Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft
File:                     -6JuPNfggZmzoY8WNmp1fwTN8FQ.mft (raw, json)
Hash identifier:          agyekDT1GtsDvAhAU68CL5/FDTwuByBuJ7c0KRH0jdc=
Subject key identifier:   F5:9A:5F:2B:F4:BE:D7:7B:84:08:93:6F:A3:77:62:99:F2:0E:11:B9
Authority key identifier: FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54
Certificate issuer:       /CN=A91B7709/serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054
Certificate serial:       0121
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft
Manifest number:          011D
Signing time:             Fri 17 Apr 2026 05:29:31 +0000
Manifest this update:     Fri 17 Apr 2026 05:29:31 +0000
Manifest next update:     Fri 24 Apr 2026 05:29:31 +0000
Files and hashes:         1: -6JuPNfggZmzoY8WNmp1fwTN8FQ.crl (hash: 43A9f+oHkCFVDw21YoaDcir35kFwAYbktqOrjOZ171Y=)
                          2: 25FFA3768BB711EF9C572630C4F9AE02.roa (hash: w+zyCkFV0FZRY4/3WWU9VNMt7oZyJ+HRThPvvwfkALE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7709, serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054
        Validity
            Not Before: Apr 17 05:29:31 2026 GMT
            Not After : Apr 24 05:29:31 2026 GMT
        Subject: CN=69e1c53b-700c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:01:82:7c:98:73:18:7c:15:d3:d9:b4:d9:85:
                    42:8c:8a:52:cd:87:3c:02:27:92:1a:b0:ad:10:00:
                    eb:0f:30:de:0e:35:37:76:14:23:5c:61:e3:f3:b1:
                    b4:7b:5e:a2:c8:ba:c3:95:ea:c3:15:cf:b8:cd:cf:
                    9f:df:3f:e2:b8:a6:4e:4a:a9:83:a0:e9:81:90:c8:
                    8c:e3:fa:2d:ef:18:2b:60:52:bf:d0:5d:7f:f3:b8:
                    7a:f0:c4:14:5c:0c:b4:f7:aa:c9:ed:5d:1b:9b:ae:
                    38:6c:91:36:36:a4:7d:12:e4:81:3e:f6:13:fc:e9:
                    81:4e:42:64:5b:1e:09:2e:e2:58:82:b1:45:8c:27:
                    cc:07:83:e4:36:cf:1e:8c:c4:1a:75:25:cc:34:ef:
                    ed:90:c0:92:a2:1a:aa:60:48:83:b9:d6:44:b7:5b:
                    4b:b3:38:bb:73:f4:83:92:0f:df:c5:ac:85:59:47:
                    fa:07:e0:11:0f:c9:8d:d3:01:92:43:66:ca:1c:b9:
                    ee:15:b1:cb:8e:a9:c2:65:d6:a2:11:7e:4c:9f:cb:
                    48:fc:12:93:6f:9e:02:3f:19:1b:1a:29:23:c8:93:
                    f1:e3:f9:79:89:ae:e3:02:1d:7a:d7:42:1a:d7:41:
                    38:9b:e4:5d:d0:c3:6d:5e:05:25:0f:75:f4:9f:c9:
                    44:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9A:5F:2B:F4:BE:D7:7B:84:08:93:6F:A3:77:62:99:F2:0E:11:B9
            X509v3 Authority Key Identifier:
                keyid:FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a7:20:79:8a:0c:e1:81:a6:2c:11:b4:bb:2d:f9:74:10:47:
         16:21:23:b0:a7:e8:6e:6c:48:9f:c0:93:a7:0b:0a:80:dd:b3:
         d9:2e:43:d7:dd:d0:59:75:d5:da:21:c6:60:9a:0f:27:7c:4f:
         f4:a2:ba:4e:99:9d:a7:d6:c9:2b:50:6b:98:f5:d8:58:b4:f1:
         10:d9:cd:ea:50:2f:34:bc:dd:98:42:ed:5a:24:cf:e5:93:c3:
         7d:df:23:45:94:66:48:a5:50:99:3f:ad:e0:5d:3c:89:89:c3:
         04:02:4a:cc:30:93:1a:cd:7f:4e:b2:52:57:ba:96:7b:34:e2:
         28:77:14:07:dd:93:38:0b:18:90:3e:c0:5e:6e:9e:2a:0f:75:
         33:b4:8f:71:4b:1a:1e:65:d7:a9:79:e7:79:eb:eb:77:24:ae:
         4b:df:a9:d8:c2:38:1f:ff:ea:14:93:50:cf:a5:25:89:82:e1:
         e5:aa:29:3f:4a:0c:f1:4c:9a:4c:e3:2b:76:f0:e3:fd:eb:51:
         1c:e5:d5:c4:50:72:aa:a8:a5:1a:11:2f:9c:f5:43:c0:6b:2a:
         9c:de:88:31:83:f3:e0:2f:68:d2:af:ac:b7:70:3d:b8:eb:e7:
         e6:3d:e2:6b:ff:28:84:09:6e:bc:5d:68:c7:b7:7e:5b:69:cf:
         63:f6:f5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:57:37 2026 by rpki-client