Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
File:                     1N8l4OzS44CPaHDuVvcPJVgYkz4.mft (raw, json)
Hash identifier:          vLWqpW/6/tbxqETH9tKx9U3QWd8wu6KHvqib9065iIg=
Subject key identifier:   92:5A:55:E9:6D:8D:4A:2E:9E:87:9F:69:50:5F:7E:E8:5F:9B:9E:BD
Authority key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
Certificate issuer:       /CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
Certificate serial:       0152
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
Manifest number:          014C
Signing time:             Fri 17 Apr 2026 04:53:20 +0000
Manifest this update:     Fri 17 Apr 2026 04:53:20 +0000
Manifest next update:     Fri 24 Apr 2026 04:53:20 +0000
Files and hashes:         1: 1N8l4OzS44CPaHDuVvcPJVgYkz4.crl (hash: bC6jaxjGXK3KgK/GMqrx0vb7xCbaNf6ZgMa9wZW+71A=)
                          2: 5415D510C68E11F0BC83973CC4F9AE02.roa (hash: aIjDJK06Sydwpu827vCSPgKtmMJrBazpUw0z+Gr+fHs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl
                          rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D260A, serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
        Validity
            Not Before: Apr 17 04:53:20 2026 GMT
            Not After : Apr 24 04:53:20 2026 GMT
        Subject: CN=69e1bcc0-8810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f4:53:a6:2b:c6:32:5e:aa:e5:60:d2:d2:30:
                    c0:5a:c9:0b:71:aa:9c:24:ca:83:b3:22:ac:0c:45:
                    81:c7:42:10:ca:2d:23:51:88:dd:93:f8:a0:58:f0:
                    d2:a1:78:e6:4d:41:e1:f8:fe:74:39:20:e0:0b:2a:
                    b6:fa:fe:98:ab:2c:5e:df:08:a1:d5:4f:9e:47:15:
                    bd:ad:a1:67:8f:01:9d:5c:7e:6a:dc:7a:a5:ac:9e:
                    6b:61:b2:7a:a6:eb:a0:e9:92:b7:fc:75:98:92:ce:
                    cf:a8:b0:e0:bc:a1:2f:4c:a4:08:91:fc:de:c2:ad:
                    8f:7a:b0:74:69:9e:0b:02:a8:41:91:44:d8:ed:99:
                    30:ba:91:0f:69:e1:a3:ee:4e:54:8d:b1:39:c3:43:
                    1e:c1:77:22:f8:99:5f:d7:ac:10:2c:ba:f7:5a:65:
                    17:a0:55:4c:01:b0:f4:99:3b:45:c0:b4:db:9e:2d:
                    07:78:13:40:93:08:7f:69:33:8f:67:ee:70:0c:3f:
                    e9:0d:d2:bd:a1:1c:ce:d9:6e:eb:54:25:e4:b9:1f:
                    02:66:8d:f0:4c:d4:8e:33:80:d2:9f:97:5b:b7:28:
                    7b:a9:64:d3:75:b6:d2:e0:75:3f:f5:f7:6e:fb:bb:
                    c6:2a:b5:a4:9b:c5:88:82:cb:d5:23:2c:df:1d:bf:
                    a7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5A:55:E9:6D:8D:4A:2E:9E:87:9F:69:50:5F:7E:E8:5F:9B:9E:BD
            X509v3 Authority Key Identifier:
                keyid:D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:38:8e:0a:93:b3:c6:0d:15:d0:a2:75:80:4f:a1:18:d7:bb:
         1a:46:0b:ed:e1:d8:03:8e:58:92:47:3a:a6:9c:04:5a:f4:72:
         f4:15:c8:48:90:f1:83:36:a7:b8:c0:08:16:2e:e6:a3:ff:cc:
         d9:32:3b:ac:25:f9:94:b0:30:00:3f:61:a3:24:b6:cc:3a:11:
         d7:c1:6d:59:3a:f7:af:a3:fe:76:1e:f3:ef:99:33:4d:69:77:
         ee:c8:93:90:59:1d:55:ff:c8:3c:fa:71:b6:47:fb:e6:46:4b:
         9d:a1:85:68:16:da:26:16:5d:73:af:0b:c3:88:b7:74:34:d8:
         b3:ac:9a:91:c1:97:7f:72:c9:f1:78:1a:38:32:6e:d4:97:bd:
         9b:bc:20:36:0d:88:8d:1a:73:59:53:5a:ae:12:cd:11:e2:1f:
         5c:d7:71:b9:d2:fc:02:70:e4:15:13:a9:ff:cf:80:fa:fb:34:
         f1:b3:35:7f:62:85:1e:76:d1:fa:4d:ae:30:f1:22:91:ab:a7:
         b3:df:29:bc:ee:f5:4c:51:8d:17:0f:3b:ba:1e:a4:4a:ed:39:
         22:85:7c:cf:40:91:87:f1:36:ab:f9:d7:c5:a1:2f:6f:19:b4:
         b1:34:08:ba:59:c8:25:27:8b:ee:c7:52:1a:96:8d:a9:51:6e:
         d6:be:f1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:17:57 2026 by rpki-client