Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
File:                     fBlP7bilyMl2697IST3zw_CMyOI.mft (raw, json)
Hash identifier:          e4ae2kyWS5MvFH9b1aUtEAVJBWEvNQe5szve/P0/OUE=
Subject key identifier:   70:01:4F:D8:73:56:35:FE:EA:BF:03:67:5C:3D:A4:90:BB:96:0F:C0
Authority key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2
Certificate issuer:       /CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
Certificate serial:       01A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
Manifest number:          019D
Signing time:             Thu 16 Apr 2026 22:55:21 +0000
Manifest this update:     Thu 16 Apr 2026 22:55:20 +0000
Manifest next update:     Thu 23 Apr 2026 22:55:20 +0000
Files and hashes:         1: fBlP7bilyMl2697IST3zw_CMyOI.crl (hash: UvNMqV46F9TlDH7/9oIAPHAswzCgiHcjvWKMAOn7pcI=)
                          2: C7AAEA76637311EF97465324C4F9AE02.roa (hash: GPOp4w2ZvKNt+x+91lwiugP/PaS/3PPwDU9MX+UN6Qg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl
                          rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE056, serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
        Validity
            Not Before: Apr 16 22:55:20 2026 GMT
            Not After : Apr 23 22:55:20 2026 GMT
        Subject: CN=69e168d9-f319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:53:00:a6:1d:53:b9:08:23:e3:11:60:5c:d2:
                    67:a8:00:4a:be:ba:57:dc:c9:04:da:af:07:7b:69:
                    fe:ee:0a:63:36:fe:26:59:9f:50:09:c1:7c:90:f3:
                    25:3c:08:b7:93:52:ea:4a:d3:a4:2f:bd:8e:78:57:
                    83:79:6f:69:e8:7a:e2:50:43:74:06:5f:c7:5b:02:
                    83:f5:2e:8f:32:62:03:62:04:4f:27:bf:30:07:12:
                    09:14:ed:9b:2d:56:1b:10:25:1f:ee:0b:3b:be:04:
                    9d:e4:86:e0:95:ca:30:ce:5b:ff:7c:b0:2d:03:17:
                    96:f3:ae:2c:90:85:dc:94:a0:13:69:ca:03:a1:75:
                    6f:06:48:06:69:89:4e:66:40:c4:e8:b3:15:38:4e:
                    09:5b:8f:82:70:28:d0:88:29:a1:de:2f:94:e8:f8:
                    01:c8:ac:84:91:af:80:3c:ef:f5:4d:52:1b:2a:29:
                    2c:6b:12:23:33:84:ab:bb:0d:b6:39:3f:01:51:b1:
                    1f:8f:46:e4:ab:de:6a:d0:09:24:c6:80:6d:18:73:
                    81:7d:df:9a:95:c0:27:0d:79:f7:70:7f:c9:a4:ae:
                    a7:99:61:bd:0e:7c:d1:5f:92:15:e1:b8:32:41:a7:
                    74:05:43:4b:91:8c:d4:97:e6:75:d6:bb:8b:44:1a:
                    eb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:01:4F:D8:73:56:35:FE:EA:BF:03:67:5C:3D:A4:90:BB:96:0F:C0
            X509v3 Authority Key Identifier:
                keyid:7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:6b:83:d8:c0:a6:1f:65:ff:f6:d4:36:c3:9c:c5:78:92:67:
         ed:6b:3c:3a:ff:33:27:96:0f:6c:86:b2:8c:a8:e6:75:4d:d1:
         07:7e:6b:c8:27:bf:c2:e3:4c:bd:87:5e:f5:c8:f7:87:50:10:
         99:31:f9:74:eb:b5:d6:91:20:fc:07:0a:38:36:1b:01:bf:a1:
         76:96:12:3f:2e:bd:9c:02:ff:ad:97:b4:5d:c5:86:35:7b:e6:
         ed:1f:c0:12:55:96:e7:c2:f0:8b:a7:05:c9:f5:1c:50:f8:80:
         f0:03:36:58:f2:ca:c0:e1:08:a4:06:d0:6d:d3:d8:a5:3e:43:
         91:14:31:80:3d:be:17:e6:35:2c:96:31:f5:d4:15:cc:e8:c0:
         cd:89:88:7d:cf:14:5c:8d:b9:5e:ae:49:af:9f:e1:a7:4f:d1:
         e5:44:c3:dd:ed:86:f4:7c:cb:cf:c1:a3:3b:71:e4:02:a1:bc:
         9e:46:56:66:5e:4f:cc:ef:c9:4a:8d:2e:5d:9e:da:76:f9:99:
         b8:c4:b2:34:9e:8b:1c:b4:4b:c3:b1:a4:9e:3a:d8:63:f6:b0:
         f9:b2:60:72:4e:cc:bb:4f:77:99:8b:f2:a3:76:11:46:9c:ab:
         f6:42:b2:56:d0:30:7f:88:5e:c4:e8:8e:d3:1f:b4:ad:c4:27:
         65:4d:75:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:58:13 2026 by rpki-client