Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
File:                     EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft (raw, json)
Hash identifier:          fMeW2XVTQUb+GRERK691QD5SKRuK21ctLlutfE/NlMg=
Subject key identifier:   FC:13:0D:81:A9:7C:D1:E0:92:D5:4F:E4:5B:D2:33:5A:A1:F8:98:E8
Authority key identifier: 10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F
Certificate issuer:       /CN=A91C9B37/serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
Manifest number:          A6
Signing time:             Wed 15 Apr 2026 06:49:50 +0000
Manifest this update:     Wed 15 Apr 2026 06:49:49 +0000
Manifest next update:     Wed 22 Apr 2026 06:49:49 +0000
Files and hashes:         1: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl (hash: BAWEnACVsFyz868hv3Nker8G8JdEkKX9y8SBVVAywm8=)
                          2: 83CD918C3CA311F0AA61F12FC4F9AE02.roa (hash: /Q9gpxY9Rv8Y6XwClcVbAHo67QEBLFEE8ponSdmbbqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 06:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9B37, serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F
        Validity
            Not Before: Apr 15 06:49:49 2026 GMT
            Not After : Apr 22 06:49:49 2026 GMT
        Subject: CN=69df350e-7f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:41:d9:d7:2b:93:99:47:8a:01:79:e7:9a:20:
                    de:99:81:f1:52:cf:02:02:5a:fc:f2:31:b0:fe:d6:
                    13:99:81:d3:b6:f3:f4:d2:7f:1c:29:89:88:80:e0:
                    7f:85:e3:d0:47:61:81:fd:82:5c:61:f3:97:ce:b1:
                    a4:a2:aa:3c:71:e1:98:91:40:29:89:e7:c9:9d:c6:
                    1c:95:bd:11:89:d9:d5:db:9f:70:2e:8e:96:7b:1f:
                    dd:04:ce:a2:d3:b7:92:d4:6c:8f:97:14:8e:d4:a9:
                    26:d9:d1:f8:ea:16:b8:ab:35:f1:76:6c:61:6c:95:
                    f4:ae:4e:e0:ce:b0:93:06:ff:ab:f2:f4:04:ac:d8:
                    8b:b1:28:7d:f1:8c:34:d2:f5:a1:7e:bf:a7:df:95:
                    16:bd:31:aa:c9:92:18:90:bc:44:c6:c1:c9:16:11:
                    38:b9:32:93:72:c9:06:a6:a3:76:7a:54:a9:ec:bd:
                    95:21:00:4c:66:5e:22:93:28:95:c1:46:6e:54:21:
                    93:4f:ea:48:00:eb:c0:64:04:57:56:0d:9f:7a:42:
                    99:64:ae:68:4e:3f:df:46:8b:24:ea:db:51:0c:1b:
                    12:8c:d9:eb:70:af:1d:9a:2e:51:23:dc:02:32:d3:
                    3e:79:e0:6c:1f:b4:4c:29:ab:7b:58:c5:6b:9f:85:
                    95:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:13:0D:81:A9:7C:D1:E0:92:D5:4F:E4:5B:D2:33:5A:A1:F8:98:E8
            X509v3 Authority Key Identifier:
                keyid:10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a2:2b:30:0c:32:11:15:11:d7:fa:e2:97:b2:a9:39:86:0f:
         e0:3b:ca:aa:15:0b:fb:71:64:f0:70:52:47:9e:b8:33:a6:80:
         b3:6c:81:02:23:18:69:44:a3:56:d8:72:d5:ce:b7:25:fd:bb:
         c7:92:d8:7d:7f:60:98:25:32:d0:4e:21:31:4f:cd:ed:cf:31:
         e2:db:ae:48:e9:0d:63:4f:60:c3:8f:69:25:0b:e7:e1:4d:64:
         41:86:e8:63:2f:dd:0a:90:96:8f:37:e7:60:be:aa:3b:c0:4b:
         46:21:b0:ac:e1:c8:7d:44:f7:bf:4e:ff:83:d6:2f:85:4f:69:
         ae:ac:f9:be:3f:7d:8b:60:39:63:45:49:1e:da:fc:8a:af:aa:
         42:95:42:82:ff:b9:77:dd:84:81:22:5c:1a:a8:ab:0b:10:fc:
         99:51:e9:58:ba:8f:56:e5:fc:04:a4:49:9d:21:02:53:93:ed:
         b5:a0:65:59:57:e5:1a:19:85:70:6d:6c:1e:65:4f:7e:81:b4:
         f6:fc:30:9d:0b:f7:3b:dc:a6:d9:49:a8:43:65:bb:76:99:66:
         5e:36:8b:f9:36:5a:0f:b6:ee:42:d8:2b:33:28:c6:10:8f:ac:
         77:4f:d1:23:61:97:d8:fe:92:1f:84:df:79:00:2c:65:dc:fd:
         28:fe:3d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:13 2026 by rpki-client