Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft
File:                     OIes3fccvvSnUh2EUe7LrrJRnv0.mft (raw, json)
Hash identifier:          g5cLFz3mzCjvg07OSbfOo4WgonIHu7vi4TPATpJFn7A=
Subject key identifier:   CA:5F:70:4E:E0:09:89:71:0C:11:25:D6:D3:78:D2:30:09:33:C5:8F
Authority key identifier: 38:87:AC:DD:F7:1C:BE:F4:A7:52:1D:84:51:EE:CB:AE:B2:51:9E:FD
Certificate issuer:       /CN=A91778D4/serialNumber=3887ACDDF71CBEF4A7521D8451EECBAEB2519EFD
Certificate serial:       0465
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIes3fccvvSnUh2EUe7LrrJRnv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft
Manifest number:          045E
Signing time:             Fri 17 Apr 2026 00:04:36 +0000
Manifest this update:     Fri 17 Apr 2026 00:04:36 +0000
Manifest next update:     Fri 24 Apr 2026 00:04:36 +0000
Files and hashes:         1: OIes3fccvvSnUh2EUe7LrrJRnv0.crl (hash: 8ws+jf0UJ75SHCUoYtwYn4PKk4OO5J90WIQS5pkou7I=)
                          2: 13F9F650905511EC9A978D19C4F9AE02.roa (hash: 24R9bP8FZGrYS8hzQsfu5XaVnVqMRb0ojEdqSMQzy6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.crl
                          rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIes3fccvvSnUh2EUe7LrrJRnv0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:04:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1125 (0x465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91778D4, serialNumber=3887ACDDF71CBEF4A7521D8451EECBAEB2519EFD
        Validity
            Not Before: Apr 17 00:04:36 2026 GMT
            Not After : Apr 24 00:04:36 2026 GMT
        Subject: CN=69e17914-87b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f7:94:c3:c3:36:7b:e2:2f:6f:f0:65:d5:ba:
                    68:2e:02:7f:4c:a4:74:32:a9:15:19:6d:fb:7c:6f:
                    07:c2:6d:0b:78:a9:5a:f0:f3:da:6a:8d:64:31:bc:
                    e9:38:80:35:2f:98:14:d2:b2:c0:2c:af:7f:bd:ac:
                    0e:73:70:40:a9:e0:a3:78:99:4e:29:a0:b1:4a:74:
                    48:a3:87:f9:73:4b:f3:4b:2b:68:bb:7b:50:20:81:
                    56:2f:71:5f:fc:50:20:55:83:5d:26:7c:fc:4e:b4:
                    0b:91:45:4c:cf:b2:38:fb:54:f3:bf:5f:1f:3b:63:
                    20:31:eb:0f:99:24:a5:82:19:82:e8:f9:a4:e3:5f:
                    78:9a:33:8f:96:69:c7:9b:35:58:83:bb:78:35:95:
                    92:ad:2b:67:71:6d:b8:42:e6:35:30:e0:30:ad:c1:
                    7d:94:95:d1:37:67:1d:98:38:b6:3a:d4:9c:b1:08:
                    47:f5:25:51:56:4f:3b:45:b4:85:99:df:2f:7f:fb:
                    8b:00:f9:71:13:a7:77:0f:75:7f:65:09:d2:b1:cd:
                    49:1c:67:84:fe:4c:20:b1:1c:61:8a:14:3b:38:4a:
                    5b:55:03:98:a5:a9:1b:b8:bd:c8:65:e3:3b:85:b6:
                    03:c7:ed:9b:fa:3d:d7:c3:34:25:95:dd:13:ee:8a:
                    19:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5F:70:4E:E0:09:89:71:0C:11:25:D6:D3:78:D2:30:09:33:C5:8F
            X509v3 Authority Key Identifier:
                keyid:38:87:AC:DD:F7:1C:BE:F4:A7:52:1D:84:51:EE:CB:AE:B2:51:9E:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIes3fccvvSnUh2EUe7LrrJRnv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3b:47:c0:cc:7c:0f:14:76:a2:0d:15:1d:a8:d5:6b:6a:b3:
         fd:4c:08:e1:e7:98:a9:3c:89:77:4e:9e:91:56:ad:7c:5d:6f:
         be:f1:97:8d:50:57:6d:e1:4e:10:27:d5:1d:34:de:d7:ca:5b:
         0e:dd:11:14:dc:34:99:ee:19:69:76:ae:9a:e6:26:a7:c7:3e:
         ed:8d:8a:86:98:2f:03:b7:19:6a:a1:fc:78:85:a4:da:f5:6e:
         f4:35:87:c7:df:07:76:ee:a7:97:f1:a0:d8:8b:e6:ea:da:c4:
         f6:fb:4b:77:30:12:2b:09:0d:d7:1d:e5:7c:84:af:5f:0a:74:
         0c:a5:6e:8c:42:e9:56:2e:0a:5e:01:8a:37:43:91:1a:04:2f:
         ab:2b:2e:4f:ee:96:72:e0:04:bb:08:5c:bc:8e:8b:6a:b6:d2:
         6d:da:19:0b:9b:75:dd:be:41:8d:90:ca:48:2a:2e:57:13:65:
         ce:b0:68:d6:41:99:a2:d7:40:c9:3e:5f:1e:73:64:ca:20:77:
         57:00:71:cc:98:82:a7:58:4a:fe:2b:0e:5a:7d:68:63:fd:9b:
         17:93:6d:12:aa:69:ef:b4:f0:3a:5b:5e:30:73:48:ff:d8:f4:
         47:d1:61:41:70:fe:94:30:68:bc:04:95:65:1e:d2:39:3b:58:
         3c:27:1f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:52:37 2026 by rpki-client