Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
File:                     m1pTZdorJfppi3Awk8-9wqLCP88.mft (raw, json)
Hash identifier:          OP+gC0fzNZtNBMCHWJ+Fu4Wm6pWFBKUP8QB3fYB4n3M=
Subject key identifier:   35:C4:94:A3:BC:83:49:47:CD:D5:B7:44:CC:A0:2F:C8:88:03:74:F9
Authority key identifier: 9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
Certificate issuer:       /CN=A91C7B68/serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
Manifest number:          0BA2
Signing time:             Thu 16 Apr 2026 19:58:02 +0000
Manifest this update:     Thu 16 Apr 2026 19:58:02 +0000
Manifest next update:     Thu 23 Apr 2026 19:58:02 +0000
Files and hashes:         1: m1pTZdorJfppi3Awk8-9wqLCP88.crl (hash: EYTVK5p7Ij+FpqSwyjJCzEsy2VZqD3RwUlTBZGopTTw=)
                          2: 05287CD492B611F0841D2F21C4F9AE02.roa (hash: O5VX5p+22vMD3sqEB7suLw7mcxw1FAJJlGIyd6isaQY=)
                          3: 048E963C92B611F0841D2F21C4F9AE02.roa (hash: 9QN47A/xiyVIjZhqkG9Ma9dyQH6r8QDrfXfIFF2/lM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B68, serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
        Validity
            Not Before: Apr 16 19:58:02 2026 GMT
            Not After : Apr 23 19:58:02 2026 GMT
        Subject: CN=69e13f4a-c072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:2a:08:8c:62:c3:86:8c:0a:b9:e2:af:45:
                    11:54:f2:91:99:95:88:c1:6b:41:55:d3:12:df:0a:
                    98:d5:76:47:ed:0b:4a:5a:07:c7:60:17:1c:d8:ba:
                    57:e4:3f:0d:89:d4:ba:4e:39:85:2c:90:31:90:af:
                    62:2d:49:73:7a:28:88:f9:89:be:e0:66:c6:26:6a:
                    87:59:ad:06:e3:7f:dc:b6:0d:d9:b3:83:fb:24:47:
                    26:d0:dc:5d:cd:ae:7a:98:cb:e5:38:bb:77:cc:09:
                    40:3b:f8:49:49:99:c7:25:0a:14:37:fd:11:96:50:
                    e7:05:81:ef:84:dc:27:14:6a:c3:a3:42:d6:b8:04:
                    c2:04:96:33:b9:e8:14:1c:14:ac:fc:07:2d:09:d7:
                    03:57:59:87:fc:f9:4b:ba:48:36:9e:74:80:54:81:
                    fa:92:ab:47:3a:e7:60:8a:d5:5a:15:b0:db:8d:68:
                    e5:15:dc:4a:d4:00:25:92:9c:ac:15:fd:a8:8f:4b:
                    aa:1f:59:49:49:4b:02:85:55:09:10:94:ad:b6:98:
                    35:64:80:20:bc:1c:07:7f:34:96:d1:a6:af:f1:27:
                    54:87:c3:bc:bf:62:6d:fc:53:d6:ae:10:d5:36:67:
                    a6:01:bd:0c:1e:f4:87:ba:f6:b8:1d:b2:40:92:7a:
                    25:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C4:94:A3:BC:83:49:47:CD:D5:B7:44:CC:A0:2F:C8:88:03:74:F9
            X509v3 Authority Key Identifier:
                keyid:9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4e:4d:31:c9:39:97:bf:20:e4:ad:88:3e:20:36:ac:7c:cc:
         70:21:54:94:b4:2a:1d:de:db:68:14:f9:c1:b4:79:8f:02:83:
         02:55:c3:e2:c7:05:8a:c6:ba:01:38:38:a6:ae:f3:3b:44:81:
         3a:64:03:c7:fb:5a:46:d5:d7:97:00:c2:b4:61:3d:48:f9:35:
         6f:92:5f:1e:c1:c2:fb:74:f0:7a:6f:9c:aa:24:5f:c0:ea:08:
         d4:8d:80:9f:c1:c4:79:5e:ee:4a:49:72:b2:b6:cb:b7:15:b2:
         fd:41:c5:f7:3a:2c:39:d2:c3:38:74:6f:fa:b0:ed:0a:5f:c5:
         eb:35:08:6e:d9:03:be:26:c3:47:5a:4b:26:e9:d6:2b:47:f5:
         34:a2:aa:7c:eb:5b:db:16:3b:09:f3:87:da:89:f4:e3:9a:9d:
         02:c2:2a:81:f6:ac:e6:22:22:e4:64:ae:aa:d9:b0:4b:5d:06:
         97:b7:a8:7d:8e:df:d5:4f:53:92:00:df:21:60:07:97:07:c5:
         de:a8:71:6c:d8:26:f8:f2:d9:41:66:58:8c:db:56:74:7f:4f:
         74:31:f1:49:79:1f:a2:c1:b1:67:5c:f6:28:62:ba:75:e6:ed:
         a3:ee:5d:71:5b:fb:e3:c9:cf:88:4f:64:a2:91:94:04:04:6c:
         59:ec:69:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:32:55 2026 by rpki-client