Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft
File:                     dEeyg16suIrEhyfLcmu4e5e6d4o.mft (raw, json)
Hash identifier:          v2a96FOO3v59QtAZb15g2D0lc4eUAMb34RJGfDmS+Es=
Subject key identifier:   AF:70:D4:E3:68:39:39:22:41:65:74:FB:85:6C:E0:A0:94:9B:A4:6B
Authority key identifier: 74:47:B2:83:5E:AC:B8:8A:C4:87:27:CB:72:6B:B8:7B:97:BA:77:8A
Certificate issuer:       /CN=A91A5F82/serialNumber=7447B2835EACB88AC48727CB726BB87B97BA778A
Certificate serial:       087F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft
Manifest number:          086B
Signing time:             Thu 16 Apr 2026 20:37:00 +0000
Manifest this update:     Thu 16 Apr 2026 20:37:00 +0000
Manifest next update:     Thu 23 Apr 2026 20:37:00 +0000
Files and hashes:         1: dEeyg16suIrEhyfLcmu4e5e6d4o.crl (hash: NzfOqViPUsdhqjM+1t/ipWrd+XMuFz6zGlWrDS8v/qc=)
                          2: 5B196FD80A4611ECAE818D54C4F9AE02.roa (hash: yZMlmWs6ehiqiK21MWo58HZmpGkvpysqNROF9+RqzZE=)
                          3: 59F7EF4E0A4611ECAE818D54C4F9AE02.roa (hash: 83NmbAy2cIXc5RFQjEGxhaLUliH4l24y6tTy7l/cCdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.crl
                          rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2175 (0x87f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5F82, serialNumber=7447B2835EACB88AC48727CB726BB87B97BA778A
        Validity
            Not Before: Apr 16 20:37:00 2026 GMT
            Not After : Apr 23 20:37:00 2026 GMT
        Subject: CN=69e1486c-cc5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:59:c0:09:dc:0f:8e:0d:20:e7:69:f5:4c:c6:
                    bd:9b:24:a6:eb:46:f3:69:63:6a:13:90:d7:ed:9f:
                    2b:2c:d4:d8:83:e4:37:45:2f:0f:8c:44:78:bb:70:
                    a2:29:ab:dc:b3:55:f5:89:0c:f0:a4:6e:7c:95:ac:
                    ab:8b:71:55:50:e3:52:4a:28:69:da:2d:64:36:5c:
                    88:64:22:5c:2c:47:96:b4:65:80:8f:f6:2a:1e:ba:
                    e0:91:51:6f:09:48:a5:9e:69:29:ad:0e:b4:6c:06:
                    55:ea:58:5c:5d:66:ea:c5:16:fa:b1:80:d3:c6:49:
                    b3:54:b1:4b:b8:2d:66:70:a0:9a:dd:53:a4:6b:2e:
                    17:27:46:05:99:7b:3d:82:d9:11:5c:84:ad:46:f8:
                    74:b2:7f:ad:06:a8:bf:ec:cd:8a:8c:ed:39:51:48:
                    95:f6:52:f6:72:e8:aa:91:a7:ac:d8:9c:db:3a:1f:
                    0e:56:34:04:8b:31:a4:1a:e5:14:5e:ab:93:e6:32:
                    03:8e:f1:b8:5e:b7:17:e2:20:45:ac:48:a1:aa:51:
                    35:78:a8:0f:45:74:b2:1d:3d:26:b3:92:9d:0e:c7:
                    b1:22:49:88:bb:4e:6b:25:01:98:bc:a3:bb:60:70:
                    22:3a:6e:c7:07:09:21:87:9b:9e:f1:29:dc:f3:61:
                    d5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:70:D4:E3:68:39:39:22:41:65:74:FB:85:6C:E0:A0:94:9B:A4:6B
            X509v3 Authority Key Identifier:
                keyid:74:47:B2:83:5E:AC:B8:8A:C4:87:27:CB:72:6B:B8:7B:97:BA:77:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:c1:4e:c7:a5:a5:e8:7c:5b:15:7f:20:f8:84:b9:bd:24:76:
         29:69:a9:04:19:8a:41:13:42:59:e0:8a:fb:8e:8d:ce:9b:2e:
         2f:29:aa:37:af:11:d3:ca:53:e3:0a:41:7a:aa:58:97:73:e0:
         b4:36:b4:af:f6:21:06:f6:c1:2a:3d:83:d4:d8:8d:ff:03:ec:
         b3:14:f2:e6:0f:1e:60:7a:67:57:59:bf:2c:42:91:3f:0c:55:
         ca:93:60:f1:2a:ef:dd:a0:07:e4:2d:53:cb:f7:25:60:7b:41:
         6e:cb:3f:83:a1:6f:db:cf:e0:49:82:57:fe:04:8b:3d:40:86:
         37:c2:24:f2:a2:03:18:ba:c1:22:98:2f:2a:43:40:70:d2:a7:
         32:ba:5a:17:bc:6e:4c:10:86:b9:0f:8e:60:59:e0:02:4c:29:
         ad:3e:69:21:63:02:d7:a0:45:0b:76:96:df:ea:16:ae:24:27:
         b2:d2:31:b7:5f:e7:35:f5:86:38:ed:ce:33:ca:51:4a:e4:31:
         bc:7f:bf:8a:e6:be:a1:39:37:21:01:94:f7:3a:6a:a4:b2:ad:
         93:50:a0:63:87:b1:da:a7:b9:ce:8c:a9:87:94:78:65:84:c7:
         ba:3a:d4:ab:b9:6a:63:fa:cd:6e:55:8d:bc:b0:fa:17:2b:b8:
         f8:a9:85:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:06:44 2026 by rpki-client