Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
File:                     nE_-Zd6jUjPTnocCI4VlV03tRm4.mft (raw, json)
Hash identifier:          J0Npd4jJ5Sy24DrL3bLAiGmCYJV8sUtbgZWpBZcPKhA=
Subject key identifier:   9A:59:05:46:40:34:CB:E9:62:98:C3:30:68:F2:64:09:10:D5:78:50
Authority key identifier: 9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E
Certificate issuer:       /CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
Certificate serial:       07E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
Manifest number:          1B9E
Signing time:             Thu 16 Apr 2026 16:52:35 +0000
Manifest this update:     Thu 16 Apr 2026 16:52:35 +0000
Manifest next update:     Thu 23 Apr 2026 16:52:35 +0000
Files and hashes:         1: nE_-Zd6jUjPTnocCI4VlV03tRm4.crl (hash: gMPHf5f4q6x00RQNiTTZbHRxBymVKD2rR5Zd8qhVXl4=)
                          2: C56AF018E98B11F0A24D3E834F6F56BC.roa (hash: MIF4G38mLftqnqeE9T0qy+6BeKMKul+rB3EiPJaG4sA=)
                          3: C6BB442CE98B11F0A24D3E834F6F56BC.roa (hash: fQvlcrwBQbuojkhr1MzXvqt8o4OCenjdJMRcowohAyw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl
                          rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:52:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2018 (0x7e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAA4E, serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
        Validity
            Not Before: Apr 16 16:52:35 2026 GMT
            Not After : Apr 23 16:52:35 2026 GMT
        Subject: CN=69e113d3-db8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b7:9a:cb:68:67:3b:5d:9e:dd:13:bd:69:a6:
                    3c:5a:77:84:0f:ee:77:51:87:9c:c2:d2:99:4b:20:
                    35:d7:01:bf:88:20:be:6f:3d:3a:75:71:1c:8d:9a:
                    52:4d:a3:d1:47:e6:cc:ff:1b:81:76:9f:76:25:af:
                    5e:27:ed:b5:36:30:df:2e:a7:09:cf:89:5b:55:ad:
                    69:52:17:3e:56:7b:4b:e9:73:57:71:c7:23:d7:e6:
                    09:d4:72:93:bc:18:cb:68:2b:b3:e5:e1:4e:6d:4f:
                    0c:86:d1:8f:b9:86:8f:cf:40:92:1c:b4:53:63:64:
                    60:b0:45:24:c6:d5:a1:07:d2:18:63:88:ed:8a:bd:
                    ad:8a:1c:ed:fa:69:01:71:d0:a0:dc:18:3f:c2:c7:
                    1f:d0:11:39:ac:7b:7e:ef:e8:32:36:9a:7d:7c:84:
                    8f:eb:5a:a4:4e:10:4d:7e:a4:0f:51:18:a4:29:d5:
                    26:01:b0:22:f8:e3:3d:ab:f4:6f:81:d7:ac:0b:a1:
                    34:1f:b4:88:b0:fd:32:30:84:78:e8:2d:85:e0:be:
                    e7:11:86:71:1a:a0:39:ae:33:39:ba:0f:0e:88:0b:
                    8b:ad:5d:51:57:f0:b5:28:f3:14:95:96:b2:d5:64:
                    0b:13:8a:38:f1:e4:25:a0:d2:36:9b:32:5d:35:47:
                    9c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:59:05:46:40:34:CB:E9:62:98:C3:30:68:F2:64:09:10:D5:78:50
            X509v3 Authority Key Identifier:
                keyid:9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:31:54:cb:14:ab:a9:5e:22:5b:42:ec:78:7c:c5:16:6b:51:
         56:c6:15:ce:50:99:3c:37:eb:4c:ff:1a:3e:b4:73:b4:db:7d:
         cf:e0:7a:fe:f4:d3:7f:b8:82:f3:19:18:43:ed:97:73:41:c5:
         63:85:e8:d8:47:3a:9c:38:ee:cd:f6:9a:52:18:09:3b:ad:e8:
         31:5e:b6:56:ad:22:45:40:c2:75:80:a1:0b:2b:24:a3:03:a3:
         70:92:b6:f7:c4:14:9c:d9:62:db:02:fa:79:cc:70:db:b4:ff:
         d7:53:4c:a5:96:8d:8f:3a:41:d4:2b:3c:06:9e:6b:9d:88:ac:
         0a:6c:ec:e1:ca:ee:c0:f3:c6:d7:22:2e:e9:a3:ef:77:ef:77:
         8f:ac:4c:35:3e:1e:5b:90:a8:f2:37:ba:f2:4e:0f:66:59:bb:
         92:0b:c8:b6:e7:42:6e:6c:26:81:98:8f:0d:30:d9:ec:34:5a:
         5c:12:08:a2:c0:67:93:c6:12:36:7b:12:99:10:af:75:74:42:
         51:e1:1a:21:45:0b:2f:c4:4b:96:b7:85:7a:96:9c:a2:6c:7d:
         c9:a7:b6:1f:92:ca:c7:40:25:21:e2:81:71:76:6b:c6:88:35:
         26:c1:51:13:d6:05:4d:80:fe:93:2e:de:59:7f:c9:bb:e3:d3:
         38:29:f8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:12:18 2026 by rpki-client