Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
File:                     -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json)
Hash identifier:          v3WhwU0ciXBT+DJ+f+o2HJdgxvgGo3Q8Bjh/EV8k83E=
Subject key identifier:   8C:3E:49:C1:41:15:80:B2:26:23:11:56:04:A8:77:92:F7:65:1B:A4
Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9
Certificate issuer:       /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9
Certificate serial:       062B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
Manifest number:          0619
Signing time:             Thu 16 Apr 2026 22:46:14 +0000
Manifest this update:     Thu 16 Apr 2026 22:46:14 +0000
Manifest next update:     Thu 23 Apr 2026 22:46:14 +0000
Files and hashes:         1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: dCgcOSehm2O5iGtNVeLgnC/J7gjuq2KfrLiC7lozMUM=)
                          2: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: KPX0rK0OaNteIMx84M4NZOMyO+pLPu817uzNmJdQ98A=)
                          3: ABCDCC4EE16711EEA88FAE64C4F9AE02.roa (hash: esfW9wCIFip8anOs41Rq+ZFPyJj6Borr2LXsT9A2eN4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl
                          rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1579 (0x62b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9
        Validity
            Not Before: Apr 16 22:46:14 2026 GMT
            Not After : Apr 23 22:46:14 2026 GMT
        Subject: CN=69e166b6-4fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:0f:1e:2b:6a:ae:3e:cc:e0:cd:dc:34:20:06:
                    61:6d:20:3c:8f:d0:ba:a0:a7:b7:db:32:65:1c:cd:
                    24:0d:fe:23:b3:a7:80:62:9d:b0:bf:45:02:63:de:
                    a1:0a:f6:45:c0:ed:05:96:54:95:b4:e0:b3:da:40:
                    9e:31:2f:c4:db:e3:68:93:a7:cf:93:b8:f0:37:e2:
                    2c:c5:14:32:44:fe:43:2d:da:93:e7:83:37:e8:a2:
                    41:3b:98:da:7a:88:e1:fd:8b:cd:be:d6:0a:53:ac:
                    f6:78:5a:a7:4f:e4:c4:8e:93:19:71:c0:4f:e8:5b:
                    eb:e0:d9:47:a0:40:ba:bb:2d:81:72:07:09:ca:e5:
                    9e:23:62:b5:63:20:6e:7c:12:db:20:30:2b:ae:4a:
                    72:82:fd:d5:94:fe:98:ed:4a:b3:41:28:06:96:16:
                    c6:67:8e:a8:56:55:6a:4f:12:2b:26:a3:82:65:8f:
                    51:05:5b:4d:04:55:86:87:4a:4f:b2:0e:10:6f:8f:
                    24:2b:c1:47:09:51:88:18:e6:3f:1c:d2:7f:04:29:
                    b3:a9:92:95:ab:93:81:bf:f2:a8:65:0e:be:d2:7b:
                    80:9f:9a:da:fd:30:24:e3:9f:01:8d:a7:f5:68:46:
                    c6:50:e8:7c:e6:e2:bd:1c:20:06:c0:ea:47:5c:85:
                    60:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3E:49:C1:41:15:80:B2:26:23:11:56:04:A8:77:92:F7:65:1B:A4
            X509v3 Authority Key Identifier:
                keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d3:00:f9:c1:4d:02:79:fc:1b:20:4b:60:d2:22:d5:d9:a2:
         33:d1:bc:63:e2:ed:f8:cb:46:b2:4d:8a:74:c9:3a:cf:22:4b:
         2f:18:b6:4a:95:d2:b1:04:b0:06:ac:bb:f2:f3:74:6e:8e:d0:
         ff:63:26:33:70:c8:18:61:75:75:08:d7:b2:4f:03:c4:0a:3e:
         27:c0:bb:a3:68:25:e7:9b:fc:07:3e:ba:c6:2b:2e:ea:73:df:
         2a:e8:7c:90:be:ab:e1:43:be:a4:d5:1a:94:1a:2d:a5:47:a4:
         00:2f:a2:aa:24:bb:4a:42:4a:60:82:96:97:ab:63:52:f9:da:
         c0:01:93:d8:4a:5c:c6:27:c2:cf:a9:c5:bd:7c:66:75:88:18:
         dc:8e:f5:29:42:9c:ff:bd:ca:97:c3:67:9f:58:7c:fd:54:a9:
         29:3b:ec:31:a8:23:77:3a:e2:46:b6:a0:65:0a:a7:83:fb:aa:
         e2:44:52:8b:7d:2d:4a:57:ce:04:af:d8:12:f9:52:bb:9e:27:
         f9:f0:a5:e9:21:fb:fc:fc:cb:3d:24:e5:ea:5c:0f:85:7c:06:
         3c:30:30:9f:d5:a3:c1:7b:59:f4:9c:74:72:1e:9b:4e:84:09:
         72:b7:47:f5:9f:e6:85:ae:44:92:76:42:81:65:7f:f6:f9:f6:
         2e:0e:fd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:07:16 2026 by rpki-client