Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft
File:                     xCoYwre3JR8lBvX6J4oWLoRETaY.mft (raw, json)
Hash identifier:          q9XnmZ7XFAtOzoYFRE6hxotPrwYR3DH8BgkfoBCLlFE=
Subject key identifier:   DA:CA:E3:7D:2E:95:33:7D:38:2A:B3:92:FB:01:9C:B5:B2:59:8D:CE
Authority key identifier: C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6
Certificate issuer:       /CN=A91B7740/serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6
Certificate serial:       055A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft
Manifest number:          0552
Signing time:             Thu 16 Apr 2026 23:21:35 +0000
Manifest this update:     Thu 16 Apr 2026 23:21:34 +0000
Manifest next update:     Thu 23 Apr 2026 23:21:34 +0000
Files and hashes:         1: xCoYwre3JR8lBvX6J4oWLoRETaY.crl (hash: ZwwHRtEQwEdz53z3AyB1JJPBQlW5ry5CLFcXgBZOwHc=)
                          2: 980E2450325111EC93E97C35C4F9AE02.roa (hash: cyF1HCOiDjkq9FHfAaJSLTY5RGkpI7kiBUXLdghxVJo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl
                          rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1370 (0x55a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7740, serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6
        Validity
            Not Before: Apr 16 23:21:34 2026 GMT
            Not After : Apr 23 23:21:34 2026 GMT
        Subject: CN=69e16eff-2704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7f:44:8b:3e:16:54:0e:d9:72:97:3a:5c:7f:
                    2c:cd:81:f9:ea:21:35:25:7d:4e:86:22:43:06:da:
                    36:5f:15:88:da:27:c7:b6:95:7f:08:85:c7:47:c5:
                    b6:08:58:43:d4:99:da:ea:cd:72:4f:0c:c1:cb:c7:
                    96:f9:36:a3:28:77:1b:01:8f:41:2a:11:2c:65:57:
                    fa:f1:c4:4e:3e:19:b7:17:c0:6e:43:3e:3b:fc:d6:
                    31:a4:76:aa:0b:42:f4:47:7f:99:4e:b3:d2:41:55:
                    6f:45:fb:31:fd:5d:97:9b:9d:10:fc:c3:13:00:28:
                    bd:64:26:ed:03:44:af:0d:b4:07:91:50:7d:ff:cd:
                    83:39:1d:bc:48:ac:1c:55:9f:36:c3:7b:1b:13:b1:
                    7d:b8:0a:e9:a1:89:a5:9c:4b:5c:17:0a:e9:a7:89:
                    21:19:57:49:00:f2:48:6e:0e:6b:1f:ee:2a:92:a5:
                    66:a5:03:79:d6:a2:c7:2e:50:7b:b1:9b:01:57:b7:
                    40:3f:0e:c5:7b:04:02:b1:54:d0:db:f6:8b:60:a3:
                    d5:2a:fb:4f:46:bb:85:f5:0a:9a:9b:ff:ef:7d:02:
                    74:da:47:0f:38:ce:06:f9:f1:d8:bd:b7:7a:70:5d:
                    00:28:b9:8c:ba:67:39:c0:94:5e:e6:ce:23:68:b1:
                    61:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CA:E3:7D:2E:95:33:7D:38:2A:B3:92:FB:01:9C:B5:B2:59:8D:CE
            X509v3 Authority Key Identifier:
                keyid:C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:fe:83:05:2b:af:9f:f2:64:43:02:8b:b6:31:db:98:e8:1e:
         59:3a:cd:19:56:ac:c3:b4:c0:eb:77:f7:32:5d:fb:86:1b:18:
         1e:96:f1:96:40:47:7a:fd:8f:de:82:90:84:0f:ed:1c:db:70:
         0d:f8:a8:10:fd:15:59:3c:ac:8c:79:b5:30:8e:59:9d:93:84:
         93:e0:b6:58:3e:1e:45:2f:19:fb:a6:05:17:8c:ae:1d:94:e7:
         ad:88:ab:55:a8:ed:d4:cb:ac:7d:9a:3a:c5:f4:a8:7b:3a:c7:
         6c:81:36:fd:49:52:a4:da:68:e3:f9:d5:ba:69:50:0e:44:58:
         73:db:af:25:19:ef:56:45:b6:88:eb:82:38:5b:ae:4b:5d:c0:
         7e:44:8c:37:f4:fc:43:6d:ba:ed:e4:54:fd:b9:2c:fa:06:28:
         39:2e:5a:b3:94:3c:24:a2:3b:07:df:f3:11:7d:e2:e4:7f:80:
         45:81:9f:f2:ff:3d:f8:16:31:3c:d3:14:fe:f3:a0:80:3f:10:
         49:b6:2a:72:55:18:60:62:e7:cf:77:b8:f4:77:d4:21:34:c6:
         af:3a:5f:b1:c3:46:56:1c:1a:a4:87:50:d8:fc:cf:0a:90:94:
         41:9d:ea:56:f7:d5:ab:ad:6f:11:73:89:fb:c7:89:b1:35:d2:
         bb:8d:5e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:08:10 2026 by rpki-client