Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
File:                     Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft (raw, json)
Hash identifier:          hIWmrt+TW6l6cq3U86zbJrU2LrpBI4jLTGRQubNhpVY=
Subject key identifier:   CE:84:3F:8D:CD:85:B2:DE:23:54:CD:EC:50:59:23:93:EE:31:89:BE
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       120D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
Manifest number:          107E
Signing time:             Thu 16 Apr 2026 17:29:01 +0000
Manifest this update:     Thu 16 Apr 2026 17:29:01 +0000
Manifest next update:     Thu 23 Apr 2026 17:29:01 +0000
Files and hashes:         1: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl (hash: HjYD/w4jpp6MCcKUNVEs2bBzK5PVgT45WIUpQF2lgkE=)
                          2: C2356A948FE811E98B967A66C4F9AE02.roa (hash: Spu6ueKiAix7Vx1bbz3QuH8zuY42SfhsOYEFzJ/3W4o=)
                          3: C4A85FD48FE811E98B967A66C4F9AE02.roa (hash: Yra/cySrBt0zcZ3P5GOXeK6swd+KmGvdWYxnM5VydGA=)
                          4: 8224E55C345F11F0BD514C6CC4F9AE02.roa (hash: k1IfgBcHOoF2DvAmPhMFiueaAUbhFvWp7b5AsEN0aGA=)
                          5: 5C4E5A6EB9E511EB9717B256C4F9AE02.roa (hash: wW2NNDoiiggQLts6yoRWeEta8EfkfmkpuQXd4IRvuj4=)
                          6: FD5158C044C511F0ABA4E977C4F9AE02.roa (hash: jAhN4tezvJPwZDVpGZejWw4TU5H1Av+GZW6zZMmb67I=)
                          7: 71043990C4D811EA88E6B21FC4F9AE02.roa (hash: SwqLx1ykNlWfnGxIgnnplctUN2Uh69BTnr1sDfxJRlM=)
                          8: C435900ACF7C11F0AAC14644C4F9AE02.roa (hash: m9D73VL27f9lVIbOReJ6AOP2zRgFJFj+KEXEimjyt7I=)
                          9: F3011EAAB88311EBB2078C50C4F9AE02.roa (hash: RdnFjFlQSbXhKdwY5kMqtzBzkUycrU7RuwuLidB948U=)
                          10: C3BEAC38CF7C11F0B0EB4644C4F9AE02.roa (hash: 0xacdRxIlt6XlMYC4ytgm5Wnpkb/XtvJrzfDYrQNkow=)
                          11: 2A4EE13E7CFD11F08A91EE21C4F9AE02.roa (hash: VlAWA5/d+uBjOMZi4UPagGvqPim5oPM3SxEdySpg39I=)
                          12: B969078EB94B11EB8CFABC23C4F9AE02.roa (hash: KmEu0JXVBtwzMz7EetZKwa8KqrgE2kj5+Y9cCaXraFo=)
                          13: 50D040327CFD11F0B32D4522C4F9AE02.roa (hash: J+oM/GM4p3/6d6pclXs1NjnCH5p34XNUGcl5IM3ZZ78=)
                          14: 49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa (hash: t0lrWYbEsDKRavSA+NYxahXVuuhYWwqHsIgE48/DyB8=)
                          15: 9394D360345F11F0AB96776CC4F9AE02.roa (hash: Dy3vf2brgO7ffq8geCJNrRWY4aeeqFaFWyK7H7SMUrk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
                          rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4621 (0x120d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Apr 16 17:29:01 2026 GMT
            Not After : Apr 23 17:29:01 2026 GMT
        Subject: CN=69e11c5d-8899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:30:3c:44:a6:ad:0b:9c:08:19:07:47:05:6a:
                    62:eb:9a:22:e1:86:53:97:96:1e:10:81:64:7a:7d:
                    a6:6d:0d:67:00:e3:7e:d6:80:fb:13:4a:98:5d:f0:
                    b2:9c:98:d4:d1:46:07:d5:56:d0:15:26:0b:40:74:
                    6c:da:d9:19:06:fe:f7:f3:bc:19:04:63:4a:9c:1b:
                    d7:1d:3d:aa:74:66:d2:a6:29:97:4d:32:f7:1a:a7:
                    8b:6f:cc:83:c7:a0:97:32:51:3e:f0:5b:a2:41:86:
                    2b:cf:74:53:be:08:c8:e6:47:44:d0:58:49:53:60:
                    5e:f2:80:47:36:41:fa:69:78:e0:9c:a1:f7:45:97:
                    23:12:e0:fb:ec:a9:43:7e:ae:d8:7d:e1:4a:fa:5c:
                    a4:7c:38:2f:1e:47:91:80:00:22:42:9c:70:49:8f:
                    5c:82:f8:bf:89:c2:92:58:2b:0d:12:31:a1:65:93:
                    1c:65:c8:f9:3e:70:b3:d2:bd:09:73:70:61:1a:e2:
                    9e:20:d6:07:f2:1c:70:b4:67:33:cd:96:70:58:b6:
                    7b:49:d8:a4:33:46:77:e7:ee:4e:96:78:01:61:fe:
                    67:8d:68:64:a1:a7:73:5d:a0:c7:26:da:6d:e9:5b:
                    75:bd:07:7f:70:34:3c:57:5d:da:47:89:d2:d2:c0:
                    ef:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:84:3F:8D:CD:85:B2:DE:23:54:CD:EC:50:59:23:93:EE:31:89:BE
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b5:4a:75:38:cb:8f:dd:40:5f:a5:37:9f:99:89:a0:4a:48:
         de:b6:9f:dc:c3:fe:01:07:52:4c:65:53:e3:34:af:42:c0:0e:
         ed:1f:9a:b9:94:22:4b:a2:f4:ef:36:56:6d:89:14:f2:95:a4:
         dc:2a:5d:02:49:d1:65:d5:11:c8:3b:07:35:78:b4:0f:3c:aa:
         27:7f:89:3e:21:6e:2b:2a:a6:22:f8:79:e7:1a:de:f7:96:03:
         bb:4d:16:3f:2c:35:c1:11:d3:c0:d8:62:e6:2f:bf:59:92:6c:
         21:18:fd:7b:4e:34:91:6e:ba:a2:9f:8e:15:ef:9b:c2:b8:cb:
         17:2a:cc:a3:f1:8a:d6:bb:b7:3b:37:2c:a1:5a:89:84:36:7f:
         a6:a0:45:90:70:9d:c8:38:6c:76:65:ff:d9:3d:80:2d:dd:79:
         0c:9b:8a:bd:e6:5b:20:2f:d2:75:dc:b0:53:29:90:f0:1c:eb:
         00:08:99:0d:c2:a3:2d:10:16:5d:c4:bf:9b:62:c8:24:ae:e8:
         38:c6:1c:ae:6d:4d:71:7c:f2:f8:a8:1b:f6:84:cf:fd:f3:8c:
         9d:a4:b2:09:31:db:6a:af:7a:a6:b6:31:d4:4c:b1:8b:11:75:
         9d:55:4a:40:af:a9:7b:83:4d:6c:88:7f:21:bc:2c:b0:dd:6a:
         40:0b:a8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:57:03 2026 by rpki-client