Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
File:                     d-lG0L0pqiF78bHFrwsxU2wUenE.mft (raw, json)
Hash identifier:          1ICJhJPnsI6hk8U/lXg4seP/AvhFZMuAx2rB4aHW2ZU=
Subject key identifier:   64:01:59:63:33:1F:F2:C2:67:AC:96:3D:F7:24:2B:47:E5:F5:6E:6B
Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71
Certificate issuer:       /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
Certificate serial:       3536
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
Manifest number:          3530
Signing time:             Thu 16 Apr 2026 15:14:33 +0000
Manifest this update:     Thu 16 Apr 2026 15:14:32 +0000
Manifest next update:     Thu 23 Apr 2026 15:14:32 +0000
Files and hashes:         1: d-lG0L0pqiF78bHFrwsxU2wUenE.crl (hash: Nn8PLt2Jz/+K+OU4UZDWEv08MlFiPM6TfwzU8+B34lc=)
                          2: 92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (hash: xDho51ddKsKnW1mieTz7ANylai7wvJBRqnmFiSl8KPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl
                          rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:14:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13622 (0x3536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B352F, serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
        Validity
            Not Before: Apr 16 15:14:32 2026 GMT
            Not After : Apr 23 15:14:32 2026 GMT
        Subject: CN=69e0fcd8-653e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e4:1c:71:15:b3:2d:c1:0e:c7:8b:78:e0:dd:
                    e5:8a:2b:0a:a4:ad:f1:80:e1:13:11:2e:2d:d5:21:
                    2f:24:fb:48:fb:14:23:a0:04:b7:d9:64:33:5b:8e:
                    af:c0:61:7e:ce:da:91:26:a9:68:46:78:27:b0:d2:
                    e4:37:a2:79:bb:c6:4e:75:21:e7:bb:ea:d7:cf:fd:
                    d3:67:43:6e:54:f9:13:7a:ec:4e:c5:85:6f:a2:ff:
                    37:00:0b:48:39:68:e9:02:9e:bd:b7:98:e0:68:6d:
                    a7:fc:4e:4c:cf:9d:d3:b2:47:36:77:f6:7f:c0:d3:
                    63:d9:13:eb:3c:72:d2:15:73:8d:2c:b8:d6:2a:48:
                    1d:57:1a:33:ef:49:cd:92:21:d4:d8:39:0b:61:28:
                    36:05:6d:fc:63:b3:fb:50:c1:76:59:e0:be:b5:15:
                    79:22:22:48:16:8c:5f:54:1b:fd:ba:1f:50:7b:d0:
                    97:30:07:13:ca:b0:b1:6c:27:4b:48:47:fb:39:7b:
                    af:2c:a6:bd:65:01:34:e4:35:06:17:9f:bd:4d:38:
                    f2:7d:de:3f:af:f7:01:79:55:7f:54:15:45:e1:1a:
                    a8:71:09:0a:e7:06:1c:bb:45:ba:69:f2:2c:73:3e:
                    d3:18:82:8c:75:f0:0e:f9:a8:9c:d7:7d:c1:5f:d1:
                    d6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:01:59:63:33:1F:F2:C2:67:AC:96:3D:F7:24:2B:47:E5:F5:6E:6B
            X509v3 Authority Key Identifier:
                keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:74:45:0e:02:6a:f7:72:37:11:e6:79:9c:ab:9a:9e:56:b2:
         58:8d:2a:d7:09:e7:e7:34:32:92:89:f7:58:dd:3b:5e:dc:77:
         48:18:66:e5:d4:37:34:c0:36:ae:04:67:04:79:df:cb:cd:34:
         22:01:46:13:b7:b7:dc:1c:1b:3d:57:03:42:88:03:d4:60:0f:
         00:a4:86:ca:d6:58:d8:a1:16:17:1e:02:66:ca:46:66:13:a7:
         cc:55:b7:39:d8:db:41:22:c7:bf:e0:8f:21:56:43:7b:a3:1f:
         cf:1e:c6:b9:6b:6e:4a:0c:bd:4d:ce:9c:74:37:cf:e5:22:17:
         26:69:94:97:25:b7:31:03:44:f9:2c:69:ef:7a:97:ff:47:dc:
         36:d0:ab:ec:91:38:06:28:e9:63:51:24:a6:55:01:7d:52:f1:
         22:e5:68:cd:7d:d7:9a:0f:e4:b8:8c:3a:ea:a3:a2:c0:5c:1d:
         8e:be:b6:16:23:fb:a0:65:be:ba:b3:30:c6:b1:34:2c:db:08:
         6e:73:fb:92:b2:f9:04:9c:7e:75:40:a0:3a:4b:39:a9:c4:1a:
         41:a6:d0:cf:30:aa:92:1c:ec:d5:74:1d:4a:90:5f:ae:ad:ea:
         74:3b:36:31:39:69:5b:2c:5a:af:d1:47:96:b5:33:ed:a4:29:
         03:79:7c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:50:58 2026 by rpki-client