Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
File:                     cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft (raw, json)
Hash identifier:          DyuIF5WEDRVMB+vrRnbw65To8lHfuo64k7dO3a8BamQ=
Subject key identifier:   8F:EC:DA:02:5B:69:12:DF:E6:D1:52:2B:CB:A2:A7:55:06:F1:12:4A
Authority key identifier: 72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0
Certificate issuer:       /CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0
Certificate serial:       01C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
Manifest number:          01BE
Signing time:             Fri 17 Apr 2026 03:33:50 +0000
Manifest this update:     Fri 17 Apr 2026 03:33:49 +0000
Manifest next update:     Fri 24 Apr 2026 03:33:49 +0000
Files and hashes:         1: cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl (hash: KEd0M2Tbc8PtBTQbUwDPH95CYDUyNgCYE0PSH+t9mC0=)
                          2: A4C5164E8FD411EE85082822C4F9AE02.roa (hash: 00LuaUNmIyPdgmkhjWdXCJt4yLwtEm0sc7JiqhVSo/4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl
                          rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91755D7, serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0
        Validity
            Not Before: Apr 17 03:33:49 2026 GMT
            Not After : Apr 24 03:33:49 2026 GMT
        Subject: CN=69e1aa1d-4e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:13:ed:bf:fa:fd:c0:88:cf:a5:2e:32:4f:49:
                    f4:eb:c0:d4:c9:d0:2b:a1:97:1b:b9:a2:f5:22:c9:
                    8a:71:34:94:64:83:61:0f:be:14:f0:f5:85:ea:a2:
                    81:3f:85:51:1a:13:0f:d7:d0:b0:e3:9d:4d:0a:b6:
                    c8:c5:2a:14:cf:ab:ff:0e:4b:10:de:59:ee:37:67:
                    1c:e5:e0:7b:a7:4e:be:14:94:51:65:e6:5a:81:81:
                    5f:f4:a4:71:87:a8:c4:96:18:e9:d3:4b:86:91:7c:
                    9b:df:9d:c9:2a:c0:87:d9:2b:98:15:1e:e6:dc:fe:
                    4b:08:78:7e:aa:c3:b0:d5:05:14:e8:27:8b:3a:34:
                    de:1b:2d:80:2b:f4:8c:d3:c1:c5:d1:cb:0c:93:ef:
                    a0:21:6d:92:8e:8a:b3:f6:49:5c:6b:7e:0d:bb:03:
                    99:40:8c:76:54:0d:81:c0:5e:e4:57:43:c0:07:f5:
                    4f:f9:e6:d6:3c:26:e5:3d:5a:e6:c4:91:1e:a6:38:
                    2f:c5:9f:b9:aa:f7:6e:5a:ce:26:4e:d4:f0:91:0c:
                    cd:63:ac:5f:bd:f4:b8:db:2a:ab:aa:91:0b:91:fc:
                    6c:eb:5e:82:a1:9b:3e:26:5c:01:95:f9:5b:8c:22:
                    7f:11:ee:73:7d:96:45:ac:e4:0c:2d:5a:7b:36:65:
                    e2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EC:DA:02:5B:69:12:DF:E6:D1:52:2B:CB:A2:A7:55:06:F1:12:4A
            X509v3 Authority Key Identifier:
                keyid:72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c8:5d:98:ef:48:6d:f2:a2:48:c3:33:80:e3:05:4e:b8:ae:
         a0:c0:a3:d7:e3:03:8e:39:48:db:61:22:3a:49:ce:9c:eb:17:
         52:82:73:9e:f2:73:00:be:bd:0d:5d:6e:af:38:77:2f:36:b1:
         ae:bf:ee:76:85:03:de:99:12:dc:e9:ac:7b:73:a9:1f:71:9d:
         8d:bc:11:2c:fc:b9:de:3b:e0:ce:99:f2:cd:b1:b3:d1:36:19:
         7e:c9:79:2b:ea:46:74:50:9b:77:96:ce:7a:2a:44:c6:87:22:
         70:52:ee:b9:8c:15:50:84:cf:02:38:93:a9:19:96:f2:ea:1c:
         87:00:18:5e:7d:72:35:78:7a:88:7a:6d:82:85:b5:1e:02:55:
         fd:5d:d2:bf:6c:47:f9:38:ab:38:6e:14:9c:0f:a7:70:ea:63:
         51:1f:db:2b:46:fe:dd:13:53:c1:8c:b3:8d:f1:98:90:43:4a:
         7d:56:cf:8c:3e:8a:4c:c2:16:5f:0b:4f:6c:4b:d8:e0:5e:2e:
         7c:63:4f:aa:3d:82:a1:e8:bd:d2:f8:59:5b:d5:9b:54:5c:f8:
         07:42:86:7a:dd:b8:dc:36:f6:fb:9f:ef:8d:8b:e4:d4:92:ac:
         8a:21:78:24:aa:8b:5b:e7:87:be:b7:cb:04:45:9b:27:e1:4e:
         cc:32:bc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:50:15 2026 by rpki-client