Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft
File:                     o5jf1NOXXquW_TgDOWgkbkdeKLM.mft (raw, json)
Hash identifier:          P6tJYL/CDjDrw9TUn37Ubk7+OSukQNvdAuQBinV5Py8=
Subject key identifier:   68:4A:4A:58:7C:FA:5A:03:C6:B2:44:AE:7D:FD:08:AE:DA:7F:C0:61
Authority key identifier: A3:98:DF:D4:D3:97:5E:AB:96:FD:38:03:39:68:24:6E:47:5E:28:B3
Certificate issuer:       /CN=A91B915D/serialNumber=A398DFD4D3975EAB96FD38033968246E475E28B3
Certificate serial:       0495
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft
Manifest number:          048F
Signing time:             Sat 18 Apr 2026 23:54:04 +0000
Manifest this update:     Sat 18 Apr 2026 23:54:03 +0000
Manifest next update:     Sat 25 Apr 2026 23:54:03 +0000
Files and hashes:         1: o5jf1NOXXquW_TgDOWgkbkdeKLM.crl (hash: nEyuxbXyVuo5M9cnUZ5zAXdyrShFbnd0mWUVf7q2Qno=)
                          2: 8CA3BAEC7DCB11EC99806E25C4F9AE02.roa (hash: 3dvCT2gOB8rQbKwOX6TGGzUBoVEiCpk9IxITGxHj+Hs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.crl
                          rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 23:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1173 (0x495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B915D, serialNumber=A398DFD4D3975EAB96FD38033968246E475E28B3
        Validity
            Not Before: Apr 18 23:54:03 2026 GMT
            Not After : Apr 25 23:54:03 2026 GMT
        Subject: CN=69e4199c-a9df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:0f:1f:49:d7:fb:ec:81:76:33:ee:fc:bd:
                    df:07:c0:4c:8c:39:24:20:6b:4b:43:c5:a7:6e:9d:
                    68:67:e7:8f:81:05:6f:11:1a:f4:f0:17:ad:20:28:
                    08:a7:ed:26:5a:a8:fe:d3:9a:f5:cc:4b:3e:72:a0:
                    28:71:d2:e6:ef:e2:97:86:a3:8a:79:b8:31:0f:c2:
                    9c:1c:55:b6:72:a3:55:03:20:69:f5:8b:37:09:17:
                    6e:e5:b4:15:b8:4c:7b:cd:fb:92:08:37:04:a2:09:
                    d2:63:d2:df:74:ae:97:ef:70:c7:c6:7d:d4:53:ff:
                    ed:45:59:64:39:3a:c9:dd:27:92:fa:7c:7a:ad:49:
                    c2:9e:5c:6d:d8:0f:ad:a1:34:18:38:97:b4:c4:32:
                    3f:6b:47:84:68:9b:25:9e:7f:8a:6a:d6:86:62:eb:
                    dd:a3:9c:c0:ad:ff:29:58:29:7f:c8:de:c2:9f:8b:
                    14:ae:31:8c:cf:6b:66:5a:17:9a:39:0f:2c:09:2c:
                    75:7a:06:94:65:30:cb:d6:b6:30:62:d0:f9:14:f0:
                    35:ab:7a:2b:ef:bd:3c:b2:60:f4:61:75:0c:62:43:
                    8a:bc:9a:f9:56:0a:99:4e:34:1a:7b:d9:e1:43:d1:
                    cb:c1:fa:d3:fd:ff:a5:69:7d:6c:65:30:eb:50:bf:
                    fa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4A:4A:58:7C:FA:5A:03:C6:B2:44:AE:7D:FD:08:AE:DA:7F:C0:61
            X509v3 Authority Key Identifier:
                keyid:A3:98:DF:D4:D3:97:5E:AB:96:FD:38:03:39:68:24:6E:47:5E:28:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:73:f7:fb:77:6e:d8:88:3b:a3:7e:65:e7:4c:f7:05:ae:01:
         45:10:92:7d:ce:b4:59:96:7a:b7:47:0d:19:1f:64:2d:35:91:
         52:ff:a4:6e:5d:49:0b:b4:5e:48:56:c9:50:7f:b0:ac:ee:a3:
         36:e5:3b:27:eb:c8:2a:f9:5d:d6:1e:28:87:d7:90:ed:84:a7:
         b6:dc:b5:ac:3e:09:a1:78:6a:68:d8:3a:4f:0e:8c:31:ed:e5:
         b8:ae:4d:57:dc:48:90:cf:76:8d:ea:f3:82:38:35:6f:78:55:
         72:16:3d:95:05:9d:0b:5b:31:f0:6a:9e:ed:ea:17:88:63:f0:
         9d:81:c7:98:25:60:0a:9e:58:21:e4:6f:34:16:07:9f:57:58:
         b0:9b:bf:ba:35:90:4f:d6:f3:db:24:2b:fb:48:0b:24:4f:79:
         12:08:9a:a1:11:9f:00:62:94:cd:59:b4:c9:36:8d:63:d5:b1:
         71:90:8d:3b:d4:87:1f:59:b0:16:0a:63:49:86:fa:1d:8e:32:
         a1:60:b9:0d:e5:32:e2:22:bd:9b:1f:5a:ee:00:17:c6:ae:7b:
         0a:6a:20:e7:12:27:c2:74:9e:62:c1:d6:85:f8:6b:53:22:e0:
         de:87:e8:26:e0:31:29:07:54:45:3d:99:d2:e6:8e:e1:41:26:
         5e:2d:25:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:59 2026 by rpki-client