Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
File:                     9jTAsSwZeK8-iQxSj8csj3R9uYA.mft (raw, json)
Hash identifier:          BChdpW1/4LANO21f/2ulZx460fVgf4NvlaKEVWXQ144=
Subject key identifier:   A2:15:EA:D6:7F:3C:1B:A7:E3:63:A6:B8:1E:23:D4:B1:28:C3:E3:40
Authority key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80
Certificate issuer:       /CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
Certificate serial:       03E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
Manifest number:          03E1
Signing time:             Fri 17 Apr 2026 00:26:00 +0000
Manifest this update:     Fri 17 Apr 2026 00:25:59 +0000
Manifest next update:     Fri 24 Apr 2026 00:25:59 +0000
Files and hashes:         1: 9jTAsSwZeK8-iQxSj8csj3R9uYA.crl (hash: 1Pm7GJeWUMoSYZ0rXpj7CrEM3117O/qw25QRH/9Wg1o=)
                          2: 2173FE4EC0A611ECB6A6996CC4F9AE02.roa (hash: lbvKMon3phKT4kxAzoVpvvRCe8EmYTdmkdcCNNB8PIY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl
                          rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 999 (0x3e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C798A, serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
        Validity
            Not Before: Apr 17 00:25:59 2026 GMT
            Not After : Apr 24 00:25:59 2026 GMT
        Subject: CN=69e17e17-7115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b7:27:d2:55:e0:09:4f:6f:b4:3f:3c:9e:e2:
                    e1:02:cd:74:e3:4d:ef:08:5e:06:f3:5c:a1:96:41:
                    4b:0c:b4:b0:84:96:74:b3:a7:79:a2:65:ff:bd:be:
                    92:b1:44:c2:25:be:20:87:c1:b1:d3:c5:19:56:7e:
                    b2:0f:48:a8:dd:0d:c7:cc:65:88:88:82:1d:08:ae:
                    58:9d:66:5e:ab:69:13:c4:5a:5d:ff:3d:a5:d0:d1:
                    12:ed:b3:a8:c9:10:93:4a:34:db:28:ff:ca:9a:95:
                    80:f5:c6:da:fd:a3:dd:fc:f3:12:37:81:88:7a:a4:
                    a3:16:27:60:46:a7:2e:47:00:2c:1f:e5:d5:8e:45:
                    10:fe:0a:5a:04:1c:c3:08:b7:26:e4:13:11:64:2a:
                    58:14:63:6a:fb:48:88:01:de:57:ca:59:6a:22:d2:
                    f4:29:1f:be:a1:91:96:0e:25:be:01:b8:b6:4d:d5:
                    15:38:b1:5d:36:bf:d2:dd:10:68:59:cc:be:4e:76:
                    d8:02:2c:2f:fb:0c:7d:f9:bc:97:2a:93:5f:ab:2e:
                    a0:5c:16:94:a1:92:d2:34:74:f1:e2:dd:fe:5f:a2:
                    56:30:fc:e5:26:ee:37:95:e7:cb:93:8a:f9:82:0a:
                    cf:ef:5e:ac:e2:5e:90:f2:f6:13:f5:41:a0:fa:6e:
                    7d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:15:EA:D6:7F:3C:1B:A7:E3:63:A6:B8:1E:23:D4:B1:28:C3:E3:40
            X509v3 Authority Key Identifier:
                keyid:F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:0d:e5:e1:f3:10:b8:39:1c:83:cf:48:ba:77:2b:82:ef:ac:
         4f:f6:0e:47:f4:8e:cb:4c:21:4b:5f:fa:8d:6b:de:2d:61:8b:
         9a:7f:19:3f:6b:c2:7c:a3:b0:bc:19:1f:74:b1:b8:e5:e2:cd:
         56:cb:e0:e4:2f:8f:bf:23:fc:f2:12:7d:7a:ad:fd:e4:79:f2:
         e4:7b:e2:e1:f4:88:b6:32:a8:63:6b:fc:20:3a:b6:c3:85:f9:
         d4:98:dd:65:c0:95:79:3b:64:ef:a8:d7:50:66:b2:a6:f6:1d:
         3f:eb:af:fc:5a:25:e1:c6:b0:5e:a4:f3:7d:05:3e:10:0d:20:
         fd:6d:49:8d:8d:56:3a:16:77:f8:b9:ba:51:6a:2f:68:94:3b:
         9c:a6:78:b3:46:62:57:e1:98:0e:05:c7:47:1a:08:ef:60:40:
         8e:18:63:29:9a:52:c3:97:4e:a6:2a:d7:ef:14:82:c7:92:01:
         17:9a:0f:77:7a:5c:e6:15:63:dd:7f:14:c5:a9:c2:d3:f6:96:
         99:6c:62:ef:63:ab:b8:b5:1e:6b:25:e4:c9:00:da:3a:09:b3:
         35:8c:be:b9:2d:dc:c0:bc:ad:a7:a8:59:d3:c6:fc:24:bd:2d:
         cf:f9:48:af:43:bd:8f:70:d5:ad:6d:04:2c:2d:2e:ab:18:ef:
         6c:d8:50:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:36:14 2026 by rpki-client