Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
File:                     Swkt8QQoD0W8PyeW9AHMK0xhROk.mft (raw, json)
Hash identifier:          r1SWUluQ7bEl0BgIegAT0pHVpPnZuIcCORmx3Y50X28=
Subject key identifier:   6C:BF:00:6E:C4:E1:85:70:93:DC:5F:AC:E5:E9:27:88:1B:8E:98:FE
Authority key identifier: 4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9
Certificate issuer:       /CN=A91C8307/serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
Certificate serial:       0106
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
Manifest number:          0100
Signing time:             Fri 17 Apr 2026 05:56:25 +0000
Manifest this update:     Fri 17 Apr 2026 05:56:25 +0000
Manifest next update:     Fri 24 Apr 2026 05:56:25 +0000
Files and hashes:         1: Swkt8QQoD0W8PyeW9AHMK0xhROk.crl (hash: BId1DOqgDzUztST2skQd58gHpByvQwAPojJ7MzgmFqU=)
                          2: E5FC085A843011F0971BDC44C4F9AE02.roa (hash: dm3BcPGPdQuO5Idson2cH8Me4yvZsLSNX+U6zphRieA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl
                          rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8307, serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
        Validity
            Not Before: Apr 17 05:56:25 2026 GMT
            Not After : Apr 24 05:56:25 2026 GMT
        Subject: CN=69e1cb89-18ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f7:c3:ee:5e:80:60:8c:bf:04:33:c6:af:3d:
                    31:e5:b1:1b:cd:c6:44:57:8d:5c:df:40:ab:ec:14:
                    b2:12:cb:42:63:12:11:6f:81:60:44:75:2e:bd:e7:
                    3c:7d:71:4d:44:9d:85:25:71:fd:2d:81:fd:c4:7c:
                    61:20:09:07:92:12:72:0f:80:13:26:b5:16:ca:92:
                    dd:bb:40:96:ad:13:b8:a9:d7:f2:da:e7:16:9c:2c:
                    cf:58:35:f5:62:ad:da:4e:79:a6:b1:13:96:bd:39:
                    b1:5f:be:9c:9d:5d:96:a5:2b:65:f0:1d:ce:32:2b:
                    4f:10:cd:11:0a:53:f6:d9:25:fd:e2:43:b2:73:5a:
                    3b:af:cd:61:cc:b7:8e:81:4a:fa:6c:ae:b7:b4:c0:
                    18:3b:03:fa:91:47:98:30:7f:74:40:c8:fc:3c:1d:
                    cc:81:01:56:1f:38:35:44:ff:a0:7c:a2:76:07:63:
                    84:9b:63:b2:0b:d7:47:db:87:20:ab:e4:19:1d:6a:
                    d1:74:43:fc:d5:b3:32:8c:2f:d7:33:ca:d7:fd:a3:
                    61:07:23:e8:9d:16:07:fb:d6:d8:9b:25:07:c8:23:
                    b3:26:7e:f0:c2:bf:1e:cd:45:0b:a1:b6:16:70:93:
                    e0:14:c4:cd:1b:c5:50:5c:db:2c:87:10:41:94:c8:
                    ad:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BF:00:6E:C4:E1:85:70:93:DC:5F:AC:E5:E9:27:88:1B:8E:98:FE
            X509v3 Authority Key Identifier:
                keyid:4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e9:90:4a:17:a0:3a:db:97:03:c3:c9:80:e7:73:c1:ca:a7:cb:
         aa:7d:bb:38:53:7b:73:21:41:d0:21:83:e7:54:d2:a8:b8:5d:
         30:8e:2e:a3:0f:ac:4a:b0:0b:ea:97:85:e4:38:ff:c0:82:3c:
         fa:8a:71:b7:e5:41:f1:f7:b8:36:6c:66:47:66:db:ca:dd:33:
         e1:ec:12:21:11:63:4a:cb:4f:0b:45:37:eb:d8:d2:28:63:5e:
         97:e4:c2:75:fe:e0:3e:25:c6:c5:dd:4a:d9:80:24:67:a8:a9:
         f6:b0:8e:5f:26:28:ae:68:1b:6b:b9:c6:23:d7:2d:b9:51:2f:
         ad:c1:17:89:63:3c:5d:56:91:25:75:e1:03:63:2f:55:6c:35:
         3d:37:5e:72:93:4e:5d:b5:b7:01:28:66:31:71:1b:92:ca:cc:
         41:f1:51:b8:06:b1:90:dd:4d:e3:5c:8d:df:5f:f9:0f:4a:82:
         a1:af:44:db:d7:f0:ee:8e:e5:78:ed:23:79:10:a6:71:85:a0:
         d1:4a:dd:a2:2e:a5:a3:7e:95:db:6e:94:32:34:be:4b:e3:c5:
         4a:40:22:dc:56:00:f8:e4:d1:14:ed:58:2d:23:e2:52:a1:51:
         19:c1:ca:10:ca:8f:33:f3:e3:bb:9d:bb:f7:7a:59:cd:9e:57:
         a5:e5:33:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:33:46 2026 by rpki-client