Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
File:                     9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft (raw, json)
Hash identifier:          CuuNN9lhnbJx7W3H+tM+nRsTtXsI3WIfbe0jeDyktXU=
Subject key identifier:   C0:67:A6:F0:FD:E4:85:C8:EB:69:F5:BA:8D:30:73:69:FB:A0:17:29
Authority key identifier: F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA
Certificate issuer:       /CN=A91AF3E2/serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA
Certificate serial:       0147
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
Manifest number:          0140
Signing time:             Fri 17 Apr 2026 05:04:52 +0000
Manifest this update:     Fri 17 Apr 2026 05:04:51 +0000
Manifest next update:     Fri 24 Apr 2026 05:04:51 +0000
Files and hashes:         1: 9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl (hash: nKyknPnIeNsU4d0KyBXYI6yDqklPFdvF505Prbr/Qqc=)
                          2: 50D93D94459A11F095E57A12C4F9AE02.roa (hash: jFQyp9A0jxh8bH4gGrf9ly/lEjVIKy3LPj4bj2YPMKc=)
                          3: 3B5B829EABF511F08C00BC38C4F9AE02.roa (hash: hmChBrVE0EuRQzKDJ7uKwkJY+XVRktN6YzaNk+odT7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl
                          rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF3E2, serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA
        Validity
            Not Before: Apr 17 05:04:51 2026 GMT
            Not After : Apr 24 05:04:51 2026 GMT
        Subject: CN=69e1bf74-0bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:91:0e:cc:32:3c:ad:95:20:d3:06:da:59:d4:
                    d0:b5:ea:61:bc:68:7d:79:20:ca:71:0a:df:05:26:
                    ae:18:3f:c5:f1:ad:71:90:55:05:bc:ff:fe:63:92:
                    b4:08:f1:46:e1:02:f5:08:ee:65:00:12:cd:0f:d4:
                    67:12:15:4c:78:a0:b3:10:9c:63:64:97:c9:4d:a5:
                    7e:3b:70:d4:6d:7d:05:eb:ef:58:f1:d5:29:b0:62:
                    38:31:5c:cc:c3:2e:57:06:56:cc:eb:14:16:39:17:
                    b9:30:00:b6:1d:5e:c0:81:2a:0f:e1:1e:b3:3e:27:
                    6c:ad:e8:c1:ba:0f:3f:00:61:b9:0e:06:f7:75:dc:
                    c7:72:a0:cc:3d:98:46:e6:8a:a6:91:36:01:50:1d:
                    92:ad:84:bc:8d:a7:19:c1:43:62:01:37:25:05:9f:
                    1b:0e:fd:2b:58:87:73:0c:95:de:7c:6e:1b:2b:7a:
                    54:20:5e:2b:4b:7a:c1:93:34:99:a3:fd:23:93:cb:
                    18:ae:39:fd:9e:db:07:47:6d:17:2c:69:fd:7d:86:
                    80:b7:62:3d:66:25:c7:26:94:e7:cc:6a:37:d9:dd:
                    8d:a8:89:93:8a:03:58:94:b6:d6:30:46:6a:41:a0:
                    9e:ae:20:ac:07:17:ee:6c:a0:17:a9:5b:78:b9:73:
                    4a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:67:A6:F0:FD:E4:85:C8:EB:69:F5:BA:8D:30:73:69:FB:A0:17:29
            X509v3 Authority Key Identifier:
                keyid:F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:61:1b:2e:08:47:ba:ec:7b:9b:80:0b:c5:7c:a3:34:0f:23:
         ba:fd:f8:9f:ea:7b:90:44:fd:2c:66:e9:73:03:b2:6b:1a:97:
         76:83:f1:04:12:df:14:7a:fd:9a:94:9b:b5:e8:67:19:6b:57:
         92:5a:a6:c1:02:57:15:12:16:ad:b6:0d:e4:95:09:0d:42:6c:
         08:69:84:97:08:11:d2:56:c7:ed:d5:89:57:f9:7c:6b:8b:d0:
         5f:b4:b6:1f:b9:17:36:b9:f4:e6:76:cd:d3:ac:a6:79:0c:2e:
         3b:49:92:81:f0:a5:e7:f3:11:72:a6:46:19:d7:42:49:62:dd:
         6f:b2:91:ed:55:03:03:9f:0a:c1:26:ed:1b:a7:3e:f8:00:bc:
         5a:4d:08:d9:b7:40:e2:20:01:ee:ae:02:05:c5:df:94:6b:80:
         96:46:04:2f:19:5f:a2:4f:10:85:76:ef:4c:c3:ec:4a:78:17:
         9f:b1:e2:f2:b6:88:fa:d9:63:8a:da:4c:36:4a:a7:48:8b:ee:
         dc:88:ef:98:f1:d4:13:00:c3:95:16:a8:4b:be:86:6b:46:0b:
         ae:97:62:4a:ef:b6:aa:4e:e8:96:df:73:79:83:c8:f8:73:a4:
         78:1a:51:0e:8e:37:c7:64:46:4a:a5:9f:48:e7:d6:4d:77:bb:
         04:70:da:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:09:02 2026 by rpki-client