before: Apr 17 05:44:10 2026 GMT
            Not After : Apr 24 05:44:10 2026 GMT
        Subject: CN=69e1c8aa-9b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:d3:1b:3a:7b:ff:c2:61:85:88:80:b8:6d:
                    7e:5d:54:97:13:5b:9f:34:24:c0:da:7a:7f:29:77:
                    1a:28:5e:f9:98:7d:50:a0:13:86:8a:e9:85:de:a7:
                    e0:66:07:b6:d4:6a:4d:fa:b6:ea:fa:d7:97:a7:84:
                    a8:93:3d:3c:71:25:86:31:e7:cc:6e:01:b9:d5:7e:
                    af:ed:55:65:d4:e8:ed:0d:83:0b:d4:f7:2f:99:78:
                    be:fa:4c:b2:95:c7:3f:f5:13:82:58:6d:0d:64:13:
                    28:dd:74:7a:a8:2a:6d:dd:08:52:4d:2f:0e:e3:8b:
                    37:60:9f:c2:59:d2:5a:84:85:92:9f:c5:d5:26:15:
                    49:e3:90:4e:b6:51:b7:29:0d:33:1a:40:b2:e6:11:
                    59:a8:15:4b:a3:28:68:61:f5:f1:d9:a1:9e:8d:d2:
                    f5:96:01:f3:54:8c:eb:c1:e5:73:c5:dc:8e:81:b0:
                    21:2e:7a:96:ef:31:30:b8:8b:65:b5:06:6f:30:7f:
                    9c:05:58:f3:43:5a:3e:25:dd:29:59:35:9a:82:b9:
                    21:51:87:af:5c:56:d0:17:48:8c:cc:f1:40:46:6e:
                    bd:29:bc:15:6b:db:92:24:90:f4:5c:0a:38:dd:8f:
                    61:cb:d3:84:01:bb:17:31:f2:0b:38:38:a9:a5:f2:
                    59:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:19:60:FE:14:D3:DE:B3:45:D4:FC:73:7D:32:23:37:1E:96:EB:79
            X509v3 Authority Key Identifier:
                keyid:6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:9d:03:29:e2:c6:98:24:f0:e2:bb:1c:bd:40:9a:02:e8:84:
         58:80:8c:36:1b:06:0b:de:13:54:c3:d4:bd:6f:ac:4f:b6:12:
         d0:49:8b:75:cb:91:d8:cd:7d:2b:01:90:06:2c:8a:aa:c3:c8:
         9e:d9:8e:3b:f0:90:fe:83:4f:08:6b:fe:3a:f2:bb:0d:21:93:
         92:4a:87:c7:f6:19:36:c2:91:3c:1b:93:df:fc:9d:03:ba:03:
         a1:a0:4c:78:33:9f:75:11:99:c0:fb:b4:f0:33:ec:a0:52:3a:
         76:a4:55:2c:48:99:d6:7b:d9:d4:15:33:9f:c4:63:a4:31:8e:
         29:9f:f9:ec:27:e6:7b:20:c4:ea:cc:23:cb:14:c7:8e:c6:94:
         19:08:43:11:09:76:8e:8b:61:32:d1:4d:8a:8c:d4:f0:d0:f9:
         02:2a:4b:ce:92:4b:cc:b8:92:8a:68:bf:6d:03:29:36:fb:cf:
         12:ad:13:e8:bc:97:c3:29:b6:42:bc:3f:4f:24:a2:72:ab:59:
         b1:5e:4e:7c:fe:4f:06:1c:7a:41:41:7b:a2:9e:22:14:ea:56:
         22:84:9b:39:7e:88:bd:16:ae:cf:e7:91:90:a0:38:d3:57:80:
         a0:3c:72:64:bc:de:ae:b4:62:74:46:3e:86:50:a5:d3:b7:03:
         31:5d:77:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:15:21 2026 by rpki-client