Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft
File:                     eFqwsi3OWhJmUAwQZrT2sF91ysA.mft (raw, json)
Hash identifier:          y/5XL5c3qwKn+cZP4ZQ5gjkd2USigBeVIygEnT2o5Vo=
Subject key identifier:   6D:F3:42:FC:24:9A:88:F2:60:A1:8F:5C:B3:39:E6:D3:4A:AB:80:94
Authority key identifier: 78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0
Certificate issuer:       /CN=A91C2CE9/serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0
Certificate serial:       1166
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft
Manifest number:          1159
Signing time:             Thu 16 Apr 2026 17:09:22 +0000
Manifest this update:     Thu 16 Apr 2026 17:09:22 +0000
Manifest next update:     Thu 23 Apr 2026 17:09:22 +0000
Files and hashes:         1: eFqwsi3OWhJmUAwQZrT2sF91ysA.crl (hash: SGXviBEgbr5kiuXnGt0HT2cB9Dz1IDS0q400hB5U/uE=)
                          2: B3250BC6307B11E989188B3BC4F9AE02.roa (hash: pyrX7ab07D2AUC+ToBp5oB94QBQi2cPxuMyTXzH9YtI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl
                          rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:09:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4454 (0x1166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2CE9, serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0
        Validity
            Not Before: Apr 16 17:09:22 2026 GMT
            Not After : Apr 23 17:09:22 2026 GMT
        Subject: CN=69e117c2-b656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:30:52:5a:30:70:db:f6:39:d2:52:bd:02:a6:
                    5f:2c:d3:87:4c:35:52:f6:db:75:17:11:63:68:83:
                    7e:f6:84:d8:ef:03:ac:61:3e:5a:9a:42:53:0d:7d:
                    41:68:97:8f:38:2b:43:40:de:e9:03:08:a4:33:0a:
                    c5:10:8b:fa:b7:ed:e6:ca:76:33:2f:e1:34:65:69:
                    f0:ad:0a:1b:b0:4f:d8:0a:9e:d6:a4:f6:54:1b:92:
                    02:e4:85:ae:46:ff:30:03:f9:8d:6b:d4:f1:da:dd:
                    9b:da:f3:98:5a:af:ec:68:5d:33:92:e6:27:97:4b:
                    90:86:69:a1:87:b5:7a:61:4c:80:e9:e6:ab:3c:19:
                    77:21:bc:3d:d8:94:57:86:5c:02:fc:6a:50:d9:a3:
                    cd:63:fb:6a:20:0f:33:77:5c:a9:94:e1:2c:60:82:
                    ba:de:ae:a8:a9:f3:a8:51:1b:e5:1f:ca:01:62:1f:
                    0f:10:7a:2e:46:da:f0:f5:a7:8d:e3:ab:f5:c6:d2:
                    d8:5c:d6:31:fb:86:b1:f4:b4:50:b8:65:a8:f8:07:
                    3b:95:80:4f:ae:10:d4:b9:f2:cb:92:0c:31:62:c5:
                    73:c9:b9:4a:45:19:41:01:24:22:80:e5:3f:79:18:
                    81:89:b2:21:94:dd:86:50:bb:83:71:bf:39:d7:ba:
                    14:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F3:42:FC:24:9A:88:F2:60:A1:8F:5C:B3:39:E6:D3:4A:AB:80:94
            X509v3 Authority Key Identifier:
                keyid:78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8a:08:5f:de:e7:6b:57:2d:7e:5e:59:f4:ba:2e:5c:8b:e2:
         6e:60:9a:dc:89:18:a7:e2:7b:29:77:ea:05:65:cc:ed:40:b4:
         e1:b4:7c:8f:79:7c:8c:63:3f:4b:9e:c5:a8:17:9d:65:23:46:
         70:f1:26:b5:13:79:6d:22:d2:af:ca:c1:a6:cd:bc:ba:c9:f2:
         b4:5c:d0:ef:48:11:ac:cc:31:7a:42:35:61:46:90:75:18:ee:
         90:75:ea:7c:15:ad:f5:f9:e7:be:92:d7:b5:a0:65:65:1e:27:
         8d:47:d3:22:f6:38:0c:d9:a7:43:d0:45:bc:4c:76:d5:a2:bb:
         6e:63:c7:bf:9b:55:ca:ca:f6:1a:e0:9b:e7:fd:2a:61:88:cf:
         4e:79:13:2a:3b:e1:a5:d3:d3:05:b3:b6:51:3e:0c:d7:c1:7c:
         51:e2:05:37:95:0b:f0:d7:98:aa:a6:3a:20:75:e7:39:dd:57:
         ff:04:b3:02:a4:8f:81:3e:81:b5:00:e9:a7:68:e5:43:95:00:
         f0:29:f5:2f:40:f7:a1:5a:87:04:86:57:2b:6e:13:37:9b:9c:
         c8:fc:e5:79:e0:55:0d:3a:37:57:35:2b:55:91:99:33:84:05:
         6d:3c:2a:90:74:e8:07:98:e4:e7:ba:b2:3a:c7:00:b9:85:f5:
         b5:1e:44:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:30 2026 by rpki-client