Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft
File:                     R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft (raw, json)
Hash identifier:          y2fs1dnj9gca+INiEggnfCwznAEKOzlRHKrwwhbpVhY=
Subject key identifier:   1A:57:5E:09:ED:F3:D2:E4:33:1B:24:06:18:47:AE:F7:11:04:51:23
Authority key identifier: 47:64:53:BC:03:6F:43:D5:CB:90:6A:46:8C:5D:8A:98:68:DF:FD:35
Certificate issuer:       /CN=A91918AB/serialNumber=476453BC036F43D5CB906A468C5D8A9868DFFD35
Certificate serial:       3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2RTvANvQ9XLkGpGjF2KmGjf_TU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft
Manifest number:          3B
Signing time:             Fri 17 Apr 2026 08:15:06 +0000
Manifest this update:     Fri 17 Apr 2026 08:15:06 +0000
Manifest next update:     Fri 24 Apr 2026 08:15:06 +0000
Files and hashes:         1: R2RTvANvQ9XLkGpGjF2KmGjf_TU.crl (hash: Sxe+cfNs/R1QEB7R4Jm6Tl9mDR+bsAN6mx2UqssOgFg=)
                          2: 1CCFF4EAE94411F0858458963C6F56BC.roa (hash: zSizwmjwC1EUvKxUhWbJHmVerxHzuPrZmy1ydtzt1dI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.crl
                          rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2RTvANvQ9XLkGpGjF2KmGjf_TU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91918AB, serialNumber=476453BC036F43D5CB906A468C5D8A9868DFFD35
        Validity
            Not Before: Apr 17 08:15:06 2026 GMT
            Not After : Apr 24 08:15:06 2026 GMT
        Subject: CN=69e1ec0a-4be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:41:84:c1:d8:dc:93:8a:e4:07:3f:e0:18:67:
                    12:40:32:3b:26:42:73:1b:50:71:89:17:4c:80:6c:
                    e6:80:6d:f5:18:b0:89:1e:c9:29:d0:1a:4c:f7:4b:
                    9f:2d:fb:0e:96:b0:e8:82:2f:50:4f:46:4c:cb:62:
                    f8:4c:d5:99:07:5b:82:84:03:a5:9a:6a:62:0c:ba:
                    df:83:0b:d2:f6:3a:8e:3e:81:52:67:54:12:31:62:
                    f9:4f:0c:10:4e:ee:09:5e:36:63:c4:ff:bf:76:e4:
                    6d:50:53:dc:db:be:13:36:a6:76:d1:f4:5f:7d:52:
                    87:2d:a0:f0:a2:42:ac:7a:98:bc:5c:6c:a9:0a:fd:
                    5e:8a:c2:14:0b:78:6f:a7:dc:9f:12:0c:7c:07:ac:
                    d4:4a:4a:d8:ed:89:d0:1e:aa:d2:9b:bc:b2:8c:2a:
                    74:5a:2c:41:e6:26:58:7a:44:f4:21:8c:38:06:36:
                    85:d4:65:23:6d:95:11:b9:0f:f7:16:19:f3:57:ab:
                    80:6c:95:ed:d6:04:9c:20:e8:e7:7d:86:1b:5f:78:
                    a4:4e:7d:72:c4:cb:3d:bd:8c:91:7d:41:90:6b:0f:
                    dd:3c:8b:5a:80:75:a4:49:ec:80:c7:1a:02:23:c9:
                    70:1b:49:77:5e:fc:9f:93:10:0f:0a:da:a3:27:62:
                    5a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:57:5E:09:ED:F3:D2:E4:33:1B:24:06:18:47:AE:F7:11:04:51:23
            X509v3 Authority Key Identifier:
                keyid:47:64:53:BC:03:6F:43:D5:CB:90:6A:46:8C:5D:8A:98:68:DF:FD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2RTvANvQ9XLkGpGjF2KmGjf_TU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e7:6f:c1:fc:ca:31:2d:1a:da:d5:55:cd:a0:49:6a:76:41:
         4c:0f:11:94:20:bb:d5:10:69:d2:21:79:69:98:34:09:31:28:
         bf:f6:b0:9a:05:1c:2f:46:0a:e5:d0:5b:cb:22:74:60:e0:f4:
         53:0d:78:4d:13:cd:f8:e1:4d:df:90:42:29:03:51:bb:82:dd:
         ea:3b:f6:58:3c:e2:61:4a:89:ab:d0:3a:56:78:c3:45:4d:d1:
         36:44:56:6c:3c:d0:cd:75:53:9f:40:44:77:62:a9:4a:8a:35:
         c4:78:48:42:23:d3:c0:59:af:f8:ec:61:f4:ed:4b:91:0b:d6:
         01:25:f6:03:49:29:5e:2c:e1:80:ec:5e:fb:9e:64:4f:8f:fe:
         69:d8:78:d7:2a:8f:62:60:1c:f3:cc:58:18:a2:04:47:39:ed:
         3e:70:e8:bc:be:e3:e9:c8:4f:70:cf:ba:3f:94:c5:f5:5c:31:
         98:80:42:7b:30:cf:fb:34:14:12:a1:16:29:1e:77:74:21:3f:
         c5:49:54:ca:11:7f:c0:18:33:aa:92:57:4d:16:2a:da:4b:39:
         92:8c:3f:3f:f3:0f:3b:b7:df:e5:b6:08:a4:86:ec:4f:6f:9c:
         f0:e2:51:b5:e5:07:df:11:3e:a2:32:be:47:d6:43:63:97:06:
         b6:4e:96:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:57 2026 by rpki-client