Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft
File:                     _nQHcdbqABLeOHBW-Iy-3TbEqGA.mft (raw, json)
Hash identifier:          uGUkYAZrkea04XvRuAkYARpabzl+ptZGl3QLCECGo8Y=
Subject key identifier:   AE:84:83:7A:F6:08:47:2F:E6:7A:2B:13:A2:86:83:63:64:8B:8B:60
Authority key identifier: FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60
Certificate issuer:       /CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860
Certificate serial:       0220
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft
Manifest number:          021A
Signing time:             Fri 17 Apr 2026 02:34:55 +0000
Manifest this update:     Fri 17 Apr 2026 02:34:55 +0000
Manifest next update:     Fri 24 Apr 2026 02:34:55 +0000
Files and hashes:         1: _nQHcdbqABLeOHBW-Iy-3TbEqGA.crl (hash: GvDQoGJKMK7y1k6wcGFeyFgXXvQDBR4WSPPLXoYTfqM=)
                          2: 37B318C0050111EEAFBCAE7EC4F9AE02.roa (hash: w83Gd1qNybw8NY4qox6lPSa3DzAa4i1Y84/n9D6sf/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl
                          rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91889A4, serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860
        Validity
            Not Before: Apr 17 02:34:55 2026 GMT
            Not After : Apr 24 02:34:55 2026 GMT
        Subject: CN=69e19c4f-0b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:16:b1:31:a6:a8:a2:09:b0:4f:f3:02:19:57:
                    4f:85:a5:2b:2e:5b:b2:45:53:8e:1e:85:68:72:cf:
                    b4:86:32:e7:40:1a:fa:c5:37:10:75:c2:19:71:18:
                    76:4c:b8:57:be:5d:65:de:86:cf:d5:6b:fd:c7:d1:
                    e1:5b:93:9e:22:7d:18:78:18:a4:9f:5f:df:c8:bf:
                    3d:fa:3a:d0:2a:72:3f:22:6e:d8:ee:53:c8:71:20:
                    db:b6:fe:93:62:16:ab:d6:30:61:35:82:2e:58:7a:
                    fc:81:f1:22:5d:56:f1:80:fc:dc:8b:60:33:c3:32:
                    9f:10:dd:05:26:9c:4b:85:fa:ec:38:8a:b9:50:63:
                    fa:75:9c:a6:2f:3c:e3:17:bf:00:3a:0c:80:45:7e:
                    cd:02:43:21:c7:43:2e:ad:b4:98:c3:56:e0:db:0a:
                    10:11:af:75:6c:19:87:63:c6:4c:de:61:6b:4b:01:
                    63:48:f8:90:42:e3:07:71:c2:2c:9b:e8:24:4b:da:
                    5b:2b:7b:3c:ed:6f:5b:9b:49:22:94:01:2b:ff:19:
                    8a:35:be:84:a0:f8:3a:0b:2f:2d:7b:a0:d4:81:4a:
                    eb:5e:7f:7a:75:2e:ad:30:2c:38:36:a6:04:5c:fd:
                    b0:26:32:21:64:22:15:22:42:52:23:63:e6:02:8d:
                    24:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:84:83:7A:F6:08:47:2F:E6:7A:2B:13:A2:86:83:63:64:8B:8B:60
            X509v3 Authority Key Identifier:
                keyid:FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5a:c5:07:6d:fa:fc:59:a7:4e:a3:99:3a:eb:8d:54:f1:08:
         0c:77:c8:e1:be:22:3a:65:5b:56:26:9c:b2:14:d2:ab:bb:0a:
         16:0e:86:97:3a:c6:8e:0e:12:ff:dc:26:68:20:91:ba:08:44:
         68:f4:64:14:b4:a2:8e:f6:ed:cc:b3:37:8e:5a:24:d6:d7:8c:
         d7:2e:14:43:fb:ff:de:86:aa:e1:af:48:cf:b2:f0:ec:a0:17:
         1f:4b:1a:d7:2c:bf:94:b4:55:c7:90:d1:55:40:40:31:ef:21:
         aa:9a:a2:2d:42:88:6a:ea:8b:33:e7:a3:16:87:86:b3:3b:cb:
         ff:fd:da:c1:5e:8c:e7:b6:ee:ea:f9:4c:49:f7:45:c2:b4:3f:
         dd:7f:14:34:fb:72:cd:82:ce:63:8d:6b:ed:bc:75:ff:c0:c5:
         9f:fa:2d:20:18:30:0a:50:b1:30:5a:c5:14:9b:93:ae:a6:c0:
         82:f2:fa:87:63:f0:8e:e9:1a:32:5f:2f:77:f5:77:32:41:c5:
         8f:17:d9:7d:d4:c6:bf:e9:80:78:39:07:85:d2:10:f6:8b:47:
         10:d9:78:13:f6:af:e4:70:48:0a:9d:68:c0:fc:e0:d9:c0:16:
         48:ed:59:c0:2c:de:0e:87:7c:24:29:d0:f9:3f:c1:e2:0c:ac:
         ff:aa:65:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:37:35 2026 by rpki-client