Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
File:                     rJMLYl2DnFaNqBmeOP-dt-N4M70.mft (raw, json)
Hash identifier:          9SCx6icBpJQFkVsktlCDIV6jt9pBtyooKiKg1v8hgb8=
Subject key identifier:   48:E0:1D:76:22:08:20:51:E5:74:EE:EA:3C:A8:74:D6:DC:55:8F:00
Authority key identifier: AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD
Certificate issuer:       /CN=A91B7948/serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD
Certificate serial:       0158
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
Manifest number:          0150
Signing time:             Wed 15 Apr 2026 04:41:51 +0000
Manifest this update:     Wed 15 Apr 2026 04:41:51 +0000
Manifest next update:     Wed 22 Apr 2026 04:41:51 +0000
Files and hashes:         1: rJMLYl2DnFaNqBmeOP-dt-N4M70.crl (hash: vybfjpAwssjSwxv7fknfuMZdFB/iQqoWSDjULd5rnrk=)
                          2: 7152252C37D111EF99A8011CC4F9AE02.roa (hash: Vs8lkH/xg28txMNCf1v2Lfk4zCb7vUeiTKBMt6LjNUY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl
                          rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 04:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7948, serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD
        Validity
            Not Before: Apr 15 04:41:51 2026 GMT
            Not After : Apr 22 04:41:51 2026 GMT
        Subject: CN=69df170f-4a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:22:83:ae:13:9c:d6:09:a3:cb:52:04:10:d3:
                    4d:04:a3:eb:98:01:81:97:67:4c:8c:5a:b3:48:ad:
                    f5:b2:77:70:82:25:c8:88:22:9d:76:80:ce:0a:16:
                    e2:02:24:25:0c:d6:fe:66:ec:7c:e0:42:6c:e2:be:
                    ce:ec:6d:cb:4c:bd:57:c6:ab:64:80:4b:63:7f:a5:
                    01:25:7b:7c:3a:c9:96:6e:a9:ec:b4:48:ad:7f:74:
                    05:f9:2a:ae:4b:04:4f:ee:a1:e7:4a:77:c0:fe:77:
                    ff:00:ca:2e:0b:86:05:74:d0:c9:e9:67:8a:e1:fc:
                    24:64:d1:d3:12:6f:ff:c4:6b:c2:ed:75:63:14:63:
                    91:2a:ed:ac:66:2b:30:05:9b:87:1b:d8:1e:3e:e6:
                    fe:57:8b:76:f2:a6:fc:7f:b0:59:00:2e:05:12:a8:
                    23:a9:cf:c5:c9:42:03:e9:e2:f7:59:86:87:67:09:
                    67:9f:96:f6:51:03:bf:17:65:12:2d:bd:7d:ab:d3:
                    76:38:ed:a1:f2:28:1c:fc:50:d0:2d:a7:32:e0:dd:
                    6c:46:ca:4b:d1:94:8a:7f:f9:d9:dc:f6:c2:be:b6:
                    17:a0:d6:e2:90:4b:f7:16:b3:bb:d1:ce:6f:62:36:
                    4b:78:8c:b5:b7:6d:8d:a8:f0:69:18:65:58:7b:a9:
                    f6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E0:1D:76:22:08:20:51:E5:74:EE:EA:3C:A8:74:D6:DC:55:8F:00
            X509v3 Authority Key Identifier:
                keyid:AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:9e:47:72:f2:dc:b8:19:12:a2:d7:89:81:de:ea:45:12:24:
         e1:08:55:e3:e9:01:dd:af:c4:04:b4:1c:50:63:81:2a:dd:92:
         65:4e:e4:ad:bf:bc:f0:dd:d6:be:41:0d:46:cf:5b:0c:51:41:
         37:fe:2c:08:46:e1:20:77:9e:cb:d4:99:64:c9:33:cc:3f:5b:
         e3:9f:08:f2:f6:d8:1f:c8:54:48:92:12:13:8d:80:e0:8b:f6:
         c2:e6:90:6b:3e:88:33:22:86:32:9f:ee:eb:76:65:22:f1:f4:
         91:6e:22:fd:56:be:e1:33:00:e9:92:0e:3c:4c:74:4b:75:f0:
         83:60:30:cc:67:07:42:15:f9:5b:2f:65:14:1a:db:15:40:db:
         bf:6c:5b:61:a1:5d:42:47:52:5c:13:58:6f:ef:01:4e:ef:06:
         e8:39:c9:a1:02:2d:fa:ae:1a:b5:17:7c:e7:1a:10:e3:52:02:
         cf:38:9f:dd:42:41:3b:64:60:15:cd:e4:fc:d3:23:81:b6:5e:
         a4:2c:fd:cb:75:f0:e3:c4:d5:57:39:7b:33:ed:2b:61:88:92:
         cb:55:7d:bb:30:e2:fe:4a:ba:64:62:c0:b2:a9:ba:1f:45:c3:
         2e:4d:a8:41:a6:03:93:4b:5e:f1:75:71:ee:9b:3a:88:70:47:
         10:9a:c3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:17 2026 by rpki-client