Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
File:                     ApdxaY8oNwXUpN4S5XOVhcvrjww.mft (raw, json)
Hash identifier:          gtGPigE8d/+3rr3GVD23O6MOpcAShR66gPm45kF4RxQ=
Subject key identifier:   48:F0:4A:38:4B:4E:09:39:9C:4F:80:A5:F2:F4:FD:B7:21:81:EE:8B
Authority key identifier: 02:97:71:69:8F:28:37:05:D4:A4:DE:12:E5:73:95:85:CB:EB:8F:0C
Certificate issuer:       /CN=A91772FA/serialNumber=029771698F283705D4A4DE12E5739585CBEB8F0C
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
Manifest number:          27
Signing time:             Sun 19 Apr 2026 00:33:02 +0000
Manifest this update:     Sun 19 Apr 2026 00:33:02 +0000
Manifest next update:     Sun 26 Apr 2026 00:33:02 +0000
Files and hashes:         1: ApdxaY8oNwXUpN4S5XOVhcvrjww.crl (hash: bLClqT0kyZJFJjsGKOXQssub/aNKKyhYp2ma41/c9zI=)
                          2: 579B4ED2266411F1AE95FD6DA8833773.roa (hash: Wh6GMEPQbJm2Jl2DMg8rLhNDPE89Mo+plpzmnnXpFTs=)
                          3: 56C55F20266411F1AE95FD6DA8833773.roa (hash: hUJYmbEayh5+7CMHRvgMiSYWtpPReQpF/dZMyCcKu4Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.crl
                          rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 00:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91772FA, serialNumber=029771698F283705D4A4DE12E5739585CBEB8F0C
        Validity
            Not Before: Apr 19 00:33:02 2026 GMT
            Not After : Apr 26 00:33:02 2026 GMT
        Subject: CN=69e422be-c678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:b0:f2:bc:40:ec:d7:3f:8b:bb:96:2b:93:
                    5c:1b:ea:bd:13:ce:1e:3d:b0:63:66:57:27:48:33:
                    74:80:31:a6:a4:0d:16:88:4d:4e:76:82:c4:5e:8e:
                    95:20:21:15:68:32:60:f9:c2:9f:4e:dd:a9:8a:ab:
                    0c:c8:21:f7:78:f7:cc:32:3e:09:6f:a3:86:47:df:
                    d1:14:b8:a0:f6:cb:20:96:0d:7e:f9:67:38:bc:76:
                    ad:f4:ef:41:64:b9:b1:9d:c7:b0:dc:63:e9:03:c8:
                    fc:43:cc:df:da:94:2c:8d:4a:0f:83:71:3d:f0:d9:
                    aa:6a:76:04:e2:e3:3b:4e:64:96:c8:48:2d:1c:4c:
                    b3:e4:15:20:cc:77:7c:21:60:78:92:2a:83:63:ef:
                    bd:ae:0c:77:51:3c:10:5c:6a:c8:0b:4a:77:c5:38:
                    8e:c8:21:58:ce:fc:95:84:e0:d8:a4:53:a3:c3:e4:
                    41:29:ae:08:14:3a:3b:bb:d0:e7:93:c8:62:2d:f1:
                    a2:f4:cd:aa:4b:1f:1d:b7:24:82:d5:2f:28:16:b8:
                    ed:37:f0:1a:b2:2d:74:f0:4f:41:10:23:f3:2b:6d:
                    b9:5f:35:ba:36:56:b5:8b:28:71:8a:3b:7b:02:53:
                    f2:38:bb:cd:0a:d0:93:ba:2b:d2:00:67:a7:56:64:
                    aa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F0:4A:38:4B:4E:09:39:9C:4F:80:A5:F2:F4:FD:B7:21:81:EE:8B
            X509v3 Authority Key Identifier:
                keyid:02:97:71:69:8F:28:37:05:D4:A4:DE:12:E5:73:95:85:CB:EB:8F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ab:86:9d:0b:ba:82:df:f2:64:ba:04:ce:75:47:97:17:f3:
         4d:32:98:47:c8:9b:f4:7d:c3:9a:d7:fa:8a:ed:47:e2:71:9d:
         37:16:bb:de:e1:45:c8:17:9a:f2:a7:4c:98:9a:92:ea:c3:a4:
         cb:82:6a:8b:31:14:62:ca:05:bc:36:76:0c:ba:b2:6a:40:25:
         68:25:f2:30:58:2f:05:9d:b5:59:68:01:ec:0b:d3:a6:b4:70:
         62:21:34:3c:e4:81:bd:a5:e3:7e:42:76:af:dd:56:74:da:90:
         23:08:77:7e:1a:ba:44:23:b8:16:b0:5c:28:e7:fe:ac:e4:91:
         d4:1f:88:01:ad:49:61:c4:a2:8b:e3:df:29:f6:8b:d0:d7:83:
         bf:0a:a1:73:66:2c:8a:27:72:42:50:23:89:04:7e:45:76:ed:
         f0:02:6f:7b:31:ad:ed:84:78:0c:e2:1b:ce:07:63:0a:a8:d0:
         ac:48:ca:48:11:18:54:de:6e:1b:d3:1b:67:1b:37:aa:e2:53:
         91:20:84:37:b2:2b:5f:14:b3:75:09:95:c8:10:00:0b:e9:c5:
         87:15:83:b1:04:4a:6e:64:f6:63:d2:23:a9:c4:b4:c3:d1:98:
         bb:d4:51:45:ba:7c:9b:ac:3f:30:bc:a7:ef:1f:11:92:24:d1:
         c8:8a:3b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:17 2026 by rpki-client