Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
File:                     kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft (raw, json)
Hash identifier:          tWr8CfaYG71zi6gOEkXpt71MoBfRkRJ0Xhzx8sRNB+A=
Subject key identifier:   24:44:B2:E9:00:71:C1:C8:50:37:41:EC:5F:24:4F:4F:DD:9B:07:E4
Authority key identifier: 90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5
Certificate issuer:       /CN=A91C7169/serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
Certificate serial:       193E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
Manifest number:          1901
Signing time:             Thu 16 Apr 2026 16:24:20 +0000
Manifest this update:     Thu 16 Apr 2026 16:24:20 +0000
Manifest next update:     Thu 23 Apr 2026 16:24:20 +0000
Files and hashes:         1: kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl (hash: gMWCyg5TBbSe+/uxl0rgmmqFHu7obbiTHV+ZrhDISVg=)
                          2: F7A56092245811F18BC4B892C3833773.roa (hash: PxeJ1lf7ieLA1QEf1jfBSGyZlZWAy7sNjtqIkyVYwpE=)
                          3: 6C409F0C90D411F09617F260C4F9AE02.roa (hash: EVQn/KNomyKNTdeIsk8hWARt5eleL1I0XO8r52dM3Kg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl
                          rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6462 (0x193e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7169, serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
        Validity
            Not Before: Apr 16 16:24:20 2026 GMT
            Not After : Apr 23 16:24:20 2026 GMT
        Subject: CN=69e10d34-1639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:0d:af:f5:72:86:14:55:c7:f1:df:2b:45:
                    01:aa:fa:3b:5a:f0:03:a5:8b:14:86:71:70:94:f2:
                    4f:f9:8d:b8:93:c8:2a:5d:eb:63:a0:62:8a:5d:dc:
                    13:ad:d1:e0:49:6b:e8:71:e3:56:2d:fe:7f:f1:38:
                    b3:31:6c:41:6b:b5:dc:56:39:8a:d8:b2:52:ca:94:
                    d9:d9:13:2c:ab:3a:f3:33:83:53:ef:e3:1b:e1:4c:
                    45:b8:34:ce:30:ba:c8:f4:85:27:e3:b8:86:50:36:
                    f7:04:d2:a3:7f:2b:a5:e8:5b:09:0f:b8:e4:f0:ad:
                    0a:36:d9:5e:b3:11:e7:90:30:8d:86:7c:6e:e4:3a:
                    85:26:3f:23:93:c1:07:db:54:2d:77:af:4e:a7:bf:
                    56:c3:ef:e7:de:e2:b0:e1:99:65:ba:26:6e:17:eb:
                    4b:57:48:17:4c:b1:08:22:b0:7b:30:22:34:eb:e7:
                    af:bc:c5:5f:52:66:72:b9:fd:72:c4:ac:e6:e2:d8:
                    a6:52:27:da:c3:ed:60:ab:e5:20:f9:29:ce:53:6c:
                    69:8f:29:54:bd:dd:e6:9a:75:b5:b4:17:69:1b:d7:
                    54:90:8b:c0:2f:92:22:3d:ff:c8:8e:6a:89:7e:7d:
                    9f:a7:7c:cb:58:f1:26:9b:26:9d:8d:8c:71:0e:be:
                    51:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:44:B2:E9:00:71:C1:C8:50:37:41:EC:5F:24:4F:4F:DD:9B:07:E4
            X509v3 Authority Key Identifier:
                keyid:90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:48:42:fa:0c:51:54:2b:f5:22:da:fd:eb:df:1d:a6:a3:c5:
         f2:bc:08:8e:e2:66:af:87:ac:fd:f5:92:1b:51:b9:07:75:31:
         29:d5:50:a9:da:31:43:bd:ca:2a:11:c0:b8:9e:76:f4:c0:37:
         7d:39:8d:56:ae:4d:d5:90:b0:c4:18:bb:ce:8a:b1:ca:72:26:
         84:fa:00:1d:07:07:0b:c2:04:7c:d2:fd:3b:07:84:b6:88:cd:
         d9:da:d1:48:1b:4b:30:79:e3:4e:78:2a:61:a7:3c:54:8c:0f:
         97:55:b3:6a:80:1e:cf:b0:d7:86:c3:aa:44:12:8d:e6:f8:a9:
         fd:14:51:64:75:22:a0:f7:ee:f1:e0:5e:83:32:7d:7b:45:c6:
         08:51:e2:64:75:7f:6d:86:56:3d:6b:02:62:69:8c:f2:bc:d4:
         fa:c4:02:57:44:24:05:a6:64:c2:67:79:ad:6e:af:d3:ca:42:
         9a:ef:cc:81:d9:44:61:03:b7:1b:24:f5:24:74:93:91:1f:5d:
         e0:b8:c8:f0:15:59:c2:5f:08:44:38:c3:b7:22:e2:58:af:03:
         8a:0f:69:c5:b6:e1:38:73:a9:6a:7c:52:f2:90:b3:e7:42:34:
         49:28:65:08:17:c9:63:89:dc:05:b0:29:51:72:5c:74:c0:42:
         ae:44:8c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:07:07 2026 by rpki-client