Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft
File:                     S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft (raw, json)
Hash identifier:          NMc296H1gBjsBl6IEfznsbCdKzAmoZRCtxdhWmLYlLY=
Subject key identifier:   49:32:32:D0:A9:FB:ED:17:70:43:30:C1:AF:80:7A:12:46:A2:3E:07
Authority key identifier: 4B:DD:56:06:CE:E3:83:87:31:B2:76:EB:5A:E2:74:09:55:E6:E8:35
Certificate issuer:       /CN=A91A40AE/serialNumber=4BDD5606CEE3838731B276EB5AE2740955E6E835
Certificate serial:       034E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft
Manifest number:          0349
Signing time:             Fri 17 Apr 2026 00:51:41 +0000
Manifest this update:     Fri 17 Apr 2026 00:51:40 +0000
Manifest next update:     Fri 24 Apr 2026 00:51:40 +0000
Files and hashes:         1: S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl (hash: 4Ve8Eb6o9U0mG8LVSM40hmmXUy854hVqMQJ3ImgTYWc=)
                          2: 0C2902B4FC3D11ECAD619C35C4F9AE02.roa (hash: 0G8y890AV8+X2YlEAcmnQRZ33GxT1e5vDg0b+sSexQ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl
                          rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 846 (0x34e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A40AE, serialNumber=4BDD5606CEE3838731B276EB5AE2740955E6E835
        Validity
            Not Before: Apr 17 00:51:40 2026 GMT
            Not After : Apr 24 00:51:40 2026 GMT
        Subject: CN=69e1841d-3640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:77:53:41:4b:9a:07:1e:60:a0:f5:ea:dc:6b:
                    fc:17:c3:2b:1e:aa:d9:bd:d8:8f:c4:b6:83:f4:6f:
                    55:56:04:c4:79:f7:82:b0:57:d4:67:1f:b9:24:29:
                    09:29:8a:b0:87:bb:15:a6:f0:19:75:3b:f6:9a:7d:
                    f9:fc:df:61:95:51:49:dc:0b:6c:71:19:8a:c7:03:
                    46:cd:a2:8b:9b:a7:f0:52:e3:42:a1:db:b8:5d:a0:
                    ea:e4:bd:b5:d2:a0:9d:95:0e:a7:3f:74:f6:72:af:
                    b4:76:17:c7:51:7b:33:c2:cd:18:29:61:27:c6:36:
                    e4:a6:31:c8:b2:37:f3:78:0d:b9:69:c7:fa:59:8d:
                    76:4e:65:c4:76:a1:95:5b:b4:f5:02:e0:ed:d5:4b:
                    f7:a7:7d:9c:5e:22:0e:9c:f7:f7:7b:8a:13:19:13:
                    84:14:4a:c3:12:3c:8c:d5:a2:c5:e1:be:f4:53:a1:
                    dd:d1:ce:ee:6f:30:1c:c0:69:57:02:dc:75:0f:4b:
                    e3:20:b5:0f:f5:08:14:c8:8c:c9:a6:91:64:46:8f:
                    4a:e0:68:7e:09:27:fb:2e:51:48:7d:c9:46:45:23:
                    98:51:a4:ab:5d:9a:05:2e:47:b8:dd:d6:3d:44:64:
                    89:19:1d:0d:43:67:09:7d:67:c6:e8:21:be:7c:95:
                    98:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:32:32:D0:A9:FB:ED:17:70:43:30:C1:AF:80:7A:12:46:A2:3E:07
            X509v3 Authority Key Identifier:
                keyid:4B:DD:56:06:CE:E3:83:87:31:B2:76:EB:5A:E2:74:09:55:E6:E8:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:af:69:1b:5e:80:ef:cc:8a:8e:c8:05:22:e8:63:c7:fa:b1:
         6e:c8:71:e1:5d:80:08:ba:ac:fd:58:d0:e9:da:03:1f:8c:6f:
         f8:3a:a4:a3:62:e2:96:0b:7d:ec:69:db:67:a1:1a:18:ca:0f:
         d4:6e:62:1d:c2:2d:49:45:d8:ef:ec:3d:49:bc:29:b4:49:bb:
         9b:b7:dc:81:73:87:20:ac:3d:2f:37:28:12:62:0b:33:13:25:
         4d:33:6a:28:b7:bb:66:87:0f:1d:56:60:be:f5:ca:1f:3d:6b:
         c8:b7:45:99:b6:f5:a4:22:90:73:28:b1:68:63:8e:8f:5c:54:
         29:58:c9:f2:43:ec:0f:59:b0:05:6a:77:a0:c4:e4:1e:2b:38:
         9c:41:43:2d:ff:a5:0e:93:a1:8e:1e:af:9a:de:04:9b:47:8e:
         7b:ef:0b:85:51:c0:dd:bf:d5:59:ee:3f:69:2d:46:51:cd:e2:
         0d:36:9a:34:f7:7d:78:41:f5:c1:fa:5c:87:98:77:f2:7a:a2:
         1a:62:1b:dc:17:f3:50:fe:0e:13:fd:66:dd:4c:7c:9f:19:18:
         ff:18:35:52:a3:78:ab:c8:e7:ba:1f:be:e1:8b:7a:ce:3f:69:
         58:91:7f:9d:86:36:01:ae:97:b3:21:81:5a:27:cb:0e:69:b7:
         bb:b2:b1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:08:52 2026 by rpki-client