Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
File:                     woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft (raw, json)
Hash identifier:          Ti8tN4aB4U3A2wiAswMUFo9aHFIU68BQ9wdLXF6vA50=
Subject key identifier:   C6:FE:74:F7:34:E1:D7:EC:6E:87:10:85:25:73:4F:DD:CC:0D:33:F2
Authority key identifier: C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D
Certificate issuer:       /CN=A91C7B68/serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D
Certificate serial:       09BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
Manifest number:          0BA0
Signing time:             Thu 16 Apr 2026 19:57:57 +0000
Manifest this update:     Thu 16 Apr 2026 19:57:56 +0000
Manifest next update:     Thu 23 Apr 2026 19:57:56 +0000
Files and hashes:         1: woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl (hash: c9CqrgkVRggVLphulJMon8e9EqIFsBUVqVi4j4G+pew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:57:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2491 (0x9bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B68, serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D
        Validity
            Not Before: Apr 16 19:57:56 2026 GMT
            Not After : Apr 23 19:57:56 2026 GMT
        Subject: CN=69e13f45-034d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2f:01:43:ce:bf:c2:71:42:29:37:0b:92:fc:
                    25:84:0f:65:8f:cb:d6:64:f7:94:a8:ed:ab:dc:3d:
                    74:09:0e:ba:aa:2e:e7:c0:27:21:6c:3d:c4:9f:9c:
                    d9:c6:9f:5f:3f:98:77:32:1d:be:bf:19:92:8e:c9:
                    39:b0:bc:36:50:5f:99:58:58:17:df:fe:07:9a:28:
                    9e:ef:a4:89:5d:c8:fb:97:fc:b9:bf:4d:5a:57:60:
                    ee:d0:f6:9d:3d:99:b2:26:cb:01:03:93:ee:db:00:
                    3c:7c:9e:61:85:9c:79:f9:5f:74:bf:79:ff:88:89:
                    38:11:cb:2f:f4:4d:af:9f:51:0c:a1:3a:cb:05:3c:
                    48:4e:ed:22:df:83:c4:db:af:8b:3c:08:c5:cc:3c:
                    aa:57:70:09:8f:57:35:d3:37:76:ff:d9:c7:b4:6e:
                    0e:fe:eb:be:a5:92:6d:71:15:0b:82:dd:fd:89:4c:
                    07:f1:f5:3b:b7:fe:4e:79:05:9c:1a:4a:23:0b:3a:
                    78:3f:b4:78:3a:04:f4:c7:88:2e:78:ce:92:93:0f:
                    e7:2c:ca:94:4c:5c:7d:8a:80:e9:3b:51:a0:4a:6b:
                    df:7d:7b:f8:d0:94:55:34:30:c3:c7:4a:23:ce:6a:
                    57:80:99:5a:62:cc:6d:4d:a0:97:41:43:49:bb:8b:
                    df:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FE:74:F7:34:E1:D7:EC:6E:87:10:85:25:73:4F:DD:CC:0D:33:F2
            X509v3 Authority Key Identifier:
                keyid:C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f6:b1:ad:92:3a:2f:52:9d:c6:33:5e:b8:e0:ca:8f:f1:ff:
         13:f7:4c:eb:e5:d2:d4:1d:21:ec:b9:e7:02:9a:b0:98:bf:47:
         05:e2:40:75:52:98:39:f7:66:14:e7:5c:b3:85:c5:7b:fd:79:
         93:aa:79:89:e3:b8:35:8e:3c:83:5e:8d:19:b0:e6:11:2c:47:
         78:15:8c:34:6c:b9:4b:f3:a6:66:58:24:48:bd:75:2e:ee:fb:
         96:4d:e2:c8:72:f2:c4:b8:60:88:53:e4:5d:61:b2:e0:e5:84:
         71:48:24:48:b2:8e:5a:74:9c:23:0d:04:bc:59:ff:d4:4a:43:
         43:7c:66:d2:95:0f:2a:17:f3:a6:f7:78:06:d2:db:21:31:89:
         9b:67:07:20:ae:e0:65:25:33:01:b0:5b:6c:03:63:01:62:4c:
         0b:69:7a:fa:59:ca:eb:20:c8:5b:77:2d:81:b1:19:f2:69:9d:
         d8:ac:a4:ba:f8:b6:de:a4:7f:dd:8a:b5:ef:28:b0:12:26:d8:
         e6:73:c5:50:f5:1b:2b:d0:e0:4a:2c:f6:55:ba:18:95:10:2c:
         7d:84:82:fd:51:45:89:a2:e7:33:e8:80:5f:e8:ef:05:1c:f7:
         9c:0b:b8:4a:36:c4:93:5b:59:06:0e:16:38:3a:a5:ed:f5:06:
         45:cf:04:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:21 2026 by rpki-client