Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft
File:                     f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft (raw, json)
Hash identifier:          0QeqNryIDwO7GCmBOf36HIUMDo6dQupx7erJikvpgco=
Subject key identifier:   D2:85:7F:D3:84:34:EF:4B:1B:4D:00:4C:0E:F9:AC:AE:39:6F:9B:1B
Authority key identifier: 7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9
Certificate issuer:       /CN=A91D8DD9/serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft
Manifest number:          AD
Signing time:             Fri 17 Apr 2026 06:50:08 +0000
Manifest this update:     Fri 17 Apr 2026 06:50:08 +0000
Manifest next update:     Fri 24 Apr 2026 06:50:08 +0000
Files and hashes:         1: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl (hash: 3gkRuWk/K8Tw+fb21+5rSHAOwx2UPV4Kt5s1tAMs42U=)
                          2: 9BCD7C8E2FD311F0A93F2250C4F9AE02.roa (hash: AqLmjH9rQIfWc4pDj/9l1XeaE5IDbCOjNUtl76LoxHc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl
                          rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8DD9, serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9
        Validity
            Not Before: Apr 17 06:50:08 2026 GMT
            Not After : Apr 24 06:50:08 2026 GMT
        Subject: CN=69e1d820-272d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f4:c8:e5:fb:86:78:e8:f1:ce:00:6b:9e:93:
                    3e:8b:8e:34:88:b6:1c:b3:3a:35:6b:5a:47:25:47:
                    4b:eb:cc:ab:fd:b1:b6:0f:0f:87:18:99:93:17:d9:
                    05:38:03:bf:45:21:15:91:89:f7:89:7a:a2:e4:5f:
                    48:a6:ca:90:9f:28:79:f1:c5:27:da:67:04:1b:14:
                    4c:51:41:25:1e:40:3b:23:be:07:c4:cd:98:c6:26:
                    41:8d:ce:c4:da:5f:5e:a0:f0:14:2f:c4:c2:9a:c1:
                    fb:62:ff:53:e2:51:51:f8:eb:a9:56:d5:fe:f1:ac:
                    04:e5:b5:f0:4a:98:b3:37:fb:d2:15:66:20:96:85:
                    4d:07:09:7d:4e:2a:f4:05:ed:ab:61:89:4f:24:10:
                    6b:f1:eb:cd:b3:84:8d:38:b7:b6:76:56:35:a3:24:
                    33:a7:b3:57:45:01:37:56:07:9a:dc:fa:9f:dc:32:
                    bf:1e:61:87:13:7c:d8:3d:95:ad:cf:f8:91:67:cd:
                    46:ee:99:e8:b3:43:11:e4:5b:e9:6c:11:23:67:37:
                    31:20:59:48:c3:71:5b:3b:07:01:bb:f3:65:fd:ef:
                    30:65:09:b2:48:18:81:e2:ed:35:ce:9a:1b:c1:f9:
                    5a:ee:06:55:bc:37:1c:37:d1:25:37:c0:0d:66:82:
                    0e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:85:7F:D3:84:34:EF:4B:1B:4D:00:4C:0E:F9:AC:AE:39:6F:9B:1B
            X509v3 Authority Key Identifier:
                keyid:7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:2e:e6:0d:95:46:16:b6:a6:d3:fa:f2:5a:a9:d1:23:42:b4:
         3a:36:b7:82:d4:5c:d2:82:7d:bf:1c:d9:08:5b:b5:a7:8e:ef:
         c7:49:2f:1e:9d:ef:a7:57:6a:b3:ca:55:7d:22:e7:51:81:39:
         85:52:b0:13:94:98:28:ce:a8:11:5e:b8:60:2c:cf:e3:2b:44:
         68:e1:97:8e:3a:6d:fb:87:fc:20:77:b2:fa:40:86:6d:9e:cf:
         76:f3:e2:cc:3a:85:8a:cc:58:58:f9:8b:ab:55:68:3f:90:d6:
         89:16:28:47:85:f7:2e:f6:d7:76:76:25:8e:d6:9f:6f:d7:b3:
         e0:76:9e:45:cf:f0:94:b4:f6:fb:d9:ab:fc:e1:97:bf:ab:7f:
         10:7e:d1:74:db:2e:f2:76:8e:ff:70:25:2d:fe:27:07:87:55:
         fa:9d:d6:a1:86:2d:1a:ac:2e:3b:98:f1:5a:ea:1f:f0:bb:18:
         bd:62:f7:8e:3f:b6:3b:04:ad:5a:c5:3e:ad:90:1b:1c:16:40:
         2b:a3:80:b4:70:e0:a5:5a:d2:05:63:1f:fd:39:50:4d:ca:5b:
         35:85:ed:e4:c2:96:41:38:a7:16:e6:50:1e:d2:bc:2e:e1:73:
         cf:48:6c:c6:47:14:08:97:62:f5:25:b9:ef:f0:0b:21:3d:a8:
         9a:1f:69:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:26:58 2026 by rpki-client