Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft
File:                     CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft (raw, json)
Hash identifier:          SqvMbOyjirdbMdxlQr5QXxAh/a2YBHhVZsqqic/BKIs=
Subject key identifier:   A6:15:6B:0D:18:33:C9:29:AD:27:70:9D:63:13:13:92:67:15:5D:9F
Authority key identifier: 09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC
Certificate issuer:       /CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC
Certificate serial:       1E32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft
Manifest number:          1E17
Signing time:             Thu 16 Apr 2026 16:03:15 +0000
Manifest this update:     Thu 16 Apr 2026 16:03:15 +0000
Manifest next update:     Thu 23 Apr 2026 16:03:15 +0000
Files and hashes:         1: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl (hash: 8Jt4sXk9iVTMobSaQOkZlzhK7CzRjKapRZHva3wOuw0=)
                          2: 945DB376E34711EE87868164C4F9AE02.roa (hash: 4RkTGMjqWlk+rKx4kNy4NjcUMN0pXSaeXeIwpINtkK8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl
                          rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7730 (0x1e32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5098, serialNumber=099714A70E6F401289108209D6A7F4859F9800CC
        Validity
            Not Before: Apr 16 16:03:15 2026 GMT
            Not After : Apr 23 16:03:15 2026 GMT
        Subject: CN=69e10843-2414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c8:10:eb:87:a0:8c:e4:91:89:22:a7:fd:05:
                    a2:ad:e4:91:a5:f3:04:d1:7c:ec:d8:ea:6e:fd:12:
                    08:90:54:80:db:28:c1:5f:b2:d6:7e:cf:5d:f8:93:
                    6a:19:1e:b7:1d:2f:bc:90:11:de:d1:cc:1b:f3:8f:
                    46:b2:38:65:93:7e:41:9a:ee:2a:ee:84:9a:b9:c2:
                    d9:6b:6f:e1:e8:c7:ca:19:45:15:ae:03:ff:09:89:
                    98:45:6c:fd:40:24:c4:43:12:b2:81:ae:dc:6c:f7:
                    4b:29:9c:46:60:7c:6a:c2:3a:4b:7b:fd:05:a4:b5:
                    ce:73:02:0b:88:c1:4f:31:c0:dc:9d:35:78:ef:b9:
                    6f:99:9e:8c:92:4d:48:0b:71:e1:dc:ac:50:e5:54:
                    4c:34:d6:6c:50:fa:e1:5d:9d:5c:88:93:00:d9:26:
                    45:44:93:23:89:38:15:b8:55:24:6e:3d:15:07:28:
                    6a:a1:c2:8c:a6:85:0c:be:2f:22:25:8f:af:37:b5:
                    96:02:58:73:91:99:65:a3:8a:f8:0f:dd:ff:3f:71:
                    ad:5d:19:f5:da:cc:70:ac:cd:0c:55:42:8d:b4:03:
                    44:76:8b:e5:ad:19:28:ea:74:3a:5e:3c:9b:1c:6b:
                    c0:5c:47:cd:bc:f1:6d:a0:fe:65:c8:d4:a1:48:0d:
                    54:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:15:6B:0D:18:33:C9:29:AD:27:70:9D:63:13:13:92:67:15:5D:9F
            X509v3 Authority Key Identifier:
                keyid:09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:1c:b2:4c:ab:d3:60:68:d1:45:1d:7a:85:d4:77:ca:8f:42:
         73:3f:f6:c5:8e:ae:af:d0:0b:80:1e:54:b1:7e:27:79:ef:2e:
         d9:bf:34:01:ee:c5:c5:75:84:e2:4f:b7:5c:20:49:20:1f:03:
         2a:64:19:d2:18:39:f6:9e:30:b6:1c:c4:49:09:9d:e4:10:ed:
         66:34:8f:a3:fd:de:9d:26:db:ec:fd:0f:6f:c8:c3:16:4d:e4:
         23:1c:d0:ed:55:f3:a3:f3:5f:b2:d9:c9:db:fa:4c:ee:66:bb:
         e5:89:4f:b2:6e:b1:69:eb:ca:8f:9b:bf:94:da:1f:d1:14:a0:
         eb:2a:1c:82:67:6b:f2:7d:88:01:a0:8b:cb:d7:b5:b0:81:26:
         2f:04:d6:85:ba:32:ed:3e:d3:2d:cf:14:ab:84:af:b6:c2:bb:
         ec:ab:10:3c:bd:f3:ea:55:1c:50:1d:09:fd:89:3f:2c:32:f2:
         a6:d8:4c:3b:8b:0a:ae:20:f2:b5:db:15:6e:55:1b:39:90:96:
         3c:d9:73:7c:0b:b3:3e:70:44:5e:54:7c:e8:80:87:c9:a2:6a:
         cb:92:06:22:ae:23:70:b3:54:98:b9:1c:02:a6:e1:d4:db:2d:
         c4:9b:4b:fc:a6:10:18:d1:80:36:fa:1f:9e:08:72:f0:e9:70:
         17:54:1c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:23:23 2026 by rpki-client