Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
File:                     xGIlbhG2PuqR1z02Q867tRojUK8.mft (raw, json)
Hash identifier:          q2eGVSNtRK4X4VTCsmEdV+wkwmYjFVs42xKHR9ZEac8=
Subject key identifier:   01:DE:1D:AE:AE:5B:9E:15:D9:D0:C0:C5:11:74:AC:21:4D:06:D0:14
Authority key identifier: C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF
Certificate issuer:       /CN=A91A210A/serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF
Certificate serial:       1101
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
Manifest number:          10F3
Signing time:             Thu 16 Apr 2026 17:13:37 +0000
Manifest this update:     Thu 16 Apr 2026 17:13:36 +0000
Manifest next update:     Thu 23 Apr 2026 17:13:36 +0000
Files and hashes:         1: xGIlbhG2PuqR1z02Q867tRojUK8.crl (hash: mlT6zk9QH1jl88Px4+BV/KceUq3hJqMlAsdHeZ9IJnk=)
                          2: 691023063A8311E99AF5572DC4F9AE02.roa (hash: 2eE+CDRlSHY5Ior8e4vYqF46aXCqPlrmKLCnk7wj7fQ=)
                          3: 797BF786FB2C11EFA405F334C4F9AE02.roa (hash: HFvIVd/rWVPzXXKKiOWON2cvnwjOeJoH4rrOAqA8YGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl
                          rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:13:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4353 (0x1101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A210A, serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF
        Validity
            Not Before: Apr 16 17:13:36 2026 GMT
            Not After : Apr 23 17:13:36 2026 GMT
        Subject: CN=69e118c0-9f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1c:f0:99:0a:69:59:19:d1:07:08:e3:70:f2:
                    e4:db:ea:2a:c8:5e:d8:9c:07:6a:41:6a:10:06:6c:
                    75:55:31:fa:56:90:6f:cd:a5:d6:6d:20:71:f4:db:
                    06:c7:d1:f4:68:ad:5d:28:0d:34:47:7c:94:f7:ac:
                    ec:19:ac:c2:23:d1:44:3f:f9:8b:1a:b3:3d:31:61:
                    3b:e7:ed:2c:f2:61:d8:fa:79:10:54:c2:9c:56:b2:
                    41:a8:ec:51:67:fa:5e:cf:1a:14:3d:4d:cc:35:f2:
                    22:91:7b:98:01:f8:ad:3e:82:4e:79:fb:6b:f8:9f:
                    ec:f5:df:ba:43:ad:c0:3a:fb:b0:c0:81:65:d9:5a:
                    5c:fc:7a:ff:7a:dc:18:16:5f:8b:54:21:fe:2a:62:
                    3d:ce:61:48:6d:f6:67:cd:f0:db:8b:13:7e:77:26:
                    f6:19:92:eb:47:41:47:80:40:0e:31:aa:a9:c8:70:
                    a6:17:6a:36:77:49:99:80:15:0f:b3:66:ef:10:83:
                    9f:33:e6:68:e8:a9:a0:43:18:7a:6d:30:1b:2e:81:
                    b0:9c:87:4a:c4:9f:4c:4f:dd:f7:87:e0:de:1f:af:
                    15:0e:a5:74:66:02:75:24:f1:1c:4f:f7:bd:75:ab:
                    a5:fe:61:af:1e:d0:c5:bb:cf:de:b1:73:e5:cd:e8:
                    e9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DE:1D:AE:AE:5B:9E:15:D9:D0:C0:C5:11:74:AC:21:4D:06:D0:14
            X509v3 Authority Key Identifier:
                keyid:C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:af:e5:5a:69:76:05:0a:54:d4:3e:53:8e:5c:56:24:7f:be:
         f4:53:1f:89:ce:5e:76:c7:79:13:5d:18:29:09:90:f9:d8:bf:
         4d:53:93:65:24:ab:87:d5:19:03:bd:15:04:fd:1b:b1:72:ab:
         d8:77:41:f9:28:32:da:b6:8b:52:4c:d2:3d:86:02:ec:b6:dc:
         79:cb:d2:81:ce:0d:60:e2:3c:c5:df:90:58:44:3e:2e:31:6c:
         fe:11:ef:68:54:1b:b6:54:76:e6:70:1d:33:51:1a:5d:0a:14:
         ae:43:78:de:2b:63:2c:4e:58:58:de:1d:cb:cf:63:d5:7a:56:
         62:3d:78:15:a4:45:a4:82:a3:80:ec:d5:ec:2a:ae:96:25:92:
         fe:cb:9a:01:c6:6b:94:7d:32:e6:35:5e:41:2d:03:80:f7:da:
         61:cf:57:6b:a4:ef:86:c1:89:14:de:ea:b3:75:a8:de:4d:28:
         fd:e0:25:f3:32:68:06:35:12:a3:42:e7:03:3b:7c:67:e8:0a:
         4c:37:d3:b4:5b:71:3f:21:5f:24:4e:3d:09:61:07:3f:bd:9b:
         b7:10:6d:2e:00:18:ea:a3:b0:1d:cd:0b:ff:9b:84:a2:4e:08:
         ad:25:d6:3f:a1:90:a7:9a:9f:17:17:0b:c8:8b:5d:9e:fa:b0:
         71:66:64:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:07:25 2026 by rpki-client