Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft
File:                     CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft (raw, json)
Hash identifier:          oEz1Wizll0zy8t28CBkYd1S/AtHwl0xjm4HdPJANTlo=
Subject key identifier:   70:EF:74:37:57:C8:21:B8:AE:D0:D7:5B:C9:E8:41:69:D7:C8:5C:A4
Authority key identifier: 09:11:E9:9A:AD:F6:64:F0:39:92:9C:AB:BB:48:74:A3:A1:61:CA:AD
Certificate issuer:       /CN=A91937EA/serialNumber=0911E99AADF664F039929CABBB4874A3A161CAAD
Certificate serial:       0747
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft
Manifest number:          0743
Signing time:             Thu 16 Apr 2026 21:38:31 +0000
Manifest this update:     Thu 16 Apr 2026 21:38:31 +0000
Manifest next update:     Thu 23 Apr 2026 21:38:31 +0000
Files and hashes:         1: CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl (hash: YFVuU9/BpWVKLMpLGu7OpMOmHRLx5YBd+zNm82sOpfg=)
                          2: 8C78A208009911F18C66F2A2636F56BC.roa (hash: OwjvTZwLM59M2Gz+ZjeNWWD2TR8A5gAMx3HNPkuDJ40=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl
                          rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:38:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1863 (0x747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91937EA, serialNumber=0911E99AADF664F039929CABBB4874A3A161CAAD
        Validity
            Not Before: Apr 16 21:38:31 2026 GMT
            Not After : Apr 23 21:38:31 2026 GMT
        Subject: CN=69e156d7-6ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:29:03:f8:e0:5a:af:f8:fa:e4:60:78:f8:5e:
                    57:b8:17:b1:a6:25:62:05:52:f2:d6:20:28:dd:ba:
                    e7:cd:fb:72:41:19:96:be:cc:26:c1:79:8f:44:16:
                    71:ab:02:3d:27:e3:f4:7b:4e:4e:97:f3:4c:58:93:
                    f9:4e:3d:b5:08:67:b7:7d:ea:57:a3:53:a8:65:30:
                    86:89:25:d4:40:89:f4:b9:20:b1:e7:a2:dd:e1:89:
                    11:8e:c2:a9:0c:11:d6:db:b6:5d:85:f9:7d:78:2e:
                    ab:64:62:93:1f:5f:8f:3e:93:76:58:64:f8:aa:86:
                    ef:af:74:be:7b:73:30:39:95:f7:17:a5:ee:8c:50:
                    7b:79:04:3f:09:69:85:df:24:7d:20:0c:87:2f:7e:
                    b7:47:16:52:e2:f5:b5:67:1a:fd:bf:f9:0f:eb:ac:
                    14:26:53:39:bb:d7:75:30:cc:a7:14:c8:89:bb:eb:
                    05:c3:65:4d:83:1d:8f:77:3c:da:74:8e:8c:0e:72:
                    a5:93:b5:f9:7a:87:87:6b:5c:c3:76:b8:9d:12:2c:
                    7a:ac:64:16:56:8c:80:f6:ba:1a:e5:94:bc:9d:e4:
                    f9:6f:c6:12:09:b9:20:06:4a:fe:69:df:92:e2:3b:
                    b2:91:da:85:ee:3e:16:75:19:e0:a4:bc:89:2d:aa:
                    4b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EF:74:37:57:C8:21:B8:AE:D0:D7:5B:C9:E8:41:69:D7:C8:5C:A4
            X509v3 Authority Key Identifier:
                keyid:09:11:E9:9A:AD:F6:64:F0:39:92:9C:AB:BB:48:74:A3:A1:61:CA:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:f7:7b:2f:7f:f9:84:a0:5b:12:ef:2a:b9:f0:31:ea:9d:b4:
         85:e1:9c:c3:66:7a:6b:13:86:d7:e4:9f:4e:ff:85:61:8b:4d:
         b2:14:ce:ab:55:d6:95:23:3b:37:69:30:78:96:cf:f5:d7:4c:
         e8:35:b2:f6:39:cd:8c:77:d6:44:18:7f:a6:b4:10:d5:59:d6:
         3d:cf:9c:fd:39:fb:29:30:d6:9a:6e:1c:2c:da:00:db:e6:64:
         4a:b6:06:e3:c4:c3:17:45:11:49:fb:d5:ab:bd:16:35:31:24:
         de:14:ca:b2:d4:06:cd:af:a9:0b:a4:80:d2:67:80:ce:02:6a:
         a1:56:47:61:9f:7a:d5:d4:63:95:ff:b2:85:6b:b5:bf:85:f8:
         01:d0:5c:15:93:6a:2c:7e:88:12:6a:71:b8:69:2c:70:b7:5f:
         6c:9a:71:30:d1:68:0d:fd:af:08:41:1f:c0:21:8a:ca:07:bd:
         d8:22:89:43:d2:a8:d0:be:b7:5c:ec:d4:dd:e6:32:1a:12:de:
         68:3f:af:06:6e:5a:a7:9a:b7:87:d1:f0:40:0a:ce:81:35:87:
         3e:a7:8d:62:c2:e2:d7:48:46:e8:a7:79:84:00:22:62:8d:00:
         95:6a:60:68:3a:df:27:8d:d2:a1:60:23:3d:28:f9:b0:34:c4:
         62:cb:0a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:23:42 2026 by rpki-client