Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft
File:                     sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft (raw, json)
Hash identifier:          +kzuxRvih7OWswa8b/khPwjc+rZ97hjLQnAgmn9Fhxc=
Subject key identifier:   E2:4B:29:C5:C2:C5:83:C2:62:30:D7:D6:EC:20:40:DA:63:27:8F:DA
Authority key identifier: B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2
Certificate issuer:       /CN=A91C90F3/serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2
Certificate serial:       091D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft
Manifest number:          0912
Signing time:             Thu 16 Apr 2026 20:11:38 +0000
Manifest this update:     Thu 16 Apr 2026 20:11:37 +0000
Manifest next update:     Thu 23 Apr 2026 20:11:37 +0000
Files and hashes:         1: sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl (hash: jLnP3NO4E+YqY+JZe/P7WX6JIhAMX5bXISwO300boKI=)
                          2: E67EF1B25F0311ECBB273637C4F9AE02.roa (hash: myPqUDNWdaCgUms1NDW6cgdVK5APz5PqgTj/yOUElVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl
                          rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2333 (0x91d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C90F3, serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2
        Validity
            Not Before: Apr 16 20:11:37 2026 GMT
            Not After : Apr 23 20:11:37 2026 GMT
        Subject: CN=69e1427a-a6a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:af:64:85:28:44:8d:17:f7:52:ed:ce:b0:1f:
                    87:ff:49:b5:8a:a7:ff:b5:7d:58:07:b3:cd:89:c4:
                    38:57:fd:73:5b:88:ac:22:38:22:12:6a:ea:46:29:
                    0b:50:8f:b6:af:95:b6:5d:33:43:7a:4e:65:18:e8:
                    53:a8:ae:e3:54:9b:46:73:10:04:b5:c0:c0:b5:bd:
                    e3:db:80:4a:2a:40:ce:a6:14:37:f3:50:53:64:af:
                    a0:51:1a:15:30:44:e2:d7:94:a8:54:2e:1a:76:7b:
                    ba:34:70:b7:64:91:4d:af:19:cc:c2:0a:1f:0a:a1:
                    f9:f6:e8:49:a9:8b:e2:0d:7a:4e:9e:18:63:be:10:
                    25:90:8e:46:80:ad:49:84:ea:ed:33:c2:e7:b2:fc:
                    ad:fb:e0:02:c0:a4:6b:f3:0c:02:1e:64:dd:9c:61:
                    21:9b:28:ad:cc:0f:38:2c:d8:ed:9a:ce:07:21:4b:
                    e7:0c:43:95:7c:e8:52:ed:d4:8a:c3:41:3f:0d:1b:
                    c6:78:ad:9e:80:e7:81:f2:6d:9e:10:41:33:b6:be:
                    d7:71:45:27:f1:8f:36:52:db:0e:3d:1b:66:29:bc:
                    76:a5:39:ad:34:99:91:4e:6a:d1:9d:25:1f:24:31:
                    ad:99:eb:b8:15:69:74:84:3c:c9:ca:4f:1a:36:18:
                    32:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4B:29:C5:C2:C5:83:C2:62:30:D7:D6:EC:20:40:DA:63:27:8F:DA
            X509v3 Authority Key Identifier:
                keyid:B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:2c:8a:09:91:1c:c6:8b:f6:87:55:e1:5e:ad:dc:dd:f1:6c:
         94:22:aa:3b:60:15:cd:f1:09:46:d8:10:ec:17:8e:e6:3c:00:
         2c:72:88:48:d3:e5:a4:ae:30:20:8a:75:53:f6:52:ab:96:eb:
         52:93:af:41:a2:4b:b9:22:8f:c8:94:53:80:5b:d9:72:38:62:
         ed:9f:72:29:4f:ce:07:12:38:a7:78:6f:26:d6:c1:d3:3a:a7:
         03:72:03:e5:d4:03:ee:96:f2:62:f8:56:a4:a6:e3:7d:22:92:
         f6:42:a2:40:df:e6:b3:ec:ec:df:b6:84:f7:08:95:9c:28:23:
         24:5f:61:13:e4:63:02:84:85:ee:a0:8e:07:57:02:5a:be:c8:
         6a:00:9d:fd:b2:71:06:d0:12:70:06:14:70:ea:b2:be:52:c1:
         88:5b:8a:f9:61:5d:fd:7b:0b:77:7f:b7:12:e6:d2:1a:4b:1c:
         dd:1c:b9:aa:e4:91:30:34:d7:70:27:1c:7a:e3:8e:46:a1:81:
         4c:16:38:bd:c7:56:75:6b:88:22:b3:7e:93:24:84:e8:a5:cb:
         c3:70:f0:83:b2:0c:1a:dc:e0:b2:87:17:05:92:3a:52:3d:e9:
         58:c2:e8:80:dd:55:15:6f:87:ac:2f:9b:ae:d2:2b:71:e3:0d:
         ff:da:b0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:12 2026 by rpki-client