Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft
File:                     pSvwKHcZGUlxLT2tKdSreid57EM.mft (raw, json)
Hash identifier:          7VN5itoTU5gPg9eLk0jLMVRh8f0yOicEvZVktXxas94=
Subject key identifier:   D7:BA:8A:A3:61:70:FB:E9:34:3F:4E:60:06:D1:E3:23:CC:53:12:A7
Authority key identifier: A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43
Certificate issuer:       /CN=A91AA618/serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43
Certificate serial:       015B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft
Manifest number:          0153
Signing time:             Fri 17 Apr 2026 04:49:14 +0000
Manifest this update:     Fri 17 Apr 2026 04:49:14 +0000
Manifest next update:     Fri 24 Apr 2026 04:49:14 +0000
Files and hashes:         1: pSvwKHcZGUlxLT2tKdSreid57EM.crl (hash: m1ApJWo3yag9iuQEfT+hbDGmdrBZRd4nrTbMwJ70Vug=)
                          2: 88F562E83DAD11EFAA46E417C4F9AE02.roa (hash: HG3oXa5WRW8n13BJ73mfkhHNv2TpvyHSb+awWkOaGA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl
                          rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA618, serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43
        Validity
            Not Before: Apr 17 04:49:14 2026 GMT
            Not After : Apr 24 04:49:14 2026 GMT
        Subject: CN=69e1bbca-84b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:14:81:e6:27:0c:9a:f9:83:80:5b:59:9b:2d:
                    dc:77:1a:7d:9a:51:1a:7b:dd:2f:c0:41:13:2d:df:
                    2f:1e:09:81:07:9d:71:84:8f:c7:16:f5:e3:02:5b:
                    52:b2:1c:3c:35:01:55:ae:9a:72:b8:e7:aa:c0:3a:
                    18:02:44:66:d4:63:15:78:25:68:bb:43:b4:20:b1:
                    8e:8f:5a:3d:3d:71:c9:6b:dc:48:aa:b2:e0:98:0e:
                    b6:47:f5:63:ba:38:2b:69:73:f9:95:a9:7b:61:f2:
                    8b:7b:2c:b3:3a:2e:8c:a5:47:69:3f:73:1e:2e:6c:
                    93:bb:3d:45:df:b2:06:99:83:2a:ae:ee:73:4f:a8:
                    e6:70:30:da:26:b6:94:fb:e1:60:2a:2d:0e:4e:a6:
                    24:42:a8:fc:c9:3d:16:a6:31:da:95:f4:3c:92:a5:
                    15:5f:fe:2f:f7:1f:52:33:8c:a2:e9:3d:ac:81:cc:
                    7f:1d:13:0e:be:1c:4e:e6:a7:5d:88:13:3c:32:8e:
                    ad:a6:60:85:4e:d1:26:89:da:79:8b:ce:48:de:8b:
                    26:28:0f:dd:27:ca:34:42:84:fe:7b:2a:90:a3:43:
                    40:25:db:2f:62:ec:c1:89:5c:15:81:37:11:1c:82:
                    b6:da:80:22:8c:65:99:f0:aa:c9:45:3c:88:c4:ca:
                    9d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BA:8A:A3:61:70:FB:E9:34:3F:4E:60:06:D1:E3:23:CC:53:12:A7
            X509v3 Authority Key Identifier:
                keyid:A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:39:ce:8e:ff:5a:ad:cd:6c:d9:30:9c:c1:7f:91:81:da:c9:
         b6:8a:54:c0:f9:15:c4:7c:2f:5d:42:25:86:48:e4:9f:84:a4:
         d8:e4:13:dd:25:87:30:bf:fa:f6:53:23:e5:3b:8f:33:08:91:
         69:0b:0d:51:fa:de:61:36:9b:e5:1a:3c:fb:03:30:6e:77:ee:
         74:f2:8d:a6:25:d9:25:bb:54:73:86:09:da:6a:73:a5:ee:1d:
         5e:b8:46:d4:d2:1e:05:ce:12:bb:c4:af:66:48:4c:78:29:5a:
         0f:51:e7:7f:16:f0:bb:d3:d7:49:66:a8:4c:c1:b4:95:ff:24:
         67:18:df:e4:33:c8:5d:0c:fd:13:96:a9:33:9b:68:57:21:b3:
         b2:52:02:41:f2:b3:3f:5c:d9:ad:d4:89:59:d7:27:e3:8f:89:
         82:4e:65:7d:cf:1e:02:95:1e:77:ee:1f:2b:11:f3:68:6b:1c:
         60:25:e3:eb:b8:ff:29:8f:55:fd:4b:b9:5e:4e:09:b4:04:80:
         bb:a0:f1:9f:e8:3b:91:a8:98:bc:e2:25:9e:f7:56:e5:b7:e4:
         c0:df:09:5b:69:a1:b3:f6:ef:2d:cd:ed:6e:6e:2b:6b:d7:6b:
         2e:51:eb:cb:01:90:95:65:6c:df:73:e2:2d:8a:7f:6c:2d:ff:
         09:82:37:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:21:54 2026 by rpki-client