Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft
File:                     4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft (raw, json)
Hash identifier:          92QhAsRhX/9NAmgN0Pie0RVQNQzSFwCGNN/JtQnswQI=
Subject key identifier:   3D:DF:2E:9C:37:0E:FF:59:00:C8:03:F9:82:B1:7B:E7:BA:CB:D4:3A
Authority key identifier: E2:1F:24:E0:C5:4D:BB:93:F6:67:81:44:02:D6:6A:D4:08:07:11:14
Certificate issuer:       /CN=A91C4060/serialNumber=E21F24E0C54DBB93F667814402D66AD408071114
Certificate serial:       07D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft
Manifest number:          07C3
Signing time:             Thu 16 Apr 2026 21:18:41 +0000
Manifest this update:     Thu 16 Apr 2026 21:18:41 +0000
Manifest next update:     Thu 23 Apr 2026 21:18:41 +0000
Files and hashes:         1: 4h8k4MVNu5P2Z4FEAtZq1AgHERQ.crl (hash: X+UqA5fcuc0huF2L//7hmqzCw9TUgTubXgYGki1U4o4=)
                          2: 71C26BD039D211EB84B9FD6BC4F9AE02.roa (hash: m1LwxR5yBiEhYayYDDx+VeEVNC28wm7cqjOPRTGQW8s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2001 (0x7d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4060, serialNumber=E21F24E0C54DBB93F667814402D66AD408071114
        Validity
            Not Before: Apr 16 21:18:41 2026 GMT
            Not After : Apr 23 21:18:41 2026 GMT
        Subject: CN=69e15231-329e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c8:ad:d3:58:1c:48:5b:a4:db:7e:d3:bb:82:
                    ce:05:3d:95:a5:b7:2b:c4:bf:d4:3f:bf:19:04:33:
                    70:42:59:e1:f1:68:b3:68:ea:64:e7:ff:fb:ad:c5:
                    17:43:aa:01:cd:5e:d5:90:9b:e8:8f:f9:ed:b9:1f:
                    e9:12:21:7e:4e:d1:3d:05:d6:35:87:68:fb:eb:c7:
                    a9:c6:00:51:01:52:a3:8b:d0:11:d8:37:c5:dd:cb:
                    fb:e9:d7:58:64:07:ff:26:02:e4:d1:f8:51:c8:86:
                    5c:be:06:ee:ee:ce:0c:a2:cc:ae:37:34:09:58:09:
                    6e:5a:d4:ec:c7:1a:01:b6:54:68:ce:ef:5b:0a:f3:
                    1d:ae:5a:f8:34:82:48:05:13:b8:ed:86:68:69:f8:
                    f5:5b:cb:b1:7e:07:20:fe:fe:6f:0f:02:65:0e:ac:
                    24:19:c1:75:11:47:eb:79:a8:78:37:90:85:6a:cd:
                    5f:a7:c9:e6:a6:a2:94:d4:76:ba:a8:27:0c:08:f2:
                    e3:9a:44:00:cf:52:db:ad:eb:82:35:04:81:f1:f8:
                    58:47:ac:56:ca:84:6f:af:f3:41:7b:af:5a:db:11:
                    8d:bb:a6:b3:88:e0:fd:2c:99:8c:b1:d6:a9:4f:0b:
                    10:ca:a8:e5:e7:d3:fc:41:9c:18:68:78:e4:96:86:
                    94:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DF:2E:9C:37:0E:FF:59:00:C8:03:F9:82:B1:7B:E7:BA:CB:D4:3A
            X509v3 Authority Key Identifier:
                keyid:E2:1F:24:E0:C5:4D:BB:93:F6:67:81:44:02:D6:6A:D4:08:07:11:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:61:2b:dd:35:7b:c2:62:3c:d7:a0:31:81:73:be:d8:17:f8:
         41:ea:22:d5:14:f3:f8:5c:eb:50:90:9e:59:c5:ac:35:7a:75:
         5e:02:47:0f:f8:4d:a9:d0:d0:71:b9:d1:37:da:cf:53:d2:42:
         d3:0f:f8:f9:21:77:76:d7:54:e1:3c:84:03:b8:ca:42:b1:c4:
         52:8e:87:26:b8:bc:35:2f:d4:8a:b1:0d:bc:a5:1e:ef:d6:41:
         74:8b:c7:ef:12:c3:a6:42:fb:95:19:09:82:18:87:c7:3d:bd:
         91:41:17:95:16:90:23:f4:d5:c0:9b:45:39:21:07:5e:a9:e9:
         7b:ec:9e:0d:b2:a8:3e:60:dd:60:a7:80:40:cb:4d:95:f6:4b:
         f2:0e:1e:a6:9b:36:d1:ad:e4:6f:84:c7:ae:6a:48:29:c7:c1:
         76:a3:71:71:f0:0b:fc:33:d2:42:a7:25:2f:95:1c:c1:4f:96:
         51:9d:64:c0:5b:78:6b:ff:fa:49:76:b4:ae:48:52:d8:81:41:
         f3:ca:81:d1:8b:11:b7:82:41:16:2d:d3:54:5b:92:0d:eb:d7:
         a8:d5:d7:eb:ff:94:c2:cd:57:5f:a9:d2:7d:c2:06:38:8d:dd:
         7a:63:40:ef:f8:37:58:78:ea:a4:62:15:47:7d:65:9e:fe:b9:
         63:17:98:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:38 2026 by rpki-client