Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
File:                     ruF924xrNZlkYYfQgefI95iD4Z0.mft (raw, json)
Hash identifier:          QLBmIHGnnFYFOsd+dqRngkFD9/tAidOO8wVyiNJxG2w=
Subject key identifier:   15:C7:19:3D:B2:97:CF:24:19:61:B5:70:F6:F0:BC:FD:59:1C:AD:5C
Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D
Certificate issuer:       /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
Certificate serial:       D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
Manifest number:          BF
Signing time:             Fri 17 Apr 2026 06:49:26 +0000
Manifest this update:     Fri 17 Apr 2026 06:49:25 +0000
Manifest next update:     Fri 24 Apr 2026 06:49:25 +0000
Files and hashes:         1: ruF924xrNZlkYYfQgefI95iD4Z0.crl (hash: 9PtNhNIt7vjbEVePb2nn7DQbIEHg7faH4pivaY6h0m8=)
                          2: 7020A3F6FB6411F0B417A8544B6F56BC.roa (hash: 0uJQxDpAOHaABeJ25wfn3VTH/VdzhDmcRhWseG4IhVU=)
                          3: A433C1262D0311F0A91F647CC4F9AE02.roa (hash: Wv3Hw56ZpmiR46v0hXlQur/T4NvoJ9rmr1BmJ2RxWtU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl
                          rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:49:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
        Validity
            Not Before: Apr 17 06:49:25 2026 GMT
            Not After : Apr 24 06:49:25 2026 GMT
        Subject: CN=69e1d7f6-17bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:62:4a:03:27:77:71:0f:ea:b0:a9:49:5a:ea:
                    3d:71:4a:e3:dc:c4:5a:1c:df:34:d6:74:0e:4b:22:
                    e9:cc:dd:6a:d5:50:6e:f5:5d:b1:e7:e8:dc:d7:7a:
                    7f:db:12:f7:d4:49:58:18:f8:08:58:30:b5:9b:a3:
                    09:13:fd:f7:89:57:dd:2b:a4:ce:02:21:bc:29:93:
                    46:19:5f:0f:8d:57:be:20:78:01:d1:8e:33:99:f5:
                    6b:76:33:9e:25:b0:d7:7a:95:4a:61:ca:8c:05:01:
                    16:1e:42:40:55:92:c9:a6:1d:12:09:6d:a7:30:7a:
                    96:7a:cd:ab:e8:b4:c6:9b:dc:c3:da:e4:c5:44:b7:
                    ff:1b:b4:be:0c:b7:f5:f2:bf:bc:8a:ff:1e:5b:1e:
                    0c:f1:58:62:da:b2:8c:ee:50:b8:dc:a0:bc:c8:5d:
                    32:7a:aa:a6:dc:25:b6:d8:d5:52:70:66:f9:88:b1:
                    39:c6:25:17:4b:17:34:85:de:45:95:ff:aa:36:bc:
                    3a:7f:77:b2:6f:6b:81:36:1f:8d:de:58:91:25:86:
                    79:81:4c:6e:77:b8:3b:02:6e:2c:6f:ea:94:7b:0d:
                    bc:fe:ae:e4:1f:a5:53:16:ee:2d:45:8f:77:8e:a2:
                    88:82:43:48:df:8b:86:53:f5:32:f4:9d:12:2c:49:
                    2e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C7:19:3D:B2:97:CF:24:19:61:B5:70:F6:F0:BC:FD:59:1C:AD:5C
            X509v3 Authority Key Identifier:
                keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:98:a3:6e:95:55:51:fa:3e:4f:c5:fd:b7:fa:ed:da:f2:db:
         ab:d1:69:c4:f5:8e:e5:71:b2:cd:d5:1b:85:54:28:5e:ab:c0:
         a5:6b:76:85:ed:1d:5e:d7:96:48:e3:98:71:a4:1e:2a:c4:f0:
         16:58:73:da:6b:a0:e1:33:0d:cb:67:bc:c4:07:4a:de:cc:38:
         e3:c9:1a:02:6e:4d:87:09:f7:58:79:a6:95:0f:bc:48:b2:4a:
         2c:38:df:c8:35:82:5e:d6:e2:5c:f8:19:4d:b3:fc:83:b3:41:
         49:d0:a7:12:ed:6c:b5:b4:bf:c7:22:47:9f:47:cb:b4:a1:11:
         22:a1:54:7c:4c:f9:38:aa:cb:7a:b0:65:df:07:70:c3:b8:f9:
         4f:9d:9f:1c:27:0e:44:b7:f2:4f:5a:01:f5:c0:d6:e6:e7:d2:
         3a:32:e4:e1:14:48:d1:6f:af:0b:f5:5d:af:60:c7:75:d8:95:
         9b:b9:03:7c:cb:ef:4d:19:bc:eb:3c:a4:b0:3f:cf:01:08:ba:
         ec:aa:3b:19:d6:c2:f7:75:69:27:62:b2:a7:28:9f:e0:25:3a:
         48:35:55:bf:23:6f:d4:f0:0c:82:e5:eb:0e:68:45:d8:75:3d:
         8d:2c:36:f5:ab:21:86:37:ba:84:28:33:c1:e9:df:48:fc:51:
         8d:cf:9f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:48:34 2026 by rpki-client