Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
File:                     3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft (raw, json)
Hash identifier:          tRYBU2IGEBzA8+yEelOtDvsFFIMcdQJX/ICOqn54AH4=
Subject key identifier:   E7:34:59:C8:51:7A:F2:35:31:69:69:FF:62:E0:11:24:6E:F9:AB:CD
Authority key identifier: DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0
Certificate issuer:       /CN=A91A5201/serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
Certificate serial:       BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
Manifest number:          BB
Signing time:             Fri 17 Apr 2026 06:41:13 +0000
Manifest this update:     Fri 17 Apr 2026 06:41:12 +0000
Manifest next update:     Fri 24 Apr 2026 06:41:12 +0000
Files and hashes:         1: 3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl (hash: ATo7jmI4R2ox8l+CfsEufzd5XfdjKPfTB9+UkBDrecs=)
                          2: D0CA23541BC611F09FDAC047C4F9AE02.roa (hash: 0ABnHn0tYQYE8SzbXPlx35zELqu/1VmLMO+AifbeoVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl
                          rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5201, serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
        Validity
            Not Before: Apr 17 06:41:12 2026 GMT
            Not After : Apr 24 06:41:12 2026 GMT
        Subject: CN=69e1d609-4331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:66:be:fb:44:75:3a:d4:7f:26:65:0e:fe:a8:
                    93:97:70:9c:01:66:c1:e7:c9:72:53:6b:bf:a4:cb:
                    f3:2d:0d:46:a1:10:ff:a7:0e:af:e1:cc:1a:8f:00:
                    14:1f:50:d5:d4:7d:f2:bc:14:c3:f5:95:cb:bc:04:
                    ea:30:b0:91:08:ce:fa:fb:06:a2:2e:f7:65:c3:65:
                    d7:ce:99:98:ca:40:2d:43:4f:6d:d8:5f:c8:f0:d5:
                    cc:61:68:7c:ea:e5:0d:38:b6:40:df:f3:58:9b:51:
                    5e:e1:0e:b6:aa:59:14:40:f1:4c:6f:d3:ba:62:ee:
                    03:c5:4c:4f:89:3b:a0:3c:53:e0:01:c8:61:9a:f1:
                    9d:77:30:24:1b:2c:fd:a9:31:48:8c:c6:aa:df:5e:
                    80:d0:15:bd:eb:43:b4:93:03:2d:b9:e2:49:a8:42:
                    3f:14:7d:71:7a:a8:54:5a:38:e6:f3:22:9e:31:6c:
                    80:06:8d:bb:57:d7:0a:ad:86:ff:52:a9:b6:a3:d4:
                    ef:1f:16:d6:05:1a:bc:5c:95:00:f8:08:8a:b7:a8:
                    9b:06:b0:69:3e:83:b2:7e:28:32:66:07:ac:1c:e5:
                    96:54:aa:a8:e8:58:0d:05:8b:b3:bc:5c:62:b1:1b:
                    18:4b:b6:ea:72:ef:36:42:23:9c:a5:8d:39:ec:ad:
                    cd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:34:59:C8:51:7A:F2:35:31:69:69:FF:62:E0:11:24:6E:F9:AB:CD
            X509v3 Authority Key Identifier:
                keyid:DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:42:73:45:16:78:f7:7a:b2:a1:3f:b9:84:7e:b7:5c:98:28:
         62:b4:cd:78:ef:52:9f:5e:6d:58:6d:6c:ac:2d:82:ef:4e:22:
         eb:47:cb:85:c2:14:64:ba:f9:e9:7a:6e:57:9c:fe:89:3a:94:
         6e:89:c6:67:73:b5:5e:8b:a4:fb:06:6d:fa:82:72:0e:d4:c4:
         85:94:7e:74:d5:5e:33:08:59:7a:c8:94:d6:6d:4f:ad:1d:c3:
         e3:10:7e:9a:47:12:ab:d0:e3:53:54:dc:ee:7a:a1:14:02:52:
         9a:c8:f7:10:12:8e:d5:00:e6:46:40:e1:6b:37:e1:21:f0:01:
         d7:5c:b5:a7:da:33:3d:29:6c:ed:65:24:c8:fa:5a:51:61:76:
         7a:55:70:45:43:15:8c:3c:5d:91:3f:93:b9:ec:60:34:56:1c:
         e2:07:14:99:fb:c3:17:68:c8:33:f5:57:c3:83:8f:23:bb:44:
         5a:14:7f:e8:bb:25:bb:5a:44:0c:d0:ae:b3:ff:8c:2f:2d:c0:
         36:91:4f:c4:3e:17:81:5c:a9:62:d4:ad:9f:ba:ed:3b:c0:c7:
         c8:56:28:e5:d2:c2:c1:81:8e:07:06:d9:bc:41:a5:9a:b1:ef:
         86:dc:d4:a0:1b:44:26:fc:8c:a6:f8:1b:e5:7a:a4:e6:2e:92:
         7e:86:f1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:12:19 2026 by rpki-client