Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
File:                     iV5rynpcNtnzBEctDScTpILJ2yU.mft (raw, json)
Hash identifier:          WrF4Xjq9Zs/D/Et+xR/gPacZZVXWurfn4D+JzvLHj0s=
Subject key identifier:   D9:31:BD:D6:CB:C8:5A:64:DA:8B:E2:0C:4F:05:46:74:2F:7D:DC:74
Authority key identifier: 89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25
Certificate issuer:       /CN=A91B829A/serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25
Certificate serial:       0CF7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
Manifest number:          0CEC
Signing time:             Thu 16 Apr 2026 18:10:50 +0000
Manifest this update:     Thu 16 Apr 2026 18:10:49 +0000
Manifest next update:     Thu 23 Apr 2026 18:10:49 +0000
Files and hashes:         1: iV5rynpcNtnzBEctDScTpILJ2yU.crl (hash: y87P+RO5q7XBjXNApQ2LUYrExDwLtdFDkCM+DfQrm1k=)
                          2: 37759456617811ECBB095A62C4F9AE02.roa (hash: GoPelaWzfjsTFtPr3I95eodushRHuWInvxaTpmekvow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl
                          rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3319 (0xcf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B829A, serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25
        Validity
            Not Before: Apr 16 18:10:49 2026 GMT
            Not After : Apr 23 18:10:49 2026 GMT
        Subject: CN=69e1262a-8b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:30:7c:c7:68:45:6a:c3:dc:c4:e3:91:15:58:
                    2b:7d:dc:b4:4a:e1:e6:bd:25:df:1f:37:59:65:1f:
                    d2:41:4d:c9:e5:5c:10:9c:a4:ef:cf:ef:ad:fd:01:
                    1a:ea:83:50:f2:a4:40:d1:4e:5b:7d:5c:b9:24:d0:
                    b8:31:ed:3d:66:71:cd:0d:e6:ac:05:90:88:47:81:
                    9c:ff:6e:ce:a8:f4:f1:20:15:23:6e:41:35:ab:a8:
                    f7:fb:01:32:c1:16:1c:2c:a8:e8:7b:d5:10:95:ea:
                    fe:58:96:9f:fe:25:ba:85:96:1b:c6:1c:71:1b:64:
                    af:15:2a:5b:b8:a0:3d:72:eb:fa:9f:63:64:81:05:
                    4b:fd:4e:8f:94:a7:f8:d8:06:63:c8:dd:35:b8:91:
                    cd:eb:d1:a8:d9:20:a6:65:fd:f5:01:d7:2c:3e:3c:
                    33:12:4e:54:0e:67:64:9f:32:76:bd:8c:36:56:0e:
                    b4:b1:fe:64:8f:40:d0:af:5e:72:f6:a0:0b:3f:2d:
                    63:5a:16:cf:f2:30:57:a1:ff:1b:8b:bc:e4:99:8f:
                    f8:d1:1d:e5:a3:75:d9:45:19:9f:92:32:cf:0c:c9:
                    51:ee:d0:52:24:c7:22:a8:09:1a:76:a5:bc:0c:ed:
                    f9:87:1d:46:6d:c1:f0:47:c0:1e:d0:68:70:77:12:
                    c7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:31:BD:D6:CB:C8:5A:64:DA:8B:E2:0C:4F:05:46:74:2F:7D:DC:74
            X509v3 Authority Key Identifier:
                keyid:89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:1f:6a:94:4c:2e:b5:52:28:84:cb:e7:1b:11:bf:28:48:4e:
         07:08:a5:b2:1f:fa:1a:cc:9d:29:7a:1d:49:b9:ff:0c:23:29:
         e6:63:66:ce:62:1a:8c:94:52:bb:ae:90:0f:8b:95:62:0d:c8:
         cf:32:31:af:e6:1d:84:a5:9a:f3:e6:f1:f3:9d:aa:7c:fd:d9:
         ec:1f:96:3a:89:b0:0f:73:a8:32:98:80:01:0e:9d:97:ed:6b:
         8e:b4:16:15:84:e1:52:da:5d:08:4f:f2:ff:12:09:4b:ff:c6:
         67:c3:af:c9:d6:7f:9c:4d:77:ea:06:cc:bd:21:ec:1b:bc:bf:
         38:10:91:ff:a3:e1:74:09:1c:0c:00:ca:73:7f:17:13:5d:cd:
         05:16:a7:73:fc:28:43:1b:0c:ee:15:ba:a5:a7:79:ef:fc:43:
         61:2f:e4:b8:44:fc:6f:00:e7:d6:78:c8:7d:3a:8e:be:4a:4a:
         5e:7f:27:11:ea:22:ac:fb:d1:da:93:18:c0:e0:90:cc:aa:4d:
         9b:71:b7:14:9a:62:0c:79:7c:29:ca:fe:ae:87:c3:aa:87:32:
         d5:5f:af:e5:20:7e:62:48:65:f0:c1:e8:cc:e5:cb:49:61:76:
         db:bf:a5:9f:c5:ed:e6:09:8e:ef:04:32:b9:98:9e:34:bb:f6:
         2a:71:ff:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:39 2026 by rpki-client