Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft
File:                     0hsNWsWvkZAPUK2WADMT5R7WChA.mft (raw, json)
Hash identifier:          kFZsEha5MfMNYLjfHhgbBpiYpLg5hCgJhEpodYydDeg=
Subject key identifier:   A7:B5:70:B1:72:42:46:93:8B:B5:18:9A:01:90:DE:D9:3F:07:F6:81
Authority key identifier: D2:1B:0D:5A:C5:AF:91:90:0F:50:AD:96:00:33:13:E5:1E:D6:0A:10
Certificate issuer:       /CN=A91A0E9D/serialNumber=D21B0D5AC5AF91900F50AD96003313E51ED60A10
Certificate serial:       012F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hsNWsWvkZAPUK2WADMT5R7WChA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft
Manifest number:          011F
Signing time:             Fri 17 Apr 2026 05:36:09 +0000
Manifest this update:     Fri 17 Apr 2026 05:36:09 +0000
Manifest next update:     Fri 24 Apr 2026 05:36:09 +0000
Files and hashes:         1: 0hsNWsWvkZAPUK2WADMT5R7WChA.crl (hash: WTwqDCvFoaf6eSdvPaDWqJkVTNlTG419lL830/KANAg=)
                          2: 3996C94896D211EF924C486FC4F9AE02.roa (hash: RSWSsqKVGFqnc5MjQ5V0wfdqY1cc/uC9LzB1g38vtcs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.crl
                          rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hsNWsWvkZAPUK2WADMT5R7WChA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:36:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0E9D, serialNumber=D21B0D5AC5AF91900F50AD96003313E51ED60A10
        Validity
            Not Before: Apr 17 05:36:09 2026 GMT
            Not After : Apr 24 05:36:09 2026 GMT
        Subject: CN=69e1c6c9-8533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:31:72:5a:25:44:8c:d3:04:ad:af:51:f3:a0:
                    f9:05:41:40:a1:b4:6f:c2:87:91:1e:72:ca:2c:0a:
                    b7:4c:21:d2:50:94:6c:5a:a4:43:e1:87:bb:d2:80:
                    90:f7:5f:77:5e:0e:c5:09:6b:02:c7:27:26:2b:d1:
                    ad:b8:68:7f:da:90:5a:cf:e1:63:e4:a7:2e:fa:1c:
                    68:4e:48:42:82:77:ba:a3:a9:59:2c:f7:25:e2:cb:
                    5f:6d:1f:b2:30:4c:a1:b2:c0:49:60:3a:0b:ca:ce:
                    a8:ea:8f:06:5b:87:43:ec:2a:b1:0b:b7:a9:b5:dd:
                    d2:57:a4:2c:76:36:a6:c7:c7:35:59:f1:45:34:ae:
                    0e:b4:ff:95:eb:df:2b:f8:c9:4c:59:c9:75:3a:9f:
                    d4:bf:96:ea:59:15:52:35:bf:a3:db:08:7a:29:56:
                    69:da:ed:85:20:8d:25:55:71:90:b7:d8:18:f9:92:
                    e6:79:9d:66:cf:9a:56:30:0f:31:81:33:53:84:6d:
                    46:a6:7b:c4:b9:4a:ab:0a:59:8b:d2:d7:1b:e4:44:
                    f5:02:0a:80:6b:19:4c:bd:fc:92:31:b9:2c:57:9f:
                    d6:97:3e:e1:6d:96:29:1f:b7:6c:76:20:a7:83:91:
                    fc:d3:a7:9c:dc:06:67:8b:12:e7:24:db:31:0b:45:
                    a5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B5:70:B1:72:42:46:93:8B:B5:18:9A:01:90:DE:D9:3F:07:F6:81
            X509v3 Authority Key Identifier:
                keyid:D2:1B:0D:5A:C5:AF:91:90:0F:50:AD:96:00:33:13:E5:1E:D6:0A:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hsNWsWvkZAPUK2WADMT5R7WChA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:21:78:55:30:bc:0a:56:4b:56:22:09:ae:b9:2c:ae:09:cc:
         14:12:6c:8e:ee:5d:d2:7d:7c:f5:e7:47:7a:14:ed:6a:81:d8:
         9b:66:6e:57:0c:f7:a2:70:27:c0:75:33:ed:74:2e:ec:78:48:
         7e:f2:b1:72:36:3f:b1:6a:1b:b2:c1:f7:72:d3:02:fd:8a:af:
         b3:2b:ea:97:29:ed:83:f6:6d:05:39:b9:8f:71:70:74:24:6b:
         5c:2f:75:71:28:c7:87:57:8f:d1:98:66:58:d6:58:a2:c3:83:
         cf:83:cc:04:37:33:db:5c:51:41:7b:d7:c8:82:7d:22:a8:45:
         f6:2e:77:a4:da:fb:a9:ef:8b:77:9c:8b:f3:f5:c2:d4:9d:36:
         53:36:65:41:76:5f:28:9b:01:e2:6a:84:aa:38:3c:88:2a:46:
         d8:e2:53:a1:61:9b:09:35:6f:fe:cf:39:38:e3:5c:24:9f:9f:
         c2:59:a3:ce:cd:34:96:49:bc:84:67:a5:08:2b:72:3f:9a:b8:
         11:31:ba:d8:df:e3:7a:9d:46:40:16:56:38:45:88:09:d2:cf:
         22:b0:08:e5:7b:55:33:89:47:8a:5b:bd:16:95:92:32:34:6e:
         6e:91:39:61:a0:c9:80:4c:81:89:0a:45:96:91:7f:c8:59:ce:
         b1:84:df:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:43:22 2026 by rpki-client