Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
File:                     -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json)
Hash identifier:          sFbY5peM7t3g2BFGWS9YOT5o0SkTtaAi9LweVous+E4=
Subject key identifier:   4D:24:25:B2:1D:6D:69:B9:9E:7C:BD:CA:CB:AE:A2:FF:50:E2:F2:9D
Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B
Certificate issuer:       /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
Certificate serial:       09C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
Manifest number:          09BF
Signing time:             Thu 16 Apr 2026 19:49:48 +0000
Manifest this update:     Thu 16 Apr 2026 19:49:47 +0000
Manifest next update:     Thu 23 Apr 2026 19:49:47 +0000
Files and hashes:         1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: SHKw5TtJ5TPj9eFXmtG5tTQSyTeKRNbKSIBA/WGpdCQ=)
                          2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: +2e0ypBMf/2EVb6MaYRFXsgQhBqjAZqucCJc3CHmtVE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl
                          rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2503 (0x9c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
        Validity
            Not Before: Apr 16 19:49:47 2026 GMT
            Not After : Apr 23 19:49:47 2026 GMT
        Subject: CN=69e13d5c-f186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a3:5a:1c:08:39:25:cd:2c:47:06:80:08:e9:
                    f6:42:d7:19:45:bd:27:16:5b:17:4f:f8:b6:87:14:
                    97:fd:40:86:2f:42:31:e7:dc:a2:59:fd:a7:f5:f2:
                    f6:3a:bc:9a:f8:de:1c:74:e4:68:6e:3d:af:f6:f3:
                    4f:a9:aa:f7:b4:6e:36:4e:94:fe:09:ec:65:3c:64:
                    9e:a2:10:f0:51:d3:8f:2f:e2:8f:9b:78:f6:56:3f:
                    49:c7:f1:44:1b:45:33:5e:82:cf:44:66:fe:7d:4a:
                    23:82:29:d8:bf:29:5a:df:c6:75:e8:78:27:4f:44:
                    12:05:75:f3:4c:ad:5c:ff:32:c0:c2:35:a5:cc:05:
                    7c:44:2d:f4:3b:98:4a:32:68:10:bd:93:dc:ec:c5:
                    cf:4e:57:4e:fd:c2:d9:54:4b:0c:83:26:e5:63:51:
                    ed:1f:8c:b9:75:0d:a7:71:7f:0b:58:1e:00:27:5c:
                    8f:4a:2d:22:95:d8:30:e4:92:ba:f7:c1:a6:78:e5:
                    f5:ea:a7:d3:66:ad:89:b9:dc:46:93:62:e8:15:e6:
                    b1:ac:0f:5c:e3:a7:bc:51:b2:d8:89:1f:fc:03:2b:
                    07:3b:64:3b:44:80:bb:f3:dc:7c:48:b9:48:bc:68:
                    1f:50:c7:ab:29:b9:b4:43:e2:33:87:60:cc:cc:24:
                    e3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:24:25:B2:1D:6D:69:B9:9E:7C:BD:CA:CB:AE:A2:FF:50:E2:F2:9D
            X509v3 Authority Key Identifier:
                keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ca:d9:61:2b:b6:b0:98:7c:43:2e:17:12:29:73:de:0d:79:
         35:08:54:dd:46:75:9f:e9:39:e8:ca:04:72:7d:56:73:5f:1b:
         ca:52:b9:66:24:2a:a1:e4:5b:cd:e8:f1:fb:23:05:98:bb:d4:
         bb:2b:b6:7f:7b:8e:15:9a:e2:ad:02:e4:3c:af:56:ca:36:07:
         f7:3a:fb:ce:20:da:08:d3:cf:ea:ce:4f:66:7d:4b:53:e9:df:
         3b:58:b9:a3:2d:ec:23:f5:83:97:c2:8d:ca:c4:cd:fc:f4:19:
         a1:10:2b:f0:82:08:7d:2b:97:ad:cc:05:01:3f:08:87:de:52:
         85:1f:dc:0b:a8:9e:95:41:ac:35:2e:65:1f:3d:6d:a2:c6:ec:
         a0:16:da:5c:b0:94:33:83:f3:63:7b:00:17:56:13:7e:4d:6d:
         d5:86:93:69:3f:9c:4c:8f:d4:44:8b:60:97:5d:c8:3d:7d:35:
         cf:9d:1d:1d:ad:8a:d4:2b:7c:62:58:5e:de:f1:a5:9e:d2:0c:
         f3:ce:b4:0d:8a:85:f1:68:a2:f5:0e:b6:2a:3e:48:54:28:61:
         d6:9c:96:3f:57:63:f0:9a:f2:cc:2f:72:84:fb:ef:a7:b1:0a:
         c8:d4:72:43:7a:b2:bd:3d:96:fd:41:c4:02:6b:d0:4c:d6:39:
         86:39:71:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:08:35 2026 by rpki-client