Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft
File:                     b2FOWP6Tat901zb1OS3tX9FrdYc.mft (raw, json)
Hash identifier:          1W3Or1QiK4AVLzpZpG8uoNPw2lDKB2vHdqK72A1rFQ8=
Subject key identifier:   FA:94:10:62:13:79:E7:D4:6C:EC:15:48:E3:4D:B0:E0:11:2F:BE:C4
Authority key identifier: 6F:61:4E:58:FE:93:6A:DF:74:D7:36:F5:39:2D:ED:5F:D1:6B:75:87
Certificate issuer:       /CN=A91A9B3C/serialNumber=6F614E58FE936ADF74D736F5392DED5FD16B7587
Certificate serial:       0704
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft
Manifest number:          06FD
Signing time:             Thu 16 Apr 2026 21:57:57 +0000
Manifest this update:     Thu 16 Apr 2026 21:57:56 +0000
Manifest next update:     Thu 23 Apr 2026 21:57:56 +0000
Files and hashes:         1: b2FOWP6Tat901zb1OS3tX9FrdYc.crl (hash: CU3m8scT+ldn9KPwdHaL0/d2JHDUh4Aa1TlOwOg4Z9A=)
                          2: 00D8BE5286FC11EB8A95642DC4F9AE02.roa (hash: eh9GvMjf5qcu+nX/IaiauXLKIhr7vcYm5je02WvCPCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.crl
                          rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:57:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1796 (0x704)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9B3C, serialNumber=6F614E58FE936ADF74D736F5392DED5FD16B7587
        Validity
            Not Before: Apr 16 21:57:56 2026 GMT
            Not After : Apr 23 21:57:56 2026 GMT
        Subject: CN=69e15b65-edca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d6:cf:16:d0:ce:97:bf:4b:ae:6b:10:0e:ea:
                    4a:be:bc:5b:92:a5:8e:3c:a9:9d:b5:f3:1c:15:a8:
                    df:28:91:d1:bd:e9:ed:06:a6:2e:60:e5:ec:1c:8e:
                    c0:17:56:a6:c6:e8:7e:db:10:5b:09:12:02:5e:34:
                    1d:72:4e:bf:03:87:07:55:17:79:23:42:15:1c:a4:
                    0b:27:b6:79:af:26:53:f6:ca:27:fb:c2:13:63:c8:
                    02:ba:a3:8f:bd:18:44:21:71:8b:06:1b:a9:46:c3:
                    93:00:41:6f:e9:97:91:53:bd:58:bb:bc:b8:a4:0c:
                    29:4b:27:2a:12:5f:10:8b:5f:48:ff:77:f3:4f:9d:
                    39:3c:24:17:11:f5:02:69:5c:fe:03:97:2a:fa:26:
                    0a:88:b4:b9:a8:c5:ad:a5:c9:83:9e:6a:5c:8f:88:
                    e9:99:64:dc:c5:bf:f2:34:51:95:79:64:05:2f:c1:
                    f6:f2:4f:5d:43:4a:8b:2d:2c:41:12:85:10:d6:82:
                    23:4b:5f:f1:3b:55:24:3f:02:ce:e5:20:cc:52:45:
                    f8:6c:7c:92:b9:ac:1d:f4:94:31:a6:8f:90:92:08:
                    0c:42:df:ec:3b:99:81:ee:1e:41:ad:2f:35:39:e1:
                    5d:3f:6f:1b:ab:89:05:a2:c0:54:30:71:b6:b9:0f:
                    2c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:94:10:62:13:79:E7:D4:6C:EC:15:48:E3:4D:B0:E0:11:2F:BE:C4
            X509v3 Authority Key Identifier:
                keyid:6F:61:4E:58:FE:93:6A:DF:74:D7:36:F5:39:2D:ED:5F:D1:6B:75:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:43:fb:a1:db:c8:8e:98:66:63:f7:df:6a:8e:7f:08:2e:99:
         b1:c5:a7:a1:8f:34:b1:af:1d:84:73:6f:99:e3:78:20:8f:1f:
         ed:db:86:49:11:c9:ee:28:41:54:8d:62:66:e6:b8:4b:6b:2f:
         0f:7c:d0:20:95:95:d3:d8:ba:fb:a8:50:51:f1:3d:60:1f:15:
         90:7a:8b:db:7e:e9:4e:9c:69:a8:0f:b1:b0:b3:7b:1f:db:fb:
         21:22:8c:74:d8:a8:49:81:73:27:ff:89:91:bf:59:1c:07:30:
         76:64:00:36:98:03:3e:ce:be:0a:e0:16:5e:0c:ee:ea:aa:02:
         e7:2c:fe:e0:f6:ca:2b:4e:2c:ff:7b:31:9f:17:a8:87:48:13:
         8e:ff:32:bd:82:d8:02:23:e6:64:0f:8b:0c:9d:e5:26:bd:f8:
         0c:55:9b:fa:d8:cf:cf:68:97:88:83:88:4b:64:b0:13:4b:8a:
         94:a7:3b:27:55:7d:92:49:dc:fe:ba:80:35:8c:47:df:3f:aa:
         08:d8:c9:da:7e:95:70:ef:cc:9c:62:31:c8:e0:52:e5:8c:93:
         c8:48:dd:69:2c:19:c3:bb:44:ab:87:d7:23:41:a6:d5:c0:f3:
         92:c6:97:be:0a:98:85:ef:75:5e:61:48:26:fd:df:7c:f9:32:
         dd:b6:3c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:17 2026 by rpki-client