Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft
File:                     91rI3ARJV7GxWgsVxu2jGLI7QDM.mft (raw, json)
Hash identifier:          xr4H0e4pzVxe8MbsCbmN5s8K0EgKop/UahzwZmfni0M=
Subject key identifier:   67:B3:4F:D1:DD:E2:6A:15:36:E1:E3:AA:71:8D:A8:15:50:04:8F:BC
Authority key identifier: F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33
Certificate issuer:       /CN=A919CDE4/serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft
Manifest number:          0244
Signing time:             Fri 17 Apr 2026 02:13:53 +0000
Manifest this update:     Fri 17 Apr 2026 02:13:52 +0000
Manifest next update:     Fri 24 Apr 2026 02:13:52 +0000
Files and hashes:         1: 91rI3ARJV7GxWgsVxu2jGLI7QDM.crl (hash: lJcA8Di/NVU8Dbh+cshMJxSq7/cSgITv7E1Mj8XVWRQ=)
                          2: 955C43AAC99E11ED98E9BE5BC4F9AE02.roa (hash: I5lzb/QAAInVeAXwX1UF76K4valuRx7JaU0RB09yN/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl
                          rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CDE4, serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033
        Validity
            Not Before: Apr 17 02:13:52 2026 GMT
            Not After : Apr 24 02:13:52 2026 GMT
        Subject: CN=69e19760-315b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:45:6a:9c:9f:e1:7f:16:6d:03:08:70:25:ef:
                    44:e1:7f:a8:ad:21:66:22:b6:54:84:82:1b:3c:d2:
                    a2:c2:5a:30:ce:d3:04:e6:c5:28:98:87:5d:ed:96:
                    73:c2:6d:e5:95:0a:f9:ba:a7:db:ff:26:e0:c5:9f:
                    20:e0:6b:88:a0:29:a0:e2:0a:8e:89:53:79:09:08:
                    d7:cc:b7:23:12:98:d0:8f:c0:61:44:01:dd:ea:9e:
                    9e:e6:47:a4:fb:ba:b6:8d:76:99:2d:b9:03:47:bc:
                    72:67:97:df:7c:0f:59:38:cc:30:6c:f2:68:b1:08:
                    de:60:51:ef:0e:16:1e:bd:f0:57:cc:2b:d9:ef:31:
                    ac:a4:db:55:bb:21:ae:c8:e4:c7:21:81:e3:5b:2a:
                    fd:8f:65:67:62:63:a6:af:b2:7a:20:cc:cc:03:a9:
                    aa:9b:1e:0f:6e:76:4e:bf:f3:52:5e:ec:76:13:47:
                    b5:8d:97:d1:59:e3:9a:1e:d0:64:b5:b8:e2:d8:cb:
                    76:3f:14:87:40:9a:bf:a5:8c:a1:fa:bc:5e:f2:6f:
                    07:cc:05:48:69:19:88:da:cf:81:18:8c:91:4a:d4:
                    94:52:f3:7a:49:c7:27:bc:de:0e:42:72:a2:af:0b:
                    69:e7:62:a9:4a:d0:82:e1:c0:cf:fa:2e:75:f1:61:
                    7f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B3:4F:D1:DD:E2:6A:15:36:E1:E3:AA:71:8D:A8:15:50:04:8F:BC
            X509v3 Authority Key Identifier:
                keyid:F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:76:0e:50:70:ba:4d:57:a2:05:ba:a1:2c:c7:07:ba:3e:13:
         ca:bd:69:37:bb:8c:d3:3d:c3:41:c5:71:9d:76:fa:be:84:23:
         4c:5c:8d:52:5d:ec:1e:00:73:c0:31:79:11:f1:33:b7:93:60:
         1d:ab:40:f0:8c:c2:13:2f:77:ae:64:3f:97:99:b7:5c:57:72:
         d8:47:4d:b6:1d:83:71:1e:ba:bf:3b:1d:d6:40:cb:f9:db:10:
         a0:97:31:a2:c3:46:d8:95:9c:59:da:bb:3c:a0:45:a8:21:95:
         d0:a7:1d:18:c8:56:21:42:62:4c:8b:56:1f:b8:8c:66:d5:f6:
         9c:66:b4:33:47:e0:79:f8:b4:86:cb:ff:f2:15:2e:ed:25:df:
         88:44:05:2a:20:63:a7:26:e8:e6:6b:9e:3c:4e:1b:22:3d:7a:
         d1:38:3d:f1:13:d2:fa:0a:1e:59:c4:28:a5:76:85:36:9c:38:
         25:20:12:c7:33:64:53:01:a2:79:38:a7:0f:10:86:3d:d4:09:
         e6:ec:d9:ac:cf:f8:d5:0e:02:d1:74:fb:e3:f8:b0:9f:86:12:
         20:bb:74:e7:2c:26:d3:bd:e7:cb:f1:b9:f0:89:46:ae:c0:19:
         53:dc:de:4e:36:2b:93:cd:be:2d:93:7c:a6:64:a3:7b:42:a3:
         52:ea:95:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:44:03 2026 by rpki-client