Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
File:                     -c8El8-2fhYnKRCY8R8XhuuJ_1A.mft (raw, json)
Hash identifier:          vfOr7H4h+haH7cHabJXGi2egHcU/1yZJVd202mmCVmE=
Subject key identifier:   F6:BC:1D:4E:58:82:C2:74:2C:61:FF:CF:1D:DA:4D:81:E9:9B:28:21
Authority key identifier: F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50
Certificate issuer:       /CN=A91B5073/serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50
Certificate serial:       1141
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
Manifest number:          1A9D
Signing time:             Sat 18 Apr 2026 17:09:57 +0000
Manifest this update:     Sat 18 Apr 2026 17:09:56 +0000
Manifest next update:     Sat 25 Apr 2026 17:09:56 +0000
Files and hashes:         1: -c8El8-2fhYnKRCY8R8XhuuJ_1A.crl (hash: IXlNIL3cKkU0WrpWx3IUPnFU39qYlS28CkKD4ClrRDM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl
                          rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 17:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4417 (0x1141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5073, serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50
        Validity
            Not Before: Apr 18 17:09:56 2026 GMT
            Not After : Apr 25 17:09:56 2026 GMT
        Subject: CN=69e3bae4-58d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:75:87:22:e9:7e:a2:16:8b:69:f2:1f:77:23:
                    fb:c7:cc:65:68:0a:57:fc:b9:2e:7c:78:bf:b5:01:
                    1a:b9:10:5c:52:6f:86:b4:10:b4:d4:56:b1:8b:6a:
                    6e:57:d7:f8:3b:76:28:10:e3:52:fa:d9:71:e5:42:
                    14:0f:9c:23:cc:c0:f4:04:b1:b6:5b:7a:f7:d6:b0:
                    7b:27:e0:c7:a3:71:dd:df:c2:4a:fc:fc:96:f4:a2:
                    47:85:9b:27:94:91:47:35:00:12:e6:f0:d7:a2:31:
                    3a:3a:e7:fc:df:8b:b3:31:6b:c9:55:b6:3a:6d:4b:
                    cb:91:68:3c:02:77:00:ad:87:17:2c:1c:22:b7:a5:
                    69:58:2c:2f:4f:fe:78:fa:23:c0:fb:1a:d0:a5:e8:
                    7e:cd:eb:df:19:bf:7e:b3:ab:44:e5:52:6f:9a:a1:
                    7b:af:34:7e:ff:2c:5c:9a:6a:82:77:2d:84:04:21:
                    e7:65:f5:3a:3e:52:ad:eb:85:c6:94:0e:9e:83:f5:
                    82:b3:3b:7d:11:9e:fd:a0:29:0a:de:5b:65:43:ed:
                    c2:dc:82:b3:54:15:d2:81:0f:4a:bd:64:8e:84:c0:
                    86:d9:cd:a7:e5:83:d5:02:5e:c4:79:61:dd:da:a3:
                    23:49:26:bc:51:73:f4:16:05:7a:46:ee:37:79:70:
                    94:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BC:1D:4E:58:82:C2:74:2C:61:FF:CF:1D:DA:4D:81:E9:9B:28:21
            X509v3 Authority Key Identifier:
                keyid:F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a1:b4:f5:32:f9:ac:11:8d:3b:51:b7:e4:f6:a8:d4:29:13:
         2d:84:db:3f:f8:bd:74:6d:e9:63:13:29:b1:5b:bb:ee:67:9d:
         d1:d5:3a:20:ee:f8:37:e3:cf:69:a4:8b:f4:2f:d4:0e:2a:8b:
         e2:97:d1:34:34:a6:ec:bf:82:de:9b:b9:38:dd:cd:a5:38:66:
         9d:be:96:e9:56:be:d8:ec:aa:a7:d1:3e:44:05:a0:66:c9:3f:
         0f:d0:69:a6:69:ac:1e:c1:c0:14:61:cb:a1:73:31:d5:eb:ed:
         a4:7e:d0:19:53:fb:ea:91:9e:78:2c:47:8f:3b:3a:b2:c2:df:
         8f:1b:26:c1:2f:06:b3:0e:e8:8c:05:dc:1b:7c:4a:9e:48:6f:
         19:d4:94:fa:4e:1a:6e:ed:21:ed:89:15:3e:7b:0b:b6:27:d5:
         ff:8b:4e:71:50:9d:38:41:12:e8:a1:e6:5b:98:45:3e:75:fb:
         1a:b4:d0:11:7e:ff:e8:0f:c8:fe:3f:8a:05:2c:fa:52:04:69:
         37:5c:a1:68:5f:7e:51:5e:1a:f5:3c:2a:d6:5d:ac:11:1a:0e:
         2f:13:3d:71:2d:19:6a:1f:ce:54:2c:7f:f2:ab:21:32:02:d3:
         52:b5:07:7f:9b:28:f5:0a:4c:00:f6:7e:79:ba:5b:1f:8b:48:
         da:74:95:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:22:21 2026 by rpki-client