Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft
File:                     D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft (raw, json)
Hash identifier:          QyHSImRklxRKDPNP43Zde/l7QIxcw9PIMUJaXIkANsg=
Subject key identifier:   02:09:11:8A:AA:10:89:5F:BC:70:D7:97:E9:66:CB:DE:7F:42:86:BB
Authority key identifier: 0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75
Certificate issuer:       /CN=A91A9720/serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft
Manifest number:          3C
Signing time:             Fri 17 Apr 2026 08:14:00 +0000
Manifest this update:     Fri 17 Apr 2026 08:13:59 +0000
Manifest next update:     Fri 24 Apr 2026 08:13:59 +0000
Files and hashes:         1: D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl (hash: R4dVXllnTm7NUxunrTr0JONmGTe2a+yqXR7q8QNiJ3M=)
                          2: 88128B34E55A11F0A78CF268396F56BC.roa (hash: rkDeFlmd5GKow5toLJKpXkhy9It1msy7eliFypTprmU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl
                          rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9720, serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075
        Validity
            Not Before: Apr 17 08:13:59 2026 GMT
            Not After : Apr 24 08:13:59 2026 GMT
        Subject: CN=69e1ebc7-a9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5b:84:17:a3:1d:ff:3e:0c:0e:be:f0:cd:25:
                    17:3c:b3:54:3e:cc:e5:a8:15:5e:d6:a7:d0:24:c4:
                    f9:02:44:87:7c:43:3d:6d:d9:e0:6b:50:ad:e9:18:
                    bc:bd:65:2f:e4:f6:d6:a2:09:36:40:9c:26:49:47:
                    ac:9a:67:be:f9:0e:d9:b1:dd:b8:5a:61:63:46:df:
                    b7:7b:66:2d:e5:45:61:d2:4c:3b:7d:84:8d:04:58:
                    92:19:63:32:5f:88:97:34:d2:7d:57:25:98:39:c1:
                    d5:f7:ca:ac:26:fd:92:c9:c3:a0:6d:da:ba:39:40:
                    fe:00:cf:54:d4:b9:e4:cf:c1:9d:e4:21:a6:2a:7a:
                    aa:c6:4f:da:1a:16:8f:1a:27:f7:f3:d2:c0:e8:38:
                    51:04:79:45:11:96:da:f5:60:c2:f5:11:e0:7c:88:
                    62:eb:96:0c:e4:49:8f:5b:71:5d:b6:3d:37:c3:3d:
                    22:9e:9e:57:75:75:9c:e8:ae:11:77:03:2f:e9:30:
                    f3:b7:35:59:4e:2e:1d:92:b1:c9:c7:1f:57:95:43:
                    ef:25:d4:3b:75:45:e7:12:f7:07:f9:d8:29:a6:9d:
                    55:e6:58:46:13:fb:cf:58:6b:2c:7d:a7:73:b4:d0:
                    26:28:4f:c1:48:64:2b:75:4c:63:fd:3e:9d:c3:8c:
                    bc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:09:11:8A:AA:10:89:5F:BC:70:D7:97:E9:66:CB:DE:7F:42:86:BB
            X509v3 Authority Key Identifier:
                keyid:0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:9f:83:43:35:e2:a6:e4:b2:cd:9c:63:58:72:9f:43:00:84:
         76:01:35:1f:4b:8f:3b:3d:e4:23:cb:a6:4f:13:72:75:bd:b3:
         6a:92:fd:ea:87:7e:6f:55:89:fd:f5:10:85:c2:18:df:a2:f3:
         30:41:9e:07:99:11:78:5d:fd:75:78:23:2a:9a:a9:51:68:42:
         42:f8:53:f7:38:24:a3:00:47:31:ac:47:a9:84:8a:e0:b2:88:
         15:8e:2a:44:b0:27:12:45:5c:7c:27:28:75:6b:a8:ba:a8:f3:
         56:d5:68:3f:e1:c0:4c:d4:c1:7c:54:1e:b2:8d:8a:0e:c8:99:
         43:e5:70:f2:be:42:cf:4e:aa:fa:b4:b7:2e:89:3a:ad:9c:91:
         e5:10:e0:78:d5:20:4b:a6:d7:ba:3a:6b:91:73:fa:fd:ea:1b:
         6e:16:37:c5:85:2d:68:20:f7:dd:e6:e9:30:de:2d:e6:ef:cf:
         8e:00:47:31:1f:ec:d7:45:8c:29:dd:e3:f2:df:ff:ee:3d:9b:
         f6:eb:72:da:30:e0:38:8d:70:a1:d8:d5:d7:6f:99:a1:c3:60:
         3d:d9:0b:b0:8c:80:43:5e:40:bf:79:98:a1:cc:a1:b8:3a:5f:
         cb:39:eb:12:9c:06:f3:90:51:ae:67:d9:75:de:2c:02:5c:71:
         05:9a:48:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:15:11 2026 by rpki-client