Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
File:                     we5pqmqhrLoy4Wdk2oG_ekFopg0.mft (raw, json)
Hash identifier:          1kfX5TBOB5fmBQJ9U7yFxmZ05GOdlrnEvp+wHNvhVG8=
Subject key identifier:   81:CB:89:40:0C:0F:DE:20:3B:89:8F:B6:DD:38:57:3D:DA:23:33:89
Authority key identifier: C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
Certificate issuer:       /CN=A91D0B6B/serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
Manifest number:          D4
Signing time:             Fri 17 Apr 2026 06:28:15 +0000
Manifest this update:     Fri 17 Apr 2026 06:28:14 +0000
Manifest next update:     Fri 24 Apr 2026 06:28:14 +0000
Files and hashes:         1: we5pqmqhrLoy4Wdk2oG_ekFopg0.crl (hash: 5aPZGuHIoQoz743IKyMu6npDLmW77b4BueFoggyHRSI=)
                          2: CBB83D902F1E11F09BFFB056C4F9AE02.roa (hash: e1prpIYuDZ5J7mrkW/azLYwyJt2qyvzcK3j1tu4Uieg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl
                          rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0B6B, serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
        Validity
            Not Before: Apr 17 06:28:14 2026 GMT
            Not After : Apr 24 06:28:14 2026 GMT
        Subject: CN=69e1d2ff-e60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a3:e6:53:60:16:43:ab:a1:1d:f9:bf:87:a8:
                    b3:a4:a3:56:30:52:41:b2:fe:ab:2d:07:aa:54:b1:
                    f1:11:6c:9e:93:a8:7c:7a:3f:87:03:f6:cb:83:f1:
                    5a:b3:b1:23:c8:af:df:2c:d1:88:09:5c:eb:4f:f4:
                    1f:6a:78:6b:12:04:8f:ed:80:e7:8e:f7:e0:18:61:
                    85:2d:92:8c:f9:aa:82:c8:47:91:e4:5f:30:60:5f:
                    70:7f:1b:f2:2f:10:42:dd:c6:4e:2b:31:78:bd:d3:
                    11:82:81:55:f7:bb:2c:2a:e0:6d:a2:24:9d:95:75:
                    9c:f1:50:8e:b0:e1:84:8b:2c:d9:7c:e3:db:4c:ef:
                    3b:78:92:0e:3d:3b:56:4c:25:90:0c:f9:bd:f4:e0:
                    98:d9:88:d4:5a:63:5a:66:12:c0:a0:24:3e:92:dc:
                    94:cd:1e:08:19:f1:12:f6:df:34:d1:0c:3d:ec:86:
                    fa:0c:a0:32:b6:c3:24:d0:95:3c:b1:21:d8:64:2a:
                    bf:20:d1:99:22:e2:66:d8:f1:a8:9b:fd:a4:69:05:
                    7f:7a:d6:03:fe:43:14:a7:e4:70:4b:b9:44:81:13:
                    65:e0:0c:2f:9c:e5:7c:75:d7:31:1f:a0:77:e8:a8:
                    b3:c4:f7:e0:cc:61:48:0f:e6:17:d0:1f:b6:34:66:
                    2a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CB:89:40:0C:0F:DE:20:3B:89:8F:B6:DD:38:57:3D:DA:23:33:89
            X509v3 Authority Key Identifier:
                keyid:C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:12:05:e1:76:60:0e:d0:9c:85:1f:dd:20:bd:85:3d:c3:a7:
         72:16:a4:d4:67:57:56:49:83:14:ad:7d:cc:99:ba:d0:d4:bf:
         16:12:5a:13:8a:09:ff:64:a5:91:ab:28:46:4c:bb:d1:95:ce:
         ff:2d:b6:a1:d2:72:1d:e7:57:e9:2f:81:5b:54:f3:be:58:f4:
         11:8b:df:f9:ee:88:70:e1:4e:01:e6:ba:be:f5:ce:7e:70:43:
         a8:88:47:94:32:02:9a:82:22:9b:39:6c:36:57:b2:96:9d:08:
         1f:c3:aa:11:75:46:de:cc:49:d9:92:af:5f:cb:bb:fd:70:10:
         c1:06:6d:dd:c1:ac:6a:93:27:e2:08:e4:e1:d0:56:84:e0:c4:
         dc:5e:9d:6a:11:e3:14:f7:0b:a4:30:08:17:54:57:c9:9f:0a:
         ad:b9:93:0d:a3:27:21:c0:75:b2:05:74:30:fa:b9:65:37:11:
         05:4e:57:5b:2e:3a:62:5c:13:a8:85:06:96:85:d1:2b:e4:08:
         d4:c5:f8:e5:97:75:ed:0c:34:64:6a:9c:c7:48:3f:79:9c:50:
         6f:52:81:77:fe:e6:91:3c:37:8f:44:60:fc:a7:63:2c:cd:13:
         fd:15:ed:1e:a5:4d:e9:9e:1f:3b:6d:10:0a:d1:c0:30:d1:4c:
         d7:74:41:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:53:59 2026 by rpki-client