Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
File:                     M_iOrx5M4PGhh31J75fA5_7cA5o.mft (raw, json)
Hash identifier:          DpFTgS9YoLqZacd2/WFczD4C6wVCgXwXK80GMO3j748=
Subject key identifier:   1B:B2:B0:2F:0F:AA:CA:83:10:AA:B9:3A:AA:4F:71:CE:68:0A:7C:95
Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
Certificate issuer:       /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Certificate serial:       054F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
Manifest number:          0534
Signing time:             Thu 16 Apr 2026 20:22:12 +0000
Manifest this update:     Thu 16 Apr 2026 20:22:12 +0000
Manifest next update:     Thu 23 Apr 2026 20:22:12 +0000
Files and hashes:         1: M_iOrx5M4PGhh31J75fA5_7cA5o.crl (hash: P+XtI1qWS19J4UU6ij7Iwd47aQAa0MyghcpFyfWK6eM=)
                          2: 0732C4DC090B11F1B0A6391E363D8C67.roa (hash: Q9fK/HIBESDBwerI+LGeuA1a/3ibrPdtmUfxDWX3vMM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl
                          rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:22:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1359 (0x54f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
        Validity
            Not Before: Apr 16 20:22:12 2026 GMT
            Not After : Apr 23 20:22:12 2026 GMT
        Subject: CN=69e144f4-a375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:98:7d:db:b0:b2:38:46:98:13:9f:b7:7a:45:
                    bb:cd:eb:cd:75:44:e3:c7:6c:ce:05:7d:db:80:7b:
                    0d:c9:2d:06:b0:84:06:98:87:14:7f:32:83:ec:44:
                    57:6f:09:17:db:77:93:18:76:66:ea:45:55:a9:2a:
                    f4:6c:18:9e:fd:47:85:76:b7:44:1b:a6:30:6b:40:
                    fb:53:8a:d7:9f:cc:6f:d4:4d:40:56:a1:ac:f4:34:
                    fb:05:3c:d0:52:81:ea:e9:cf:26:ce:ef:9b:0f:d9:
                    1b:1d:1f:9b:5e:cc:1e:95:fc:95:1d:b7:a5:41:41:
                    1c:86:25:bc:47:6c:f2:e1:2d:85:13:81:33:37:49:
                    2c:31:42:b1:fc:ab:6a:5e:ea:46:67:c0:31:03:84:
                    6f:8c:38:2a:d2:5d:b6:98:b1:7f:cf:98:47:d4:ac:
                    24:49:ed:2b:ce:b5:f5:45:78:65:40:10:79:0b:3e:
                    28:2a:0c:43:69:63:0b:07:ac:26:73:41:4c:9c:19:
                    26:8e:dd:aa:f8:ae:73:71:f8:bf:63:6c:d5:50:8d:
                    74:9f:01:4f:ea:71:44:3d:3d:c3:44:a6:3a:06:ab:
                    44:23:a3:85:bb:22:68:e4:74:df:4a:fa:a8:63:fa:
                    52:af:95:07:a4:21:d3:7a:0e:4b:7d:2c:df:8e:d4:
                    13:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B2:B0:2F:0F:AA:CA:83:10:AA:B9:3A:AA:4F:71:CE:68:0A:7C:95
            X509v3 Authority Key Identifier:
                keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:b5:88:de:a3:d5:e8:ae:a1:3b:75:d9:58:f0:cb:3c:bf:16:
         ec:01:7b:a8:44:69:e3:3f:df:08:83:1a:6a:d8:83:84:ca:6b:
         5f:cb:72:6f:98:ec:c7:aa:f2:40:1a:e5:ac:09:ef:69:68:23:
         5c:e3:4f:e1:78:f2:77:8a:f5:66:68:50:cc:b0:c1:b0:2b:a6:
         a9:5f:1b:d3:5c:56:d2:3c:ea:1b:37:86:bc:fc:18:01:29:ef:
         94:ea:74:fc:9d:07:cb:62:78:6f:ae:51:f0:be:84:6d:d4:ac:
         8d:1f:d8:31:bd:4b:bb:9e:40:55:de:e3:4e:ca:a1:97:2b:dc:
         31:00:1f:2b:58:53:2d:89:18:5d:14:1d:66:39:d4:96:1f:89:
         43:1d:c6:2f:63:28:18:74:1d:13:1a:3e:b6:c5:21:e3:23:9c:
         ab:92:6d:2e:e7:9e:1b:72:05:74:5a:07:c3:ce:8a:bf:c1:1b:
         33:27:fe:84:e2:6d:80:b8:66:cf:91:cc:23:23:0e:5f:de:06:
         83:56:37:93:d2:3f:b4:0c:55:5c:f3:6b:f7:39:0c:fd:6c:b2:
         87:2d:14:43:13:17:55:a5:23:09:4e:28:df:15:4a:f0:d0:00:
         c4:73:4e:8a:42:92:ec:24:46:6e:d5:a7:f5:c3:57:83:2e:c5:
         f6:16:99:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:34:47 2026 by rpki-client