Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
File:                     Aqo6dsRZSXsbRfJukESsxvLoBE8.mft (raw, json)
Hash identifier:          RHkKU88i6HqwtXS4xPxopaPyMLSvV+K4kxvuN7UHFJk=
Subject key identifier:   A3:5F:AF:4C:4C:08:F8:BD:5C:05:65:C5:BA:F8:B9:EB:32:AF:FE:30
Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F
Certificate issuer:       /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F
Certificate serial:       0423
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
Manifest number:          040C
Signing time:             Sun 19 Apr 2026 00:22:49 +0000
Manifest this update:     Sun 19 Apr 2026 00:22:49 +0000
Manifest next update:     Sun 26 Apr 2026 00:22:49 +0000
Files and hashes:         1: Aqo6dsRZSXsbRfJukESsxvLoBE8.crl (hash: pGRemezNexcKLvp7nD3fV+KgiUC1MruxCE4DtralH8s=)
                          2: 87F2D334F2D811EC8F663D52C4F9AE02.roa (hash: 5k3DQfhGz/SABytY61becc5MlxRt/8ivV4iotQ7Zt+8=)
                          3: 5FFA5548B5A311EEA95C5732C4F9AE02.roa (hash: 2Yw2VLmkAKkVffOJoK4BP4cvhiQPwiNPf/uzPwBmVbQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl
                          rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 00:22:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1059 (0x423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA5BA, serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F
        Validity
            Not Before: Apr 19 00:22:49 2026 GMT
            Not After : Apr 26 00:22:49 2026 GMT
        Subject: CN=69e42059-17d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9c:a5:31:2a:1f:c3:fa:7a:5d:0d:ac:17:a0:
                    f2:ac:fe:d7:83:05:02:92:21:60:77:7d:0a:73:f6:
                    8a:d0:17:51:c8:2e:aa:36:3f:f2:b1:6c:75:e0:d8:
                    b8:3f:91:86:b8:96:25:c3:8b:14:7f:f6:56:14:e4:
                    94:c9:22:1e:15:38:05:bf:6b:e9:b4:b2:49:da:fe:
                    56:82:a9:e3:d8:e8:55:65:49:1a:01:59:44:29:12:
                    5f:6e:41:cc:ab:df:84:17:66:fa:c4:39:2a:a7:6a:
                    cd:f5:da:82:69:c5:a2:ce:61:19:3e:9b:b2:08:95:
                    f1:f4:cb:ad:c0:ec:b8:de:87:74:8d:cd:d6:74:08:
                    30:8b:9a:16:0b:ae:52:4e:e0:61:74:5b:7a:86:82:
                    d9:db:f9:09:b5:ae:e3:d2:4f:4e:51:4b:0a:7d:05:
                    98:e3:eb:78:0e:ca:86:79:df:23:57:d5:83:cd:ee:
                    30:da:0c:11:74:54:f6:da:32:34:1d:5d:1a:ba:33:
                    0d:82:6a:7f:d1:ff:5e:f4:bf:3c:e5:e0:15:ff:8d:
                    4c:ce:4a:27:b4:19:8d:4a:3d:20:d8:72:64:b0:05:
                    7d:d3:cf:04:0c:fc:41:7b:15:83:c5:88:b4:a3:2b:
                    2c:4c:a6:94:77:86:99:cf:18:73:48:1e:08:25:18:
                    57:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5F:AF:4C:4C:08:F8:BD:5C:05:65:C5:BA:F8:B9:EB:32:AF:FE:30
            X509v3 Authority Key Identifier:
                keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:9f:12:0d:ac:21:7a:f9:71:c0:d6:6d:28:5c:cb:a4:1a:a7:
         a4:76:36:4a:d9:9c:55:f4:bf:33:5f:fc:53:4c:ed:8b:01:5d:
         4f:18:e1:ac:e0:c7:a0:b4:ae:6b:86:df:ee:d1:15:e0:2e:8d:
         d7:5e:5e:b8:cf:81:8b:15:a7:6a:d8:7e:77:6b:e4:0e:13:ec:
         19:1a:60:17:27:32:e9:5a:7d:6e:2d:cb:b6:32:05:67:3b:1c:
         7f:0e:ea:6e:69:70:86:40:28:e0:7a:80:26:8a:0c:cd:86:c7:
         bf:ef:2f:7b:f5:43:ab:88:72:b3:c6:27:68:65:ef:72:8b:e4:
         0f:56:5b:5d:2a:90:9c:1b:70:6d:eb:10:72:d2:dc:ae:d2:a4:
         2e:88:dc:63:a6:68:89:8c:6d:c5:f6:fd:dd:3c:90:a3:2a:52:
         b1:d9:ba:5c:f1:26:f3:53:0b:5d:05:41:a2:df:33:35:81:dc:
         22:af:4a:ea:92:09:a9:47:d3:94:55:50:c7:79:83:5e:f2:81:
         9c:e7:57:99:b6:7a:c6:bf:c8:32:87:87:7e:f6:d1:76:5c:d7:
         86:84:6d:57:8b:a0:bc:7b:10:e4:29:7c:82:02:1c:7c:ca:a7:
         69:b6:4a:e0:85:ce:e0:9e:29:b3:e3:db:46:66:be:c5:88:e5:
         f1:e4:d2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:30:25 2026 by rpki-client