Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
File:                     V1pu0ww3OtQ00VpmXdoudk7Imso.mft (raw, json)
Hash identifier:          naJvNMZTw4qU0jkhQNTXo/KUZKAR8R/kAen0EeX6asA=
Subject key identifier:   8B:7C:46:C6:13:D8:DC:BA:AB:84:95:28:DC:CA:41:9C:18:B8:CA:E3
Authority key identifier: 57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
Certificate issuer:       /CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
Manifest number:          0123
Signing time:             Fri 17 Apr 2026 05:29:03 +0000
Manifest this update:     Fri 17 Apr 2026 05:29:02 +0000
Manifest next update:     Fri 24 Apr 2026 05:29:02 +0000
Files and hashes:         1: V1pu0ww3OtQ00VpmXdoudk7Imso.crl (hash: oIU6ItPt3AMhxFXo0OaGJzHwhKBKwiyS8ef8k13BoMo=)
                          2: 989991AAF7BB11F09FD41D305A6F56BC.roa (hash: pOKR6RPYJCBDx9yeAb7+cdRrRVEgnYySsODYRKurE9E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
                          rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91827C5, serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
        Validity
            Not Before: Apr 17 05:29:02 2026 GMT
            Not After : Apr 24 05:29:02 2026 GMT
        Subject: CN=69e1c51f-6d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6a:3e:69:99:c9:9f:13:c1:6d:49:af:9c:48:
                    13:d8:fa:14:08:cc:94:35:46:61:2f:d6:f9:66:f7:
                    02:69:8f:64:d0:66:7e:95:0c:34:2e:92:7f:22:f6:
                    37:fe:17:1c:87:d9:a8:23:7c:da:13:dc:aa:53:30:
                    1a:0c:00:75:69:23:59:2d:0c:dc:d3:b0:81:38:9a:
                    bb:f9:d9:d4:d5:2a:02:66:60:87:37:21:9e:8e:3f:
                    14:92:ed:3c:59:f3:9e:55:c3:ad:1b:67:f2:56:07:
                    b3:a3:9d:d4:51:b4:cb:ac:c1:07:c8:19:e6:e6:07:
                    ef:10:28:07:8d:e0:32:ef:fe:7e:da:5f:18:50:13:
                    5d:bb:de:c9:5d:46:28:1e:51:6f:46:57:02:f1:cf:
                    a8:cc:9a:26:29:7e:7e:de:7e:8d:c8:56:8d:74:11:
                    1e:50:b2:c1:23:68:7f:0a:e0:8d:78:14:ad:75:82:
                    ea:a2:27:e2:60:a9:c7:69:13:a7:04:c2:9a:99:6f:
                    72:da:61:7e:ba:07:ae:d0:a6:0b:0f:94:4a:40:02:
                    d8:41:11:6d:66:72:1a:d8:f8:96:65:c9:4b:f9:96:
                    39:51:55:03:86:a0:c4:87:ba:b7:5d:bd:b9:77:ad:
                    fb:4c:cf:04:9b:e1:80:e2:4f:37:5d:75:36:a2:f8:
                    28:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7C:46:C6:13:D8:DC:BA:AB:84:95:28:DC:CA:41:9C:18:B8:CA:E3
            X509v3 Authority Key Identifier:
                keyid:57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:46:7e:d9:e9:aa:66:11:54:56:f9:6b:05:95:e8:df:51:7d:
         01:85:f4:47:30:fc:11:a9:78:0a:ab:cb:30:cb:99:0f:b0:29:
         c0:15:53:52:be:f0:3b:b6:a1:65:b6:90:8b:88:cb:45:a0:6f:
         7b:29:0a:dd:9d:d8:fb:ec:06:c5:0b:85:68:75:5f:c7:91:e4:
         41:f3:55:3e:6b:8e:04:fc:48:c8:4e:23:3e:26:4a:ac:30:92:
         03:c5:4f:a2:ed:f9:29:57:47:96:10:86:76:4f:be:a4:76:b2:
         a0:44:70:16:a2:6b:d4:72:17:d1:dc:aa:c9:d7:41:6b:16:bb:
         dc:e1:49:a6:57:78:e3:8f:cb:df:88:f0:f7:1d:c0:5a:6d:61:
         19:36:22:23:54:22:c7:11:1e:79:26:6e:61:de:83:4d:e0:41:
         52:a1:4c:1d:4b:07:b8:5f:e4:29:af:c4:77:2d:57:c3:90:4e:
         38:6a:45:08:29:b4:fd:3d:ba:c0:d5:5b:e8:1e:07:2f:42:46:
         c4:c5:7c:a6:ae:5d:39:d8:4c:4f:0a:d5:95:f4:5a:51:22:d3:
         24:8f:14:fe:3c:28:b0:11:fc:fa:24:52:66:e8:79:d2:16:45:
         bb:ca:3a:69:6e:b3:b7:a7:06:31:89:5f:e0:d0:41:e3:00:4e:
         88:b0:7a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:52:24 2026 by rpki-client