Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft
File:                     4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft (raw, json)
Hash identifier:          o3gC71ZqUSG4Zsta6gRAtOMA7Dp4TCJSpIDRpMnHW98=
Subject key identifier:   E7:D3:E9:F7:5A:4B:38:E7:91:3D:74:A1:43:64:C0:B0:B0:46:7C:98
Authority key identifier: E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6
Certificate issuer:       /CN=A91BAE1C/serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6
Certificate serial:       0420
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft
Manifest number:          041B
Signing time:             Fri 17 Apr 2026 00:16:51 +0000
Manifest this update:     Fri 17 Apr 2026 00:16:51 +0000
Manifest next update:     Fri 24 Apr 2026 00:16:51 +0000
Files and hashes:         1: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl (hash: BsgFSWWvH2ESOPjcSNTSQF9NullvrYlMzQ8epH4VWwY=)
                          2: 4BD764E8AA6511EC9A354C33C4F9AE02.roa (hash: xV0Ej2ei7P3BzqT9DGunMw06az/Ps86Fi6yisNe6riM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1056 (0x420)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAE1C, serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6
        Validity
            Not Before: Apr 17 00:16:51 2026 GMT
            Not After : Apr 24 00:16:51 2026 GMT
        Subject: CN=69e17bf3-4a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:21:8e:7a:65:18:75:1a:89:a4:92:e2:12:b7:
                    cc:97:7a:69:f3:e3:5c:dd:a5:50:82:8e:41:e1:1d:
                    8e:89:ee:53:f2:42:e8:a5:38:62:e1:be:44:dc:22:
                    c1:21:e4:57:fe:98:f5:ba:c4:8e:52:33:eb:6c:66:
                    bf:ff:4b:92:de:84:5d:1d:ed:81:45:a8:8c:24:1a:
                    24:26:dc:fe:ac:e4:87:66:8c:80:9d:0e:b2:a4:40:
                    36:03:cf:d2:40:95:07:3e:41:58:a2:d4:a1:b3:40:
                    33:3f:40:a2:72:9b:eb:60:c6:e6:d8:d0:51:29:0e:
                    ad:0d:19:a6:0f:c5:b1:b3:a0:06:ed:94:f2:ea:3d:
                    74:de:44:b1:2b:ab:a5:ff:97:5c:57:c0:f6:a6:f8:
                    da:89:df:4e:bb:81:de:ef:77:d4:9c:c6:4e:03:48:
                    10:3a:71:79:53:64:9d:09:ca:f2:1c:0a:a2:a8:84:
                    e2:e8:26:27:6b:16:2b:6f:7e:5d:91:aa:b1:c2:dd:
                    46:d0:25:48:1c:3a:1b:61:60:45:8a:d1:e3:a5:49:
                    5a:bd:c7:f5:72:ca:8b:9f:4f:19:30:d5:b4:f5:1a:
                    df:a3:4a:d1:00:6d:0e:84:9f:60:1b:9a:20:48:b0:
                    a6:be:1a:2a:1d:72:01:bf:2e:bc:c2:da:5a:5b:31:
                    da:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D3:E9:F7:5A:4B:38:E7:91:3D:74:A1:43:64:C0:B0:B0:46:7C:98
            X509v3 Authority Key Identifier:
                keyid:E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:52:78:9e:50:19:19:42:6e:1a:08:6c:c9:a6:8a:c9:d1:75:
         c6:22:58:b2:d7:66:b7:e5:e8:44:98:97:1b:6d:b7:a2:87:25:
         e4:42:65:34:dd:55:77:ce:83:d8:1c:cd:de:e8:1b:18:5b:c8:
         76:a8:c1:3d:8d:ce:32:cc:53:45:52:f7:36:11:b1:60:5d:db:
         41:8e:b7:10:d0:8c:eb:2d:c6:c1:f9:e3:bb:7b:c3:69:13:0a:
         a9:a7:d8:18:7c:27:18:5e:e7:9f:4b:9c:4e:62:23:36:88:44:
         50:f4:ca:ab:e4:19:85:7c:8a:6f:f8:ec:3c:cf:39:ce:6e:cc:
         39:a8:74:65:05:49:01:be:4a:c1:6f:09:96:a8:69:98:34:2e:
         80:2f:f2:b1:45:12:98:7f:1a:81:fc:3f:ff:d5:11:b2:2a:5e:
         c5:7f:3f:1f:8f:d6:69:8f:94:65:e9:44:d1:19:d6:a0:e3:c9:
         eb:47:9b:0a:a8:70:cd:14:e6:fe:8f:53:e5:89:fd:63:39:e3:
         76:94:23:55:b4:52:7b:76:d1:3a:b1:ef:fb:66:de:ca:4d:8d:
         da:2e:85:08:49:71:52:85:8e:3e:12:b3:13:2b:1f:22:cc:bf:
         bd:a5:53:6c:ef:24:4f:1f:12:77:85:52:eb:2e:d7:7d:cd:40:
         41:bd:a3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:37:21 2026 by rpki-client