Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
File:                     _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json)
Hash identifier:          DwbB5ZtlzffSytaUVglGbKUAVtyhFEhQAY7aDgTwSVw=
Subject key identifier:   17:17:BA:31:91:B5:02:7B:D8:27:A5:BE:D5:1D:08:CB:63:50:70:3C
Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
Certificate issuer:       /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Certificate serial:       0B85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
Manifest number:          0AC4
Signing time:             Thu 16 Apr 2026 19:39:04 +0000
Manifest this update:     Thu 16 Apr 2026 19:39:04 +0000
Manifest next update:     Thu 23 Apr 2026 19:39:04 +0000
Files and hashes:         1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: 0wYdrukZc3bFNRDP2GNc/oMCQanIk9rSBsjaTiAK6Vk=)
                          2: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: YlPGKsDv7idOkXKbw0yX7xAS3MzGrLN5MJqNWuwPTSk=)
                          3: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: Ux1l+IgfbwyG+tZBBceLnM6t2MUyOqaW+9GorRGnVbc=)
                          4: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: KEYXaiiBWJFHMcfHnLqrqVdSkVFoqO7wRbUVLg149Lc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
                          rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:39:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2949 (0xb85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB6EB, serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
        Validity
            Not Before: Apr 16 19:39:04 2026 GMT
            Not After : Apr 23 19:39:04 2026 GMT
        Subject: CN=69e13ad8-0912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:69:5f:ba:a9:54:13:78:2f:f6:07:8a:8f:c9:
                    39:c8:8d:91:c1:ab:9a:19:36:ee:fb:03:d2:39:f7:
                    07:d1:79:56:34:a8:85:31:8b:57:39:43:53:f5:cb:
                    2b:5a:31:23:1a:38:cf:bf:e9:01:f5:04:c1:78:ce:
                    cb:32:68:b2:57:3b:e9:d0:95:29:4f:1d:0c:7e:e7:
                    72:68:7b:73:c5:83:0c:bd:e6:8b:6a:c2:91:cd:d5:
                    84:ad:a4:3c:9c:e7:e8:2a:c9:98:5a:da:5b:00:cb:
                    91:c0:d4:8a:66:b0:bc:12:53:e1:e7:1e:52:c1:a9:
                    d7:37:5e:55:c4:12:bb:f0:21:15:69:9e:e6:0b:13:
                    0a:f2:8e:49:d6:d0:fe:17:f5:f1:92:26:40:92:d6:
                    36:39:33:72:a1:14:b8:f4:b3:a3:18:8c:5d:4d:95:
                    85:c3:d3:b0:29:e7:c3:90:e9:fa:d3:68:ca:91:7e:
                    49:ca:1a:da:b3:cc:23:4e:83:8f:46:d4:92:9a:e1:
                    e7:ae:39:1e:7e:d1:6e:1c:f3:84:36:af:69:4e:a8:
                    88:c6:3a:9f:9e:d6:5f:f9:9b:a0:70:4c:c7:63:d4:
                    70:a5:f0:d2:4d:60:f5:c7:90:31:4b:61:f5:78:3e:
                    a7:f9:cf:df:0d:40:15:a2:78:54:06:df:f1:e7:1f:
                    af:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:17:BA:31:91:B5:02:7B:D8:27:A5:BE:D5:1D:08:CB:63:50:70:3C
            X509v3 Authority Key Identifier:
                keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:74:1f:ab:52:42:20:93:19:cc:3d:a3:3d:91:ce:24:4c:d3:
         74:35:5c:3a:e7:b1:95:61:3d:01:af:81:e2:5e:70:c9:54:50:
         b1:1d:68:7d:e3:f5:fc:35:84:6f:43:ee:2d:b8:bb:06:e4:e9:
         38:a9:80:93:1e:d7:1c:92:07:05:2c:a7:3e:5a:e1:e3:f2:a1:
         7d:b1:9e:a4:61:43:3f:a8:88:ad:c3:bc:02:03:d3:c2:05:ac:
         b1:c3:06:fe:96:aa:4e:93:be:f4:d2:68:9f:b2:bb:76:b0:32:
         28:5b:80:10:73:3c:1f:2f:73:71:df:19:09:1c:3e:43:56:60:
         c5:0f:75:77:43:97:8d:14:82:64:c8:59:cb:eb:21:67:35:14:
         47:b8:eb:7c:ab:7d:2f:91:53:10:0f:b8:ec:46:6f:16:6c:0e:
         58:b8:f9:bb:0a:11:aa:36:c6:c4:0d:6f:6c:04:2b:3d:4a:d6:
         b9:52:48:c9:ef:54:1b:fa:33:d5:76:e7:94:2b:f5:38:34:a3:
         d7:66:35:ef:a3:f3:1b:dd:cb:97:02:fa:61:56:41:b8:2c:95:
         7f:17:c7:dc:c1:8b:a3:5e:d3:78:10:7b:7f:6e:b2:a6:b8:3d:
         e3:e1:82:a1:15:cf:53:ac:60:3c:51:b0:68:d8:86:e8:e6:87:
         c3:42:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:20 2026 by rpki-client