Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft
File:                     rgDBosA0KnFSg1RO1ltGGGWC8mw.mft (raw, json)
Hash identifier:          QoFyD+8yhFk80kWZgq5ejJIDCCT0b6Cpd6WkNDmIOd4=
Subject key identifier:   D1:B2:DE:53:33:5C:FA:D9:A2:5A:40:14:F2:C4:25:25:C7:54:F5:9F
Authority key identifier: AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C
Certificate issuer:       /CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C
Certificate serial:       09B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft
Manifest number:          09A0
Signing time:             Sat 18 Apr 2026 19:51:35 +0000
Manifest this update:     Sat 18 Apr 2026 19:51:34 +0000
Manifest next update:     Sat 25 Apr 2026 19:51:34 +0000
Files and hashes:         1: rgDBosA0KnFSg1RO1ltGGGWC8mw.crl (hash: acJImhxV2YbXY/txK4PhLZV6RSAcY0klndKc1Q05Nv4=)
                          2: 84FDF6D0AABA11EABB84756CC4F9AE02.roa (hash: QVfdEdXCocoSVGgWS+Yl9hl7mgDFeG4r0nSsOh9ZTOM=)
                          3: F99F89E2AAC211EABF603A0BC4F9AE02.roa (hash: PQw146eyKjPqxP/GNGS/hIkUi+lf/ZqFvVQElnQS1VQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl
                          rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 19:51:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2483 (0x9b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91866D6, serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C
        Validity
            Not Before: Apr 18 19:51:34 2026 GMT
            Not After : Apr 25 19:51:34 2026 GMT
        Subject: CN=69e3e0c6-1e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8c:81:84:dd:85:2f:0b:08:b8:d4:ab:2b:7e:
                    cb:f3:ee:5c:64:53:14:00:d6:4a:f0:4a:a9:b7:fd:
                    d4:88:fd:89:30:97:82:39:c7:17:7a:41:ad:eb:32:
                    c7:0a:f2:c6:32:78:b0:96:e9:f9:82:f0:89:32:b1:
                    cb:45:7b:8e:2c:17:db:0a:e2:d1:b8:3d:8d:77:05:
                    40:b9:ff:4e:99:11:a6:be:88:cc:a9:39:18:9f:1c:
                    74:5f:9f:d9:b0:af:92:7c:d7:dc:38:d8:e0:64:bd:
                    bd:1b:16:3b:b1:15:c0:4b:be:98:08:22:27:cf:64:
                    94:00:ab:49:78:da:9e:96:6b:55:01:1d:b0:61:bd:
                    c4:97:22:02:c9:38:66:55:2d:e5:07:e9:56:cf:4c:
                    41:1b:61:44:84:61:20:83:be:33:70:58:8c:87:70:
                    3b:2d:20:bb:ee:83:23:8f:0c:02:90:c5:f4:7e:b2:
                    ca:ae:9b:5d:e4:a1:94:7b:b6:c1:f4:e4:41:2f:92:
                    dd:fb:66:92:0f:a2:9d:d4:53:01:f5:39:2a:07:c0:
                    4a:62:66:b3:1a:c3:87:46:82:db:cb:b9:03:89:94:
                    d8:d1:fd:19:f2:4b:44:a7:ab:8f:49:00:2c:6e:0b:
                    d6:4e:b1:77:ad:df:74:8c:2e:9e:7c:00:80:d6:30:
                    df:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B2:DE:53:33:5C:FA:D9:A2:5A:40:14:F2:C4:25:25:C7:54:F5:9F
            X509v3 Authority Key Identifier:
                keyid:AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f2:44:1e:b7:e8:12:03:d1:a0:3c:24:fc:7a:be:dd:41:ca:
         80:bc:8b:4a:6d:bc:72:65:c6:6b:87:e5:cd:c1:d4:23:62:e1:
         05:57:c1:9c:31:c7:f4:54:4b:9c:d7:92:96:a3:a2:89:ce:cb:
         f7:e5:e9:33:3a:63:44:c5:2b:75:68:90:31:41:a2:5f:ad:6e:
         3f:b9:38:f8:c6:2c:23:b6:b3:5f:4e:be:fa:18:46:ba:40:60:
         1a:66:4d:18:91:6b:a7:d9:ba:a5:02:bf:0a:03:80:30:ea:64:
         2e:57:87:52:28:82:48:46:d7:32:02:d5:0d:f5:fc:48:a3:19:
         8b:09:6e:df:4d:26:2a:97:31:40:d1:ba:ea:f7:08:bc:19:75:
         44:0e:70:72:2b:99:dc:51:3a:f1:50:be:74:05:51:20:a8:36:
         54:a7:ab:73:eb:be:45:e1:dd:30:f2:01:cf:07:d0:6e:e4:d0:
         17:a5:8a:85:2f:68:7d:e9:97:e7:3f:c1:c0:ac:9c:20:ec:55:
         7a:c8:5b:59:07:8d:06:d4:37:6a:6c:26:30:27:52:17:91:3e:
         46:81:53:ba:2b:93:a4:1b:ed:30:91:cd:e6:2a:05:c6:5b:9a:
         51:74:00:fd:5b:55:0f:6f:26:10:e7:5e:75:45:6f:a3:b2:62:
         0b:85:59:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:00:53 2026 by rpki-client