Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
File:                     piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft (raw, json)
Hash identifier:          u7FaFIxubNaAlc7jF3lIofHqWVy7Zwet8Kh1gm7J8fo=
Subject key identifier:   21:A1:7A:C0:8E:1E:1A:0D:B2:B5:8D:68:F6:BC:D3:F5:8A:D8:E4:FD
Authority key identifier: A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4
Certificate issuer:       /CN=A91878B3/serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
Manifest number:          44
Signing time:             Wed 15 Apr 2026 07:58:42 +0000
Manifest this update:     Wed 15 Apr 2026 07:58:42 +0000
Manifest next update:     Wed 22 Apr 2026 07:58:42 +0000
Files and hashes:         1: piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl (hash: zgBr3BIVrUc8//n8OyA3d5PZM6gugbQTR+TyQNZBdhg=)
                          2: 276AF720D4EE11F09328C93FC4F9AE02.roa (hash: yvWe793LFDv60yfRRzGNrVWi5via5iRanXNLPGkIsZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91878B3, serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4
        Validity
            Not Before: Apr 15 07:58:42 2026 GMT
            Not After : Apr 22 07:58:42 2026 GMT
        Subject: CN=69df4532-74a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:d0:e1:00:7f:23:98:28:b4:f5:a3:e8:d8:
                    6e:7a:8a:0d:03:64:9d:5d:66:26:ae:03:23:0d:a7:
                    49:ea:6a:5d:d5:2c:6a:11:6d:b7:47:e9:76:73:75:
                    63:4f:a1:43:42:11:c7:38:2f:28:8a:4e:c7:87:22:
                    a7:3f:72:47:a0:9f:ff:2d:8f:7d:28:e4:b6:99:eb:
                    a3:e4:77:5c:b7:65:7e:58:ca:b3:e1:5c:b0:2c:a5:
                    db:63:6c:45:a0:81:1a:55:11:42:e6:5d:90:aa:2c:
                    6c:c9:27:32:ff:b6:01:31:b6:e7:44:ac:f9:47:c9:
                    a9:61:74:e3:94:84:01:60:dc:4c:19:dd:3c:47:6e:
                    7a:ee:70:c3:fc:b1:03:3a:30:7c:f8:1b:3c:ca:d1:
                    af:33:0b:98:8f:f7:3a:93:86:7e:97:06:a2:19:d5:
                    69:f5:48:2a:1e:a5:ac:5d:3e:29:54:56:32:c0:a7:
                    13:a1:cf:0c:dd:37:cd:58:df:62:7c:8d:99:9e:0a:
                    58:00:f9:c8:4e:36:ab:b1:3a:32:8d:e2:75:f9:bf:
                    41:c5:cb:e1:46:32:9c:02:9d:e5:94:69:59:aa:b5:
                    e6:e3:97:b1:96:57:6e:14:67:9f:05:75:d7:40:2e:
                    6a:9c:29:8d:a6:39:e2:6b:13:9e:c4:74:4d:41:21:
                    00:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A1:7A:C0:8E:1E:1A:0D:B2:B5:8D:68:F6:BC:D3:F5:8A:D8:E4:FD
            X509v3 Authority Key Identifier:
                keyid:A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:90:ff:f0:ee:1c:62:54:8b:3e:4a:aa:2e:16:ff:60:58:
         3a:3d:e7:e6:90:82:d1:73:ce:90:d4:63:24:f4:7a:fc:8d:ae:
         22:21:97:2d:29:7e:ca:df:75:7b:07:ed:7c:ae:5d:21:a3:3d:
         c6:1f:74:fa:ee:e8:a7:0a:45:c9:af:fc:61:45:be:4e:1b:51:
         e1:a5:c4:92:52:42:84:71:53:80:9b:55:33:c5:00:83:9e:3c:
         16:3e:e7:b5:a7:d2:47:7b:bd:ef:7c:3e:a3:33:01:d3:33:ac:
         79:ac:a5:36:f2:10:7a:3e:c9:f3:3d:e2:00:23:72:3d:9e:99:
         64:5b:b5:9a:fe:b2:6e:90:5d:c6:3d:a1:24:08:d1:10:80:d8:
         23:3a:41:cc:e6:34:f0:8d:31:1d:c3:79:a3:0d:7e:3e:8d:0f:
         4d:b8:b6:66:8c:72:e6:80:ae:51:bf:cc:1b:64:1e:1d:e6:17:
         e3:71:90:c4:08:d8:5d:09:dd:bf:a0:f3:f1:54:62:28:a3:7b:
         39:a7:90:da:da:3a:ec:06:90:22:71:68:b3:bf:c9:00:26:a2:
         69:ae:6d:9c:9b:56:78:15:ea:ff:3d:3b:44:b8:52:41:72:3b:
         55:05:6c:02:24:d1:3b:38:75:ca:56:48:3d:8f:74:9e:31:6d:
         ea:0f:1f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:06 2026 by rpki-client