Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
File:                     0y2jboghgi5r08gs_6mE56kJw_Y.mft (raw, json)
Hash identifier:          kK/1ao32zQ0rVAfac084kgxQXGVtBj/3X/6M79/rR84=
Subject key identifier:   CD:F4:E4:9C:E5:81:51:5D:F8:F1:12:B5:8B:E4:7A:7F:9B:3E:25:76
Authority key identifier: D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6
Certificate issuer:       /CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
Certificate serial:       3481
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
Manifest number:          346F
Signing time:             Thu 16 Apr 2026 15:17:58 +0000
Manifest this update:     Thu 16 Apr 2026 15:17:58 +0000
Manifest next update:     Thu 23 Apr 2026 15:17:58 +0000
Files and hashes:         1: 0y2jboghgi5r08gs_6mE56kJw_Y.crl (hash: 1qJ0SLL4s8NJ5tyC+6zlH/dl/rTzojUJibLDsCoCo4g=)
                          2: A1C2C79680FE11E985D53F55C4F9AE02.roa (hash: Ej83i8NuEYKasou7W/9D745hYaGsqd2oMKEiRlHzF4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13441 (0x3481)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8EF9, serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
        Validity
            Not Before: Apr 16 15:17:58 2026 GMT
            Not After : Apr 23 15:17:58 2026 GMT
        Subject: CN=69e0fda6-75b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e8:e2:18:3b:11:61:cc:07:b4:f2:65:74:9e:
                    a9:a5:7c:a2:5a:f4:eb:15:55:94:1f:a8:d4:e8:d8:
                    33:ac:1e:d4:cd:60:88:76:f9:fe:10:ae:04:27:db:
                    8f:00:da:01:05:27:32:25:88:dd:ba:4c:1d:2e:a1:
                    5e:85:12:62:8c:82:54:bc:08:43:c4:43:b3:38:a1:
                    5e:8b:42:65:4b:1b:e3:d5:cd:c7:5c:c4:8c:e9:34:
                    bc:2b:29:2f:e9:46:14:2b:b4:9e:b7:64:af:51:67:
                    ae:5d:2b:81:6f:b8:b7:13:11:a3:a1:03:e5:72:e5:
                    ee:10:a2:cf:02:98:61:a3:f2:a0:7e:ae:e1:d2:06:
                    3e:ea:e8:fc:b7:c7:75:34:bb:fd:8a:b3:2b:5b:37:
                    90:26:60:bc:f8:0a:08:d7:cc:a5:97:ee:b1:da:64:
                    0e:1a:20:a6:e1:61:c8:d0:bb:d2:8b:1f:00:21:e4:
                    a3:82:18:84:e3:5e:d1:ec:87:d6:4e:b6:2a:30:95:
                    1e:23:06:74:06:cd:58:04:6b:9c:5a:8d:cd:75:49:
                    4c:bf:f7:c7:27:09:6a:d6:de:e1:7d:12:43:5c:09:
                    66:b0:a3:5c:46:1a:3f:a1:62:1f:bc:b6:22:e6:85:
                    85:a7:74:b6:7e:5e:f7:a5:21:d5:41:1a:1c:33:5f:
                    9b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F4:E4:9C:E5:81:51:5D:F8:F1:12:B5:8B:E4:7A:7F:9B:3E:25:76
            X509v3 Authority Key Identifier:
                keyid:D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:5b:b8:96:fa:65:10:0d:88:eb:39:19:7e:cc:80:6d:ff:2d:
         76:d7:f5:0c:fc:ab:d3:28:cd:e2:fd:82:35:37:7e:73:0e:fc:
         fc:2e:8d:c0:2c:75:ac:1b:5e:de:b3:e0:54:df:e5:af:26:8b:
         62:13:4e:24:c1:37:1b:bb:cb:8a:9e:53:ef:37:dd:82:b2:5b:
         30:68:be:29:3a:dc:45:ff:9c:84:88:d6:0b:9f:49:fd:6f:d7:
         69:fb:80:f6:62:b6:ae:34:1d:d9:b7:a5:3c:34:18:9f:70:b8:
         22:f6:4e:66:c1:23:ee:a7:c1:db:36:82:a5:6b:b9:fe:cc:fa:
         6b:18:f2:ee:0a:db:ca:22:a8:ac:c0:7a:5a:8c:95:8a:ae:e1:
         3f:96:99:34:ec:d4:8b:39:a3:22:4c:59:ff:9d:ed:0a:25:6d:
         31:d7:91:39:a6:8e:7d:20:56:bf:cb:3b:6d:ab:9a:0e:6b:fb:
         07:15:d1:04:43:a0:89:ac:a8:14:d0:5a:5b:78:ac:d4:70:71:
         f6:73:a7:c9:4b:ef:b2:af:4e:65:ca:0f:73:ac:44:a8:4d:a4:
         e6:d5:a6:d3:18:23:10:e2:ef:60:33:bd:01:82:a2:af:1b:63:
         0c:6f:3d:58:b1:ab:30:6b:74:52:84:6e:c7:32:0e:65:76:4a:
         bb:55:ed:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:41:52 2026 by rpki-client