Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
File:                     pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft (raw, json)
Hash identifier:          7WVwx18oNhMEZu693ZvgYkQva6tY0PtL30jKqh+MFAE=
Subject key identifier:   CE:F0:97:FC:38:CE:94:5B:78:0E:BB:7F:3B:52:05:D0:A4:85:14:ED
Authority key identifier: A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD
Certificate issuer:       /CN=A91A995E/serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD
Certificate serial:       DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
Manifest number:          D8
Signing time:             Fri 17 Apr 2026 06:25:16 +0000
Manifest this update:     Fri 17 Apr 2026 06:25:15 +0000
Manifest next update:     Fri 24 Apr 2026 06:25:15 +0000
Files and hashes:         1: pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl (hash: 1NLwXCq+MiL/gBax1ZI7XgSFb0nmJBSAYoVOQAh+8NU=)
                          2: B3E4D03621B111F089CE216DC4F9AE02.roa (hash: VaEKIuiVVa+34T0EyOyaQnSXrGSJwgYFoH12QYWKH4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl
                          rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A995E, serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD
        Validity
            Not Before: Apr 17 06:25:15 2026 GMT
            Not After : Apr 24 06:25:15 2026 GMT
        Subject: CN=69e1d24c-7238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ba:32:2d:16:74:f6:0d:96:66:2c:48:a1:bd:
                    ea:91:ff:9c:ad:e4:98:e5:45:c4:5d:cf:83:15:62:
                    f0:2a:32:fa:97:c9:98:a9:9d:86:d3:1a:29:30:e9:
                    2d:c3:ce:b6:28:c6:56:06:22:4d:f3:b6:e4:df:be:
                    f8:ad:02:69:8e:82:59:dc:f3:f3:7f:1e:18:10:98:
                    23:f9:2b:77:d8:72:37:96:58:80:1b:6c:06:29:b4:
                    09:2e:5d:b8:05:62:90:6b:d0:6a:12:e0:06:d8:19:
                    99:7f:da:3a:bb:12:70:e7:2f:d1:17:4a:9a:3a:a6:
                    61:0c:8f:de:86:34:cc:41:3d:bd:92:44:83:dd:60:
                    40:2c:b4:d8:28:00:6e:16:2b:3e:7e:52:e3:8c:ec:
                    68:5d:ec:07:a3:0a:f3:78:e7:f4:82:01:c4:fc:5e:
                    82:2f:69:b8:07:da:ea:a8:ff:af:b5:62:10:a0:cf:
                    2c:2b:83:97:9d:33:7b:8d:51:4a:19:d4:85:76:ba:
                    bc:63:98:f1:60:88:8b:13:13:d9:09:e8:ff:a6:05:
                    85:98:da:06:f1:d4:11:8c:f9:6c:fe:53:bd:dd:fa:
                    13:8b:5e:ca:34:eb:4b:82:2d:8f:13:1c:5a:a0:57:
                    39:1d:5e:72:49:88:a1:d3:73:3a:13:bc:bd:e2:c2:
                    40:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F0:97:FC:38:CE:94:5B:78:0E:BB:7F:3B:52:05:D0:A4:85:14:ED
            X509v3 Authority Key Identifier:
                keyid:A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:7f:42:ee:1f:9d:72:27:b8:08:49:70:a7:14:74:99:12:fd:
         e5:f6:b8:8c:4d:23:36:41:f8:b8:8d:6b:03:d8:6c:e0:7f:c3:
         17:53:2f:18:84:4d:97:0e:b8:2e:69:fc:2f:c4:49:a0:6f:40:
         30:f8:dd:ce:7c:bd:5b:ce:96:45:57:1c:46:9d:7f:e4:95:76:
         f4:02:44:cf:b8:6d:a3:13:18:41:85:c8:bb:ce:36:c1:7d:31:
         c3:e1:33:1b:24:d8:d5:97:51:78:cf:9f:3d:59:fe:ad:2e:f2:
         4a:3c:02:5e:47:b6:f9:95:1a:8e:b8:5d:06:7b:0e:83:b2:3f:
         f8:bf:17:b1:8e:00:b2:a6:3e:13:54:7e:47:d8:a7:6d:ce:c0:
         bc:d2:d0:2e:7a:4e:c8:e9:bf:0b:19:ea:66:39:67:9a:26:82:
         17:08:4b:11:a0:69:27:99:8a:9d:9c:e2:f2:ff:8a:49:4a:cb:
         a8:bf:45:49:ae:f7:4f:34:09:03:e2:57:13:45:6f:f4:9f:8d:
         2a:a1:f3:90:bd:a8:80:ae:20:09:db:4f:01:a6:84:5f:7e:1e:
         46:d6:a4:48:d4:34:6e:60:06:9e:74:36:bb:8a:1a:54:31:7e:
         35:90:8c:9b:33:e6:2a:72:04:e8:c4:84:c6:a1:ac:0a:0e:da:
         c7:38:f7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:32:09 2026 by rpki-client