Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
File:                     iJGVOO7eyDINXq9rHzKymCOreBA.mft (raw, json)
Hash identifier:          ywbIw97/DWFeW8/xH9G2nKxleuBUk1nQWI112IhDcYo=
Subject key identifier:   AE:2A:8E:E1:2B:9A:D5:9B:FA:10:42:C2:3E:72:10:2E:01:C4:2D:25
Authority key identifier: 88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10
Certificate issuer:       /CN=A91B4460/serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
Manifest number:          C2
Signing time:             Fri 17 Apr 2026 06:39:18 +0000
Manifest this update:     Fri 17 Apr 2026 06:39:18 +0000
Manifest next update:     Fri 24 Apr 2026 06:39:18 +0000
Files and hashes:         1: iJGVOO7eyDINXq9rHzKymCOreBA.crl (hash: RiFK76GSxW8q7LggihqNj1nxV2jJiMaslSmV2ypFID4=)
                          2: 7A85F9D2148711F0AF960528C4F9AE02.roa (hash: SY3BwzCftGVZ3723+P2mum60QxTDJL2Satr/FIkLJnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl
                          rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4460, serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810
        Validity
            Not Before: Apr 17 06:39:18 2026 GMT
            Not After : Apr 24 06:39:18 2026 GMT
        Subject: CN=69e1d596-6a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e3:80:5b:78:33:55:13:c2:64:c2:76:40:5c:
                    25:c7:13:8c:2a:02:34:e1:ef:ca:7d:91:dd:30:97:
                    b2:fb:68:8d:f5:35:a2:5f:a3:06:7f:54:e8:01:b7:
                    3c:52:30:eb:6b:d4:e0:8b:5c:b3:57:da:34:a0:ed:
                    4c:73:99:f0:d6:8e:99:f0:0e:a7:80:ba:59:83:13:
                    69:5e:a6:6f:be:0d:09:9b:50:14:f3:76:f7:37:d1:
                    b2:54:99:d1:4b:8a:b5:26:0d:d7:71:fa:0a:84:31:
                    d0:e7:ed:a4:a0:38:25:c0:ce:36:4c:f1:2c:2c:54:
                    4b:f6:ef:da:1e:63:50:ed:75:0b:4b:95:5b:be:5e:
                    7e:d8:79:a1:8d:a4:93:66:84:7e:32:10:96:99:c0:
                    a3:4b:6d:ec:25:2c:8b:f6:15:27:47:f5:3b:7d:16:
                    36:a6:83:1e:55:00:ea:0e:47:50:1b:6d:98:cc:91:
                    13:1b:4c:c2:d9:0c:66:46:83:d6:fd:b6:9e:6c:b3:
                    b2:67:4d:aa:b1:f8:97:d5:23:88:34:69:47:03:c2:
                    c7:ea:26:db:e2:8e:f4:6e:3f:d9:40:31:8f:2a:40:
                    93:e3:5c:81:a6:d8:4a:9b:db:07:9e:6d:a1:9e:ba:
                    ee:cc:f3:fc:6a:39:1d:86:e3:02:0a:d9:3c:67:b1:
                    aa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2A:8E:E1:2B:9A:D5:9B:FA:10:42:C2:3E:72:10:2E:01:C4:2D:25
            X509v3 Authority Key Identifier:
                keyid:88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f4:e0:de:2a:54:40:e8:99:20:0e:81:59:4e:76:8f:de:73:
         5f:23:fc:17:86:95:aa:c4:0b:40:46:7d:30:cc:6e:d0:b6:dd:
         4b:34:a9:ba:65:7e:fe:58:f5:d2:ea:dd:21:a7:a0:7d:ac:62:
         65:fe:09:f5:43:b1:3e:25:8d:b7:5d:69:df:23:78:6b:a6:57:
         0a:43:4e:a2:53:85:55:1f:1e:ce:ea:fc:61:0a:5d:6f:63:e3:
         b5:6f:09:51:01:7c:1b:7d:ae:52:5a:05:4f:b8:f2:8f:2f:7d:
         2c:25:8c:35:c3:8f:bc:81:8e:b4:eb:f9:76:9c:e8:2d:72:a6:
         eb:8a:45:d4:6c:83:75:ef:3b:28:69:60:75:18:4a:12:e3:01:
         e7:a2:b1:90:63:53:4c:00:f6:70:cb:fb:15:fc:79:bd:32:68:
         72:e3:f4:42:a1:15:32:48:a4:a9:34:27:6d:83:6e:67:2c:09:
         22:aa:63:e5:8d:8e:82:ee:fb:b4:31:9c:7c:66:85:89:d2:70:
         c9:78:da:12:a1:ee:89:e7:e9:65:ac:39:63:87:5c:c5:d3:d8:
         bd:97:55:0a:c7:67:9e:e9:d4:59:99:bd:8b:eb:95:d8:4e:fb:
         ae:4a:f9:da:90:b0:f4:41:4e:0d:64:92:93:77:a8:7a:03:a2:
         28:9d:13:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:03:54 2026 by rpki-client