Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft
File:                     E0jUaqcLAwOwQCPwSmMFi01pY7c.mft (raw, json)
Hash identifier:          0+uD21lsT+zvlQccF1wIYG6/2y1mn5JzgXJjexx7bSU=
Subject key identifier:   F2:B5:BD:6F:09:F7:46:75:87:83:24:ED:1E:22:CE:7C:39:D6:68:96
Authority key identifier: 13:48:D4:6A:A7:0B:03:03:B0:40:23:F0:4A:63:05:8B:4D:69:63:B7
Certificate issuer:       /CN=A91D30A3/serialNumber=1348D46AA70B0303B04023F04A63058B4D6963B7
Certificate serial:       1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft
Manifest number:          1C
Signing time:             Fri 17 Apr 2026 08:39:58 +0000
Manifest this update:     Fri 17 Apr 2026 08:39:58 +0000
Manifest next update:     Fri 24 Apr 2026 08:39:58 +0000
Files and hashes:         1: E0jUaqcLAwOwQCPwSmMFi01pY7c.crl (hash: qJd+KpqyoNE7T3+3W2LGV6RcmQAur+GXk8Fc8SBN+dE=)
                          2: 5417C204181311F1BB2D572D153D8C67.roa (hash: H47VU5jKVIkhr4upeiTnHoZK3wbZs9wvqmAqlKqwqns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.crl
                          rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D30A3, serialNumber=1348D46AA70B0303B04023F04A63058B4D6963B7
        Validity
            Not Before: Apr 17 08:39:58 2026 GMT
            Not After : Apr 24 08:39:58 2026 GMT
        Subject: CN=69e1f1de-2419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cc:69:d6:22:d0:ef:17:18:ee:74:90:98:27:
                    54:77:37:77:8d:63:b4:a7:83:3c:f1:7c:26:2b:3a:
                    6c:cf:18:4e:e8:f9:2d:c3:95:b2:fd:c2:d0:8e:4a:
                    2f:f4:98:d6:55:c5:c3:e0:30:48:41:54:56:03:31:
                    41:1a:62:25:c5:3b:5b:ca:95:63:bf:78:1c:62:c0:
                    41:bb:1d:b5:a9:1a:4c:49:2e:ec:ea:da:ca:1d:ec:
                    ad:2b:f0:fe:73:ae:27:d1:8b:d4:c6:21:3c:7d:12:
                    fc:3f:d7:65:ee:20:31:a6:8d:37:bc:a2:ef:56:ed:
                    92:13:83:45:58:34:2a:41:9e:3f:69:16:35:e0:42:
                    26:04:27:c5:3c:69:9b:21:96:e5:fa:a5:12:c8:1f:
                    5c:ee:89:df:00:e1:1c:67:9b:f6:80:5d:52:a5:c7:
                    37:ee:a6:a6:ef:22:a5:e9:4d:2b:ab:25:a2:05:fa:
                    c5:11:11:0e:17:ce:1d:88:f2:9e:de:73:9a:88:b8:
                    32:ec:d1:74:8a:54:c9:59:68:51:f7:be:2c:ea:29:
                    1e:82:c7:dd:3e:79:4f:48:24:27:69:b8:dd:7d:33:
                    ab:9d:be:07:ef:ac:a1:77:86:8b:39:47:59:cc:ac:
                    18:ba:61:3b:f3:dc:ab:48:61:20:ee:9a:a7:af:2b:
                    ac:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B5:BD:6F:09:F7:46:75:87:83:24:ED:1E:22:CE:7C:39:D6:68:96
            X509v3 Authority Key Identifier:
                keyid:13:48:D4:6A:A7:0B:03:03:B0:40:23:F0:4A:63:05:8B:4D:69:63:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:9f:9e:5a:00:f2:36:2b:c9:86:72:59:d4:8f:f1:fd:da:32:
         b4:58:f7:bc:83:2a:cd:37:61:e3:9b:fc:b7:2b:b3:4e:6e:57:
         46:80:86:b0:d5:ce:d9:47:8b:f4:90:ec:1a:e4:4d:d4:8e:3c:
         a4:ba:c9:14:6a:a6:40:6b:3b:77:9d:80:89:5e:aa:e6:ab:c6:
         6f:98:e7:46:e8:17:97:fb:92:7e:ab:19:1f:68:b9:96:50:23:
         ca:e9:24:10:28:f9:0e:2a:1e:91:06:40:c4:4c:a1:91:93:61:
         b7:5e:bb:76:93:91:39:57:d1:11:cf:ec:dd:25:30:58:8b:e6:
         68:54:6d:8e:b5:38:1c:76:fa:f8:46:47:ff:3b:cf:2a:f4:68:
         86:86:53:1c:51:77:f1:18:1e:13:97:5a:ee:b3:ab:dd:da:64:
         52:f5:4b:97:e2:7a:8c:4c:e1:17:cf:b0:04:6b:8e:78:19:cc:
         14:d4:43:2c:02:1b:09:ea:6b:54:b2:dc:69:c5:55:5e:d4:cd:
         c7:04:e7:38:7b:29:35:2c:a3:98:78:56:7f:88:ee:48:26:84:
         7e:10:c2:c7:93:b8:d5:e9:3d:b7:6c:9c:03:4b:19:3d:5f:fd:
         2d:52:59:72:a3:bb:7b:d1:c4:9b:9c:db:01:14:75:f9:22:75:
         61:fa:ee:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:17:29 2026 by rpki-client