Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
File:                     9iXmzAOQJv9byda9xC2NHBir8zs.mft (raw, json)
Hash identifier:          iuLrfe+tVLRMoh8Iw6GzPkVC3nLHwgjvDCtv4ayF4hg=
Subject key identifier:   C7:1D:91:C6:3D:5E:97:9E:5F:5B:39:55:FA:15:67:2D:8B:26:DE:6F
Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B
Certificate issuer:       /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B
Certificate serial:       01AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
Manifest number:          0182
Signing time:             Fri 17 Apr 2026 04:45:44 +0000
Manifest this update:     Fri 17 Apr 2026 04:45:43 +0000
Manifest next update:     Fri 24 Apr 2026 04:45:43 +0000
Files and hashes:         1: 9iXmzAOQJv9byda9xC2NHBir8zs.crl (hash: ThhKFVK0L4I8K66At5bUq7t2scJZCE8NLQ0TYjlavbI=)
                          2: E16E7E38BB8211F0B31D1B65C4F9AE02.roa (hash: wCGfC4BD+WaSxmo3hc+r7hIlBChOqs70L8QHRte2kxE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl
                          rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B88CA, serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B
        Validity
            Not Before: Apr 17 04:45:43 2026 GMT
            Not After : Apr 24 04:45:43 2026 GMT
        Subject: CN=69e1baf7-88b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:86:1d:64:f8:ae:45:e4:13:f9:db:c4:5a:3d:
                    9f:ac:53:b3:59:cc:52:5a:d2:c6:7c:5f:3a:3f:b2:
                    91:b4:06:43:ee:f1:19:35:87:42:9b:a5:42:c4:4f:
                    88:fa:e4:31:da:6d:21:6d:7a:89:5d:c5:93:be:24:
                    bd:d0:46:ba:e8:8d:be:63:19:4e:a8:c4:f1:c7:ec:
                    63:7a:87:05:af:76:11:e7:7f:2b:66:cc:94:1b:6e:
                    4d:9d:3d:15:06:0c:56:5f:06:9c:c3:ea:28:3f:9e:
                    88:4f:ba:20:43:43:a2:4e:1b:be:60:06:d7:0d:79:
                    3a:c4:0d:54:b8:52:50:31:66:91:45:37:66:71:2d:
                    12:2d:8e:6d:f1:3e:85:ac:db:33:ee:35:1f:d5:62:
                    0b:d8:51:c8:78:ba:5b:47:cd:58:9f:0b:c5:fd:70:
                    73:5b:af:5d:e7:a4:40:15:46:d3:65:2d:30:04:8a:
                    7e:e0:40:a0:5c:f8:1e:38:c5:bb:f3:30:84:f1:50:
                    cf:4d:b7:2f:5d:41:28:82:b3:89:cf:6e:ac:d9:bb:
                    52:70:23:2f:ad:27:42:54:53:c6:d1:52:ad:70:b3:
                    4f:89:18:c1:26:c7:32:ae:89:42:c7:e4:0f:de:f1:
                    f6:84:16:c1:02:e9:0c:f8:74:49:be:b4:6e:f0:2d:
                    44:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1D:91:C6:3D:5E:97:9E:5F:5B:39:55:FA:15:67:2D:8B:26:DE:6F
            X509v3 Authority Key Identifier:
                keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:fa:39:7c:54:fb:19:c8:8f:80:4b:50:6d:98:8a:0d:88:64:
         0c:77:b1:b2:4d:e9:5c:db:a0:16:37:c3:d4:35:b6:bb:af:91:
         72:f5:b8:1b:b3:ea:ae:d6:44:0d:84:1a:58:25:af:70:7c:6d:
         25:d0:2c:9e:f8:f2:cd:cb:0f:78:11:5b:aa:dd:b5:02:fd:93:
         b4:6a:50:f1:11:18:db:a8:21:cb:09:9f:3e:07:13:d3:5a:a7:
         ab:4f:42:a8:25:1b:fd:93:29:55:71:42:44:57:8b:4c:a9:99:
         17:23:a5:7c:f8:2f:95:d4:59:1e:ab:6e:36:f4:6c:dd:70:55:
         d6:c8:82:2f:7a:3d:b9:cc:ec:83:39:51:9c:1a:96:54:fb:e7:
         09:20:b9:f3:6a:8b:a3:cc:f1:83:f5:17:3d:aa:e0:68:1d:6f:
         f4:b5:7f:90:ec:d3:1f:5e:98:9d:91:58:6c:bd:5f:3a:f4:32:
         65:6c:71:65:67:25:45:55:d1:af:05:5c:68:2f:62:81:46:0c:
         96:17:f8:b0:c4:db:24:00:84:ea:53:85:99:5c:7e:94:58:de:
         9c:7e:b6:bf:cd:4c:0f:ec:63:68:e5:ab:3f:82:af:5a:9d:10:
         ed:82:d6:ed:1a:b9:04:0e:b2:15:00:b2:da:d4:14:ea:ba:b7:
         a3:c3:9a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:39:38 2026 by rpki-client