Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft
File:                     S1wWI_uzPZaiQas12w8L3rXDnLA.mft (raw, json)
Hash identifier:          wzdW9T2FUY4bQpR3uDrWB6+XpDvzy3uvjEaRra+T5Pg=
Subject key identifier:   34:FD:A8:B2:2D:91:1C:7F:7B:CF:80:7C:FF:8D:2D:91:89:BD:6B:EC
Authority key identifier: 4B:5C:16:23:FB:B3:3D:96:A2:41:AB:35:DB:0F:0B:DE:B5:C3:9C:B0
Certificate issuer:       /CN=A91BD614/serialNumber=4B5C1623FBB33D96A241AB35DB0F0BDEB5C39CB0
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft
Manifest number:          02E2
Signing time:             Fri 17 Apr 2026 02:09:52 +0000
Manifest this update:     Fri 17 Apr 2026 02:09:51 +0000
Manifest next update:     Fri 24 Apr 2026 02:09:51 +0000
Files and hashes:         1: S1wWI_uzPZaiQas12w8L3rXDnLA.crl (hash: At1l9vsCoxTb2BUBpGYl2fE3FOCFUE20AyJ2tA1dt+c=)
                          2: FBDB9F4A57F911F0B7986D41C4F9AE02.roa (hash: A2+3/UOM6oofvyDsJXWvisaBfNPZ/cIqKtx2uCmMTcY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.crl
                          rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD614, serialNumber=4B5C1623FBB33D96A241AB35DB0F0BDEB5C39CB0
        Validity
            Not Before: Apr 17 02:09:51 2026 GMT
            Not After : Apr 24 02:09:51 2026 GMT
        Subject: CN=69e1966f-87ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:65:e7:f5:51:87:1e:01:82:b5:fb:c7:f4:2d:
                    40:43:52:0e:24:11:49:ac:b9:d5:ac:23:1e:31:92:
                    26:28:51:93:74:09:09:01:9a:f0:8e:55:d6:d5:fa:
                    04:3f:58:ad:76:81:a4:e1:1b:cd:8e:37:91:e8:e2:
                    23:b9:be:88:b3:9e:14:9c:fb:1a:c6:ac:07:17:19:
                    0d:4c:ec:cf:12:f6:35:7a:cd:1f:0c:14:d3:26:da:
                    d7:4f:8d:23:0a:a8:6f:4e:f2:dc:61:ae:5b:2f:7f:
                    9a:a2:61:ca:9f:36:b3:03:4b:49:b8:77:f0:f0:ac:
                    96:c1:f4:46:e4:b6:3c:ee:3b:ea:65:ac:bb:44:06:
                    67:5f:54:9a:1b:65:c8:a3:f1:e5:3b:f4:f3:da:db:
                    5a:c7:eb:db:76:13:46:e4:e8:72:28:5f:ca:85:a4:
                    df:01:6c:6c:0e:3e:cf:bb:c6:12:30:79:92:ac:b4:
                    00:16:38:fa:a9:34:53:01:75:4a:f7:40:6c:61:08:
                    79:61:3f:f1:fd:6b:7e:23:21:ba:4a:dc:1d:d7:34:
                    2d:27:cd:60:d0:24:e0:da:d7:39:7a:77:c7:ff:33:
                    57:d2:ef:a8:c6:d2:76:b7:db:16:05:4f:01:4a:ad:
                    ba:31:b5:56:84:5f:66:58:8d:2d:dc:5c:78:c1:cf:
                    50:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FD:A8:B2:2D:91:1C:7F:7B:CF:80:7C:FF:8D:2D:91:89:BD:6B:EC
            X509v3 Authority Key Identifier:
                keyid:4B:5C:16:23:FB:B3:3D:96:A2:41:AB:35:DB:0F:0B:DE:B5:C3:9C:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:90:73:81:bc:df:56:d9:fe:44:47:98:20:01:54:56:81:52:
         cd:00:ca:ac:2b:32:76:63:a4:5f:6d:4a:e5:f6:c2:8e:26:cc:
         5c:7d:e3:5d:3d:64:be:71:61:0b:17:b3:af:c8:fd:59:c8:16:
         22:43:26:15:23:bb:a0:9e:f8:f0:c8:79:72:0f:a4:5b:3b:67:
         a6:f1:3b:5b:85:43:f5:2f:bc:68:2b:8d:d0:da:56:b6:da:31:
         bd:be:df:99:17:d6:2c:e1:da:45:22:37:89:75:f8:ac:6e:e5:
         81:cd:49:6c:09:c2:5a:4e:3b:e6:55:db:1e:b6:d1:40:b3:42:
         68:13:e3:e2:6b:60:f9:8d:94:13:c1:cc:5e:cc:0b:f1:a7:81:
         72:20:e5:1e:95:3a:9a:e7:2b:12:d3:90:11:98:8f:b0:77:ef:
         76:4c:c2:1b:24:e4:53:d3:b9:ed:23:f4:ed:46:f9:79:48:ca:
         52:59:24:fa:eb:5e:c5:d0:f6:d8:98:e3:6c:f3:2e:f2:6e:09:
         98:0b:c5:c8:df:ea:2b:e5:79:b3:f9:1c:2c:9e:34:d4:4c:41:
         81:b8:e8:e6:a7:2e:c2:d9:86:08:02:23:90:75:f7:1c:d4:ee:
         4e:b8:25:d9:49:11:66:ce:cf:05:84:b9:36:43:5c:1c:3c:07:
         f9:64:72:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:00 2026 by rpki-client