Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
File:                     t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft (raw, json)
Hash identifier:          LIJS1d7VAPPU+UnGbrzsenZv9atEbPaz+gQUblMg7AY=
Subject key identifier:   B6:8E:EB:36:45:65:93:E0:B6:09:B7:67:F7:5D:E7:C2:63:76:C2:EB
Authority key identifier: B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04
Certificate issuer:       /CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504
Certificate serial:       0222
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
Manifest number:          021C
Signing time:             Fri 17 Apr 2026 02:36:05 +0000
Manifest this update:     Fri 17 Apr 2026 02:36:04 +0000
Manifest next update:     Fri 24 Apr 2026 02:36:04 +0000
Files and hashes:         1: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl (hash: EomvM3uQ13MpT065xzJH+V9LSeJd7b/CT/YoupGbK+o=)
                          2: F4260C1C68DC11EE842D825BC4F9AE02.roa (hash: UjPClW0uFtHm8QVkzT1vV63CuJ+wSKL/8pPiNqjGxQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9197, serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504
        Validity
            Not Before: Apr 17 02:36:04 2026 GMT
            Not After : Apr 24 02:36:04 2026 GMT
        Subject: CN=69e19c94-7dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:d5:3f:90:d9:c6:e2:fb:27:c6:bf:96:f0:
                    ac:38:29:bf:60:dc:3b:02:f9:e9:6b:79:71:58:6b:
                    2d:fe:5d:26:9b:88:86:87:b5:98:35:44:b7:51:e6:
                    8d:5c:59:ee:f7:fa:7c:8a:c7:94:f7:c6:e6:07:e5:
                    44:b2:65:13:d0:b8:0b:60:3f:09:13:6f:a5:d5:f8:
                    ec:46:7c:5d:f8:31:5f:6b:cd:e7:ef:26:da:5f:d2:
                    08:fc:b5:be:4e:c2:94:f7:74:c8:f8:bf:b8:8c:ae:
                    a6:e4:94:f5:1e:90:43:2d:81:0b:aa:4b:d1:ae:ca:
                    36:1d:cd:90:07:3d:3a:89:cd:f7:4e:a6:2f:8c:c3:
                    bd:6b:50:5b:fc:34:81:a4:8a:f1:7e:c2:61:32:6c:
                    b9:73:74:93:f0:fa:db:22:7d:9e:4a:22:34:72:a4:
                    05:cb:a7:a4:a2:5a:49:bc:c7:61:0c:42:2c:81:dd:
                    fa:86:67:68:d0:24:d6:76:12:2c:fa:3a:1c:33:3e:
                    fe:97:f8:40:93:e8:36:cf:92:b8:9b:b4:f6:7b:51:
                    f1:18:be:c6:52:cf:62:4b:6a:9c:1b:90:fd:35:e4:
                    ec:9a:71:4e:09:84:a5:b7:d0:8a:a4:95:74:b2:49:
                    27:75:db:82:bb:24:88:6a:1e:fc:04:76:36:e6:c1:
                    78:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8E:EB:36:45:65:93:E0:B6:09:B7:67:F7:5D:E7:C2:63:76:C2:EB
            X509v3 Authority Key Identifier:
                keyid:B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:9e:64:b3:b4:81:9b:78:b8:03:ca:b3:d6:bb:17:fa:f1:7f:
         a4:55:16:e2:b0:66:48:4e:b5:9f:9f:45:28:95:bc:1e:48:7a:
         46:91:9b:99:55:ba:bb:0f:ac:e1:9f:4a:3b:0b:41:91:2f:6a:
         29:40:d5:c9:6e:5f:52:05:a4:f8:55:30:bb:9f:7e:6d:62:df:
         ac:c6:de:b1:a9:82:f8:d1:36:b4:72:c2:31:03:57:5a:66:70:
         dc:c7:45:20:2e:9d:6e:b5:8b:3a:ce:31:33:4f:44:2b:98:99:
         ae:26:72:c9:73:d8:d3:29:00:5d:67:f8:f7:e2:1a:2a:d6:26:
         99:83:f3:c1:81:b6:b6:9c:e7:d7:1e:c7:93:51:1a:c7:5f:0d:
         66:53:80:6d:8e:1a:1a:ef:ae:1d:13:f6:e6:86:34:0e:95:28:
         c8:04:d8:b8:fd:a0:5b:0e:8a:87:00:10:e3:aa:78:d1:c6:b2:
         04:6d:3f:df:70:29:f0:43:48:e5:d2:c9:15:58:9a:e6:05:c7:
         ce:ab:85:71:b2:46:f1:71:5d:e4:1d:f3:d3:dd:7b:c6:ea:d2:
         7e:01:e6:91:ac:7a:79:6f:f6:7f:bd:1d:bb:bf:86:e5:e7:9e:
         5f:e3:6f:9b:0f:9f:f7:8c:d2:75:fa:6c:f1:b0:27:ad:22:c3:
         33:6c:bc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:45:58 2026 by rpki-client