Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
File:                     bRscXsmpziDouF2j9sHjzdQu-Dk.mft (raw, json)
Hash identifier:          nKn0PZ241KRc0ila94gCgBrcyMBWOHYzHPMKwtdEozE=
Subject key identifier:   9F:EA:C4:56:F7:DF:70:AA:BE:E5:52:56:27:02:35:A5:69:F8:23:0A
Authority key identifier: 6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39
Certificate issuer:       /CN=A91B4378/serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
Manifest number:          42
Signing time:             Fri 17 Apr 2026 08:08:29 +0000
Manifest this update:     Fri 17 Apr 2026 08:08:28 +0000
Manifest next update:     Fri 24 Apr 2026 08:08:28 +0000
Files and hashes:         1: bRscXsmpziDouF2j9sHjzdQu-Dk.crl (hash: 4ow27aqDSWssfsIyGsHgDx7VrM/cpJH+SA73K2rANy4=)
                          2: 21656302D9A211F09604B56168D3641D.roa (hash: J7YgpNqOcaYjOCo1OiB0WdtVs6cboNKClgYeNKdHnYI=)
                          3: D106F48C1D1911F19643AB4F103D8C67.roa (hash: Vnwa52V2rw4iQn/D3rDg54HehQEyfCOLvGurPGwR3Vs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl
                          rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4378, serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839
        Validity
            Not Before: Apr 17 08:08:28 2026 GMT
            Not After : Apr 24 08:08:28 2026 GMT
        Subject: CN=69e1ea7c-5f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7c:2b:d9:d0:50:f7:1c:c5:d9:aa:af:05:c8:
                    81:27:31:ab:e1:10:94:fe:91:39:76:77:21:b0:09:
                    46:09:1b:26:18:38:9f:49:3a:32:a9:b3:92:2d:e3:
                    d5:b9:49:e3:72:00:22:e4:64:4e:ac:7b:24:37:c0:
                    8f:bc:f6:39:3f:38:8f:b2:7f:f0:5e:82:0f:db:e0:
                    55:b6:61:59:2b:d7:a9:b8:66:58:99:24:e1:97:04:
                    ff:cd:98:1b:83:a8:3b:ba:06:d5:95:6f:b4:09:58:
                    fd:0c:0e:53:c0:e2:ec:65:f4:a7:a7:8c:c9:d2:89:
                    a9:36:0c:a6:7f:de:bf:c9:6a:bc:cf:3f:38:e3:23:
                    f7:7e:00:f4:2a:b5:20:34:4b:d8:ce:a8:51:86:a1:
                    86:0c:cb:92:a6:9b:e9:62:60:65:8c:f7:98:2f:b6:
                    f5:40:ec:42:37:6d:38:9f:f4:44:5d:91:e9:c1:19:
                    19:37:f1:b5:fc:e2:5c:4c:6b:a9:f4:29:e4:7f:26:
                    78:26:e3:06:c5:6b:73:28:50:a8:3d:56:f5:1d:f7:
                    74:e5:88:d1:3c:ac:65:a3:81:41:86:cb:be:63:3f:
                    85:f9:87:f2:b6:96:b6:9d:c5:10:09:eb:3a:b9:07:
                    fa:fa:64:4d:37:4b:18:2e:41:84:c9:35:02:ef:8c:
                    d9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EA:C4:56:F7:DF:70:AA:BE:E5:52:56:27:02:35:A5:69:F8:23:0A
            X509v3 Authority Key Identifier:
                keyid:6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:4b:5c:44:1f:76:41:20:8d:29:44:41:90:2e:e8:8f:69:85:
         b3:a0:f9:ed:56:61:d8:1a:ce:c0:e1:00:66:10:22:5a:fa:3d:
         27:f5:2e:cd:70:1b:75:32:62:b6:69:68:d0:2b:39:e6:75:63:
         e3:e9:fe:3c:2b:bb:c6:10:4b:4c:d0:83:fa:b2:88:56:9f:d8:
         3d:b8:78:fe:b9:52:a0:83:82:02:73:a9:86:e9:9a:cf:14:bf:
         d5:c5:8a:60:dc:75:18:cf:85:3b:e9:1d:d0:c9:23:43:a7:3e:
         12:ce:8a:a6:cd:06:e4:64:fc:1f:dc:c7:03:ea:a1:1a:85:bc:
         64:20:49:ad:fa:25:ed:f9:ad:8d:63:f6:4b:49:65:b2:d5:5f:
         3a:4e:2b:60:2f:a7:46:cc:15:a6:99:7c:31:62:f6:be:1a:ac:
         a8:64:d0:40:da:20:13:ff:49:8a:1f:5d:32:87:8a:5c:e9:db:
         19:eb:95:ed:3b:2a:ff:e2:ad:17:fd:ee:cd:7e:f5:bd:46:24:
         ef:5e:49:c8:ad:2d:44:43:ac:74:0c:32:bf:4f:5f:48:a1:a7:
         6f:ea:0c:ff:bb:7a:0b:b8:16:48:77:ad:42:43:82:42:e3:d0:
         2f:b7:62:16:38:e7:ba:db:db:2c:6b:92:78:a5:e9:09:f4:63:
         db:3b:aa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:55:03 2026 by rpki-client