Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft
File:                     AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft (raw, json)
Hash identifier:          +W0VCxl/GTj2Sryl5mcI2exDJNqP4akuDcSdQvV+bXo=
Subject key identifier:   F2:5F:0D:30:16:BC:52:FD:38:80:6D:79:4D:62:F5:74:73:AE:36:0F
Authority key identifier: 00:FD:31:FD:06:B4:20:4C:3D:DC:B6:35:07:18:95:33:77:8C:CC:F8
Certificate issuer:       /CN=A91C09EA/serialNumber=00FD31FD06B4204C3DDCB63507189533778CCCF8
Certificate serial:       E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft
Manifest number:          E5
Signing time:             Fri 17 Apr 2026 06:13:11 +0000
Manifest this update:     Fri 17 Apr 2026 06:13:10 +0000
Manifest next update:     Fri 24 Apr 2026 06:13:10 +0000
Files and hashes:         1: AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl (hash: a9rDoOSi94joJ3eaBTyBUOkas8+ze/y7Fs/XyuGWogA=)
                          2: 7970EAA266DA11F084325D42C4F9AE02.roa (hash: h1LWEJUQvaATUOdZkytyIfaI4klq2FxoFoCocLW2Bpc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl
                          rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:13:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C09EA, serialNumber=00FD31FD06B4204C3DDCB63507189533778CCCF8
        Validity
            Not Before: Apr 17 06:13:10 2026 GMT
            Not After : Apr 24 06:13:10 2026 GMT
        Subject: CN=69e1cf76-c930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6e:2b:47:89:42:34:6f:17:48:41:16:6b:b4:
                    67:9f:19:33:c7:16:f5:4f:e4:2a:75:ac:ab:06:46:
                    8e:55:d6:32:e7:8a:02:76:9e:72:f0:0b:ec:4b:f1:
                    a8:30:ef:6c:8b:91:29:81:1c:41:cc:2f:c9:b6:4d:
                    84:8c:1c:2d:90:fd:00:96:81:31:49:7f:34:d2:b6:
                    93:37:b5:e7:83:84:63:3e:8c:0e:c8:09:c0:dd:9f:
                    c8:18:05:f4:56:09:72:47:2f:36:dd:d6:a6:02:31:
                    6d:7a:6d:0e:35:ab:1d:b8:6e:24:56:96:64:4f:ab:
                    b5:23:1a:26:9a:36:bb:a8:ab:50:b2:ac:0b:80:31:
                    0d:46:6c:86:d2:6d:46:48:c9:f5:0f:71:a3:16:83:
                    57:b4:e9:1f:ee:b7:ae:e1:39:8d:5e:9e:67:76:9a:
                    fc:e6:6d:8e:73:f4:9b:c7:7d:66:a4:8e:6b:7b:5d:
                    dd:ca:00:63:9a:8d:d3:81:ba:27:1e:8e:35:e3:c3:
                    23:1f:bd:b5:87:b1:85:9b:ee:32:f3:77:89:e8:a1:
                    29:ea:fe:e2:1e:e6:44:33:a9:da:b0:68:0b:f4:65:
                    0d:f7:3f:c6:68:ff:5d:d0:9c:14:f1:6b:08:36:f3:
                    a9:93:07:2c:c8:88:98:27:26:db:19:1b:5d:7b:12:
                    5c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5F:0D:30:16:BC:52:FD:38:80:6D:79:4D:62:F5:74:73:AE:36:0F
            X509v3 Authority Key Identifier:
                keyid:00:FD:31:FD:06:B4:20:4C:3D:DC:B6:35:07:18:95:33:77:8C:CC:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:1a:82:fa:e9:c6:44:47:a1:99:65:34:4c:16:72:3c:59:ad:
         51:02:25:81:19:6b:af:1e:dc:15:dc:29:2d:45:c1:90:98:18:
         bb:00:85:a5:30:ba:59:f6:fe:a5:ee:bd:5b:64:ba:e3:51:c4:
         bc:22:d7:2e:fd:2a:a8:0c:56:a8:16:29:ff:97:9b:98:cd:ee:
         d8:b8:ab:7e:83:73:d3:01:93:9d:ba:95:4a:09:44:21:70:d5:
         44:95:7c:74:f3:45:45:d0:65:72:84:2c:a1:36:e4:d2:17:9a:
         44:24:e7:30:6f:57:30:0a:ae:86:1a:01:0d:37:c5:15:27:8b:
         df:60:f5:ed:75:4a:f3:1e:cc:18:e4:01:e0:fb:69:52:27:34:
         85:8c:4d:c3:84:f5:80:17:cf:77:ab:ea:03:fd:33:68:d2:7f:
         22:12:ca:d2:50:36:62:83:ce:62:4e:e1:95:f7:29:ae:f3:6b:
         55:6b:4e:36:44:eb:63:aa:0f:1b:2c:be:8a:8d:fa:23:e7:04:
         d3:0f:31:83:75:67:cf:cc:ff:45:bd:d8:3e:65:7b:90:14:33:
         b3:43:90:93:35:3b:0a:8a:d4:13:5e:78:c8:e1:00:4e:e1:4a:
         d9:1f:e4:1a:4e:81:a7:8a:a3:f5:9a:5e:a3:90:e7:e0:66:83:
         30:0b:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:41 2026 by rpki-client