Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft
File:                     4H5XaJwnqZNhHLq6l7GU0xeWz28.mft (raw, json)
Hash identifier:          7HUay/QihiiJ8RC+26S0BFa8sy/G30ItlvcszkLZE+s=
Subject key identifier:   0C:5B:A7:59:AF:04:13:CA:41:A2:15:44:44:3C:85:4C:E5:E9:51:71
Authority key identifier: E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F
Certificate issuer:       /CN=A91C7E5B/serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft
Manifest number:          A9
Signing time:             Fri 17 Apr 2026 06:57:00 +0000
Manifest this update:     Fri 17 Apr 2026 06:56:59 +0000
Manifest next update:     Fri 24 Apr 2026 06:56:59 +0000
Files and hashes:         1: 4H5XaJwnqZNhHLq6l7GU0xeWz28.crl (hash: pidJcGwE5xRYM6JLfFLOGHG9pStezHbDk0yuLovoLU4=)
                          2: DBBAF162C19811F0A42BC412C4F9AE02.roa (hash: Kic9hnPcMWHN6pDr7Ll5IWiixhuAzQj9NWh88//ur+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl
                          rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7E5B, serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F
        Validity
            Not Before: Apr 17 06:56:59 2026 GMT
            Not After : Apr 24 06:56:59 2026 GMT
        Subject: CN=69e1d9bc-afaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bc:ae:ce:6b:a4:f1:bb:c5:17:44:e9:70:59:
                    2f:ef:dd:93:d6:e3:68:7f:3b:06:fb:e5:5b:71:41:
                    3b:43:6d:f5:c0:11:2d:5c:5e:bc:f3:a2:1a:bf:47:
                    16:ab:90:83:23:c0:94:8a:ee:97:12:16:68:59:84:
                    f5:69:29:f9:42:12:ee:a3:47:86:a4:8c:51:55:3d:
                    e8:00:54:1c:d6:69:75:cd:f4:5d:b0:30:16:f3:ab:
                    f5:f5:f4:96:dd:9a:17:f0:b3:b4:10:66:ac:f1:36:
                    a8:d4:40:7e:d4:fd:3c:5b:e9:88:e0:a9:78:4d:41:
                    07:4c:dc:b2:80:a0:ae:57:fc:04:63:b9:71:89:2e:
                    f2:e9:5c:97:da:d2:41:60:3a:02:ff:ce:6a:d5:f8:
                    50:19:5c:8e:32:b1:f1:cf:73:9c:6a:b2:8d:7f:c1:
                    33:92:ef:3c:88:53:e5:20:7e:0b:e9:c9:17:6b:86:
                    7f:af:c3:bb:8a:26:ed:66:fd:a7:c1:ae:ec:c4:16:
                    5c:32:8f:5e:92:29:60:97:b0:ce:dc:af:c3:54:0d:
                    84:4d:d6:65:4b:9e:ad:41:19:e7:c2:7b:f3:70:6b:
                    22:e3:94:32:a0:57:ba:00:3b:f7:fd:10:5a:f8:cd:
                    39:79:ea:f3:1f:ab:fd:95:a9:8a:76:27:6d:0e:fc:
                    59:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5B:A7:59:AF:04:13:CA:41:A2:15:44:44:3C:85:4C:E5:E9:51:71
            X509v3 Authority Key Identifier:
                keyid:E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:53:17:57:b0:ce:68:02:bd:32:fa:95:ba:a9:62:96:d9:50:
         cf:45:6b:5b:ff:83:68:a2:89:0a:1f:38:82:e8:a1:1c:44:20:
         40:57:2d:71:f4:0a:28:05:e6:9a:55:3d:d6:3a:5e:71:bd:09:
         94:f1:ed:aa:ba:48:0b:21:de:f4:0d:52:c4:9b:32:ac:fe:81:
         9f:9d:6d:45:d7:bf:23:1d:c7:da:4d:fa:63:e3:30:da:f5:56:
         7b:18:88:e5:e0:d3:67:80:d1:7a:4c:12:12:97:ee:24:88:73:
         7f:9f:af:d1:14:01:18:ca:62:1e:f6:83:c7:49:23:99:ca:21:
         ac:ee:a8:a5:24:ca:55:bb:02:dd:76:ce:04:02:1e:48:d5:ac:
         c3:eb:0f:4f:b8:3a:32:5d:f1:53:af:f0:82:59:b8:c5:e1:40:
         0e:07:47:52:35:68:41:3f:98:b1:41:32:4a:1c:8f:24:ad:a2:
         67:98:40:23:99:93:8c:3c:1c:92:48:ba:3c:3e:7c:6d:8a:9f:
         d1:95:f0:ef:da:9f:44:05:e0:7b:a9:f3:c5:e1:1e:30:41:0b:
         f6:3a:44:f7:c0:b4:35:51:24:ed:d6:4e:bd:6d:44:0d:7f:04:
         a7:d2:e1:52:12:49:5c:28:31:6a:7a:f0:db:c7:27:16:eb:84:
         7c:bf:8d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:25:09 2026 by rpki-client