Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft
File:                     -gEnQNykk8ziA6-q3o68cZqsI7Q.mft (raw, json)
Hash identifier:          UfTc3Hkudsa8uj/uOZvJytVURt6rlfd/mqxHVDreFf8=
Subject key identifier:   A0:08:BA:4F:2D:52:56:34:AD:12:E0:FA:5C:45:92:9A:CF:A3:97:78
Authority key identifier: FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4
Certificate issuer:       /CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4
Certificate serial:       0232
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft
Manifest number:          022B
Signing time:             Fri 17 Apr 2026 02:29:30 +0000
Manifest this update:     Fri 17 Apr 2026 02:29:29 +0000
Manifest next update:     Fri 24 Apr 2026 02:29:29 +0000
Files and hashes:         1: -gEnQNykk8ziA6-q3o68cZqsI7Q.crl (hash: KnjfCx0iasT95vU6HhOzxS7/7jBKIZ+eFfG40KFr0Ks=)
                          2: D8674A0C0ED911EE8A4E0A23C4F9AE02.roa (hash: wRklcVHzTukLntsF0oQNN8I3iP1NB3z50x6Ry5FncJY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl
                          rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF404, serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4
        Validity
            Not Before: Apr 17 02:29:29 2026 GMT
            Not After : Apr 24 02:29:29 2026 GMT
        Subject: CN=69e19b0a-203b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fd:b3:31:ab:2a:e6:b0:35:64:e1:7d:cd:98:
                    ae:08:92:2b:3a:7d:00:3f:2a:a8:f5:04:99:b8:e0:
                    f1:8a:35:3f:38:d2:fc:21:6e:ba:fa:e6:34:30:2a:
                    fc:80:7b:e9:b2:1a:05:ec:4a:c4:a9:27:58:16:bc:
                    ee:21:10:14:d1:13:30:60:e4:d3:02:9c:29:c6:96:
                    01:8a:1a:30:11:32:91:08:36:9f:df:c3:ab:3c:e6:
                    b1:0d:ab:d8:c0:26:aa:84:db:1e:fd:4c:cc:f3:96:
                    66:0b:9b:da:31:62:35:2b:e2:f3:1f:9b:2c:ab:b9:
                    49:a7:12:ec:15:98:c7:a4:f3:21:0b:c0:1b:68:ca:
                    50:97:ba:9c:59:ce:92:b0:67:96:64:f4:7a:19:7a:
                    23:38:61:fe:62:db:b0:22:b8:46:ef:b9:bf:a5:b6:
                    bd:81:d4:ad:e5:19:3e:51:dd:6a:ae:9f:5e:46:ed:
                    96:bc:c3:02:54:b7:ab:66:9e:29:8f:44:5c:e4:6c:
                    68:fe:07:d9:75:66:29:db:1c:7c:60:e1:d5:eb:d5:
                    5f:d3:f8:42:dc:52:f3:40:d4:c4:53:53:f0:31:00:
                    3a:62:cc:63:99:98:b6:52:66:1d:89:01:1c:03:3c:
                    6b:04:f4:39:99:0d:c6:7a:3b:c8:72:95:40:60:82:
                    1b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:08:BA:4F:2D:52:56:34:AD:12:E0:FA:5C:45:92:9A:CF:A3:97:78
            X509v3 Authority Key Identifier:
                keyid:FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:3c:fd:2d:37:c1:a3:77:2e:23:69:3d:59:15:18:83:79:91:
         89:2d:25:1e:b1:f0:a2:24:1b:56:d2:ae:bb:ad:63:bf:e0:87:
         97:3c:31:16:fd:6e:02:98:c8:ba:fe:80:34:49:4e:bf:50:65:
         67:50:58:82:08:63:81:2c:26:e3:f2:0e:bd:dc:90:5b:26:78:
         1f:a5:d3:e8:ec:30:c9:d8:20:e9:cf:39:9a:2b:a2:26:3a:d5:
         d8:e4:2c:c8:bf:c7:84:5c:ff:b2:50:2e:ad:df:68:e3:13:90:
         88:ca:4a:57:20:4a:8e:4e:cc:4f:da:d3:ac:c8:7f:64:1b:7e:
         69:19:3e:7e:de:1e:b4:37:de:c8:04:fa:29:f3:73:9b:41:9d:
         db:94:6c:57:4f:cc:2f:7c:62:ff:b2:0d:e0:34:80:90:a1:3b:
         40:7a:94:0c:e5:05:81:a6:d7:7f:31:75:54:36:19:63:47:ae:
         cb:82:6e:45:42:38:6b:69:42:8f:02:85:d1:4d:f9:bf:ad:17:
         b6:9c:99:9d:b7:43:36:83:e2:ff:22:4f:2b:02:92:65:6c:92:
         42:d9:cc:6c:de:50:eb:3e:06:37:c0:f2:ce:c3:a1:ab:be:91:
         2e:02:9a:b6:51:43:fb:c7:c7:04:47:1e:f2:b9:20:24:06:73:
         ad:c0:3a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:00:17 2026 by rpki-client