Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
File:                     toWM6JkRXyxWHHZl74vgaIBoEJw.mft (raw, json)
Hash identifier:          k9Hm2V/vDapt0OoVhmXyaLXpLfrJ/nLMIyfF3epr8HI=
Subject key identifier:   21:12:B8:40:92:43:D2:2C:57:13:28:CF:A7:3D:F1:14:51:76:E1:22
Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
Certificate issuer:       /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
Certificate serial:       09DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
Manifest number:          09B8
Signing time:             Thu 16 Apr 2026 19:51:34 +0000
Manifest this update:     Thu 16 Apr 2026 19:51:33 +0000
Manifest next update:     Thu 23 Apr 2026 19:51:33 +0000
Files and hashes:         1: toWM6JkRXyxWHHZl74vgaIBoEJw.crl (hash: bXm4Qio5ePWodqalBshXC1vTCPvZsquOqgBu2cVegLU=)
                          2: 1A4ED0E8A71811EA80A77B1FC4F9AE02.roa (hash: oq37cvFdf0Lwnn48NX4zkotyv1ewB96NkLUyO7/90Dg=)
                          3: 95DC9990D0A211EE9C97373FC4F9AE02.roa (hash: l2egmQd3zsdtRbINJVQmYS6+Vjf9g6ZTB8lsSZj6OnM=)
                          4: 9C454274FB7711EDA78AAC1DC4F9AE02.roa (hash: hhZNB/58biqDU/puvBuRkIn6cgsCh7V3z4s20oQo9/c=)
                          5: 9D83F4E6FB7711EDA78AAC1DC4F9AE02.roa (hash: 8s3OLywFU0iSe0asfoBu9okI5WeihCkAQz7KzNUA7Rc=)
                          6: 8C79CFC6A6FD11EAA1B00744C4F9AE02.roa (hash: ZfiWnW2QWI/riqicAikvVoOAgBW+tB/Nt2Y+DVitm8Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl
                          rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:51:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2527 (0x9df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D120D, serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
        Validity
            Not Before: Apr 16 19:51:33 2026 GMT
            Not After : Apr 23 19:51:33 2026 GMT
        Subject: CN=69e13dc6-8e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:31:12:31:5f:37:80:36:f7:c6:f0:19:aa:09:
                    90:74:b4:9f:ce:13:f9:64:33:94:34:e6:42:21:ef:
                    43:17:69:6b:1f:08:c8:25:7f:95:a9:8b:6b:ac:da:
                    a2:f2:2b:dd:95:a1:2e:ee:16:4b:a2:78:82:c6:30:
                    21:b3:e6:08:6d:04:3b:9d:d8:fe:7d:90:26:d6:f1:
                    79:fc:29:49:c0:b1:55:bf:48:4a:b0:5a:ed:4e:88:
                    7b:f1:4d:e6:c7:5e:3c:2a:6e:b8:cb:1c:6f:46:71:
                    ac:a7:c6:42:79:45:de:e6:e2:ec:98:06:65:0d:3c:
                    bc:25:dc:9a:95:d1:2a:d8:91:24:d0:7c:76:7a:a2:
                    3a:0b:00:48:76:4b:c4:97:10:5e:cb:49:92:eb:4c:
                    94:84:0f:fc:c4:61:79:e8:47:4d:7f:13:13:23:f3:
                    6f:ab:96:11:6f:ca:fb:60:80:74:66:b8:55:9b:d5:
                    f0:0b:5b:fc:3a:04:0b:04:f3:9a:c6:ad:d4:c4:cb:
                    65:b9:ca:b1:65:95:5c:02:cb:45:bc:a0:65:44:dd:
                    04:6e:e8:89:8b:25:ef:9c:f7:d1:87:f0:1c:e4:5e:
                    a2:84:03:21:8b:3e:25:e9:53:e5:fa:2c:5e:99:e5:
                    23:ad:a7:4c:20:a4:1c:b3:b2:45:7d:ca:90:8c:dc:
                    1c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:12:B8:40:92:43:D2:2C:57:13:28:CF:A7:3D:F1:14:51:76:E1:22
            X509v3 Authority Key Identifier:
                keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:11:6a:af:71:50:2c:ee:ec:1d:f6:1b:8e:d5:75:a7:ac:38:
         c6:5d:72:34:2f:7b:c6:9c:42:1e:6f:d5:1d:4a:4a:2b:ef:d8:
         2f:11:f8:0b:54:56:ba:19:ca:6b:79:ba:a9:c1:18:71:2b:6e:
         18:38:08:c2:03:58:6e:a5:eb:41:0f:91:68:a0:27:c8:0e:bd:
         c3:76:0f:0b:0b:88:8b:08:5f:4d:81:b1:43:ed:d1:2f:91:b8:
         62:d8:00:59:6d:28:82:dc:f5:38:0a:b5:1d:c5:cf:b4:00:4d:
         24:5b:1c:26:44:e3:61:ab:61:e6:4f:91:66:22:be:3b:d5:93:
         5f:8d:c1:1c:41:da:34:72:0f:f6:e8:de:c1:c2:5c:e0:9b:df:
         6f:64:6c:d8:3b:a7:60:cf:81:23:f2:aa:0c:35:e8:f1:93:f3:
         f7:a2:f0:2e:a6:fd:00:9b:77:98:fd:7f:f3:06:01:d4:7c:0f:
         44:f8:12:ae:7a:3f:bc:67:6d:b6:6c:b8:0d:75:30:a8:39:1a:
         6d:35:98:af:31:98:db:dc:78:cd:61:b1:70:fa:9a:66:ae:4a:
         02:aa:44:56:bd:79:9e:0d:14:a4:25:f6:c5:b6:c5:c3:b9:98:
         1f:07:55:70:b1:b4:95:7c:d2:0c:94:3d:6f:89:0f:5d:d1:77:
         2d:36:84:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:36:26 2026 by rpki-client