Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
File:                     saGMIGd1j-jJIZgeixH6MI5iaTs.mft (raw, json)
Hash identifier:          /KNXRotybMgGO9imugnUG6Zekk+cvLlOQ3vzdMdin7Q=
Subject key identifier:   54:22:A8:94:ED:86:0C:29:95:AE:DB:BD:34:68:D4:EF:24:47:6C:0A
Authority key identifier: B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B
Certificate issuer:       /CN=A91AAAF2/serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B
Certificate serial:       0873
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
Manifest number:          086A
Signing time:             Thu 16 Apr 2026 20:36:26 +0000
Manifest this update:     Thu 16 Apr 2026 20:36:25 +0000
Manifest next update:     Thu 23 Apr 2026 20:36:25 +0000
Files and hashes:         1: saGMIGd1j-jJIZgeixH6MI5iaTs.crl (hash: geGKPvOovo/UXWIviuNsL5hcVESrOrhd/qZu8DcW+OQ=)
                          2: 73D3A6E0F72011EA8776EC28C4F9AE02.roa (hash: 77hSYKp5nGJ1Gv+W5zbAX2pAyRbbfZvgk88uHWf8l8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl
                          rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2163 (0x873)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAAF2, serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B
        Validity
            Not Before: Apr 16 20:36:25 2026 GMT
            Not After : Apr 23 20:36:25 2026 GMT
        Subject: CN=69e1484a-2b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:31:e5:e5:c7:ba:c1:c4:37:96:cd:7c:6c:7a:
                    cb:6e:c2:6b:ae:f5:ad:6a:7a:89:59:da:37:2c:3c:
                    62:cb:f5:76:4e:6b:5c:c2:1a:00:bb:f1:41:dd:5f:
                    04:f9:53:12:02:0b:4c:be:05:3f:5f:6a:16:d6:4a:
                    68:b7:90:b1:77:bb:79:e3:a0:e3:49:a7:e0:0f:bb:
                    66:3f:83:8c:7e:e2:cd:07:bc:5b:af:c6:5f:62:c1:
                    07:79:1b:53:31:80:cd:73:ac:6c:be:c7:4e:9a:40:
                    63:66:dd:ff:bd:59:10:5b:c6:68:ce:9f:b2:07:0e:
                    96:39:c3:c0:f3:00:9d:1b:9a:b2:c6:2b:f0:b6:12:
                    e9:1b:c7:54:f8:b3:42:45:4f:a7:19:6b:8d:8a:0a:
                    3c:2a:f6:8c:40:22:0f:c9:23:64:9e:f1:ba:fd:15:
                    f9:09:d4:02:5a:26:e9:f4:c9:51:7b:ed:03:eb:1c:
                    df:90:7c:70:9b:bb:3d:48:fb:1a:86:59:5c:52:b4:
                    02:91:2c:3e:1b:72:f2:0c:b1:c7:43:3b:fa:75:6c:
                    43:15:4b:d6:24:b4:9b:83:9b:0f:75:d5:76:52:d9:
                    9c:ad:ea:cc:c3:c2:5e:01:c4:e9:4e:6d:9a:a5:b2:
                    44:dc:bb:a2:79:f3:ef:b2:67:f7:c7:ec:fd:a5:5e:
                    89:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:22:A8:94:ED:86:0C:29:95:AE:DB:BD:34:68:D4:EF:24:47:6C:0A
            X509v3 Authority Key Identifier:
                keyid:B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ee:35:fe:72:af:a1:04:e3:83:c3:79:dd:5a:fd:9e:11:19:
         3b:a7:6a:1f:5d:0f:80:0a:9b:69:9f:71:40:3f:90:47:b2:89:
         b8:40:f5:87:07:ee:12:e0:b3:78:2f:4f:29:49:71:48:34:2d:
         6f:95:87:a1:a7:c9:2d:b1:25:23:c0:c6:91:1a:82:13:ac:3a:
         3c:7c:43:f1:32:92:de:4c:a7:22:bf:0b:73:74:89:c7:4c:5b:
         42:01:75:29:c6:7d:ac:ad:8f:94:38:77:93:a7:70:fc:48:e0:
         25:52:a5:9f:6e:03:ce:17:d0:d5:ec:86:02:a4:41:90:90:54:
         7d:83:43:04:30:0b:35:60:d3:a3:a2:ea:c3:39:73:81:ae:90:
         4f:f0:66:17:8b:38:1a:9c:32:5f:bd:ea:91:89:e3:2d:12:94:
         89:54:78:33:08:c6:c9:f2:46:bc:3b:23:e3:23:66:f7:09:4a:
         9f:41:7b:e2:67:91:8f:05:13:87:1a:93:ef:26:7c:13:e9:41:
         01:fe:00:ce:1b:c6:9f:8e:64:b3:8a:24:2d:45:b9:c4:2a:43:
         d1:72:c1:74:c3:7f:f8:37:7b:b4:99:4b:44:94:7d:d1:0e:fe:
         f6:8c:7b:7b:dd:18:c0:9b:1d:b9:1e:28:48:3d:cd:74:5d:5b:
         1c:57:28:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:01:44 2026 by rpki-client