Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
File:                     A9h0_y9dMgjn62Jadzf81EzuKsI.mft (raw, json)
Hash identifier:          M1iIm2glPh3nlSPajfrNUZ89UpgKZMMPSOp1F+OgO70=
Subject key identifier:   DE:91:F0:E0:3E:6B:6F:BD:AD:31:6B:7D:BB:37:7D:9D:24:2D:3D:15
Authority key identifier: 03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2
Certificate issuer:       /CN=A91D901E/serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
Manifest number:          81
Signing time:             Fri 17 Apr 2026 07:23:15 +0000
Manifest this update:     Fri 17 Apr 2026 07:23:14 +0000
Manifest next update:     Fri 24 Apr 2026 07:23:14 +0000
Files and hashes:         1: A9h0_y9dMgjn62Jadzf81EzuKsI.crl (hash: wQmFnzzk5pwMRmI+txhtI6U/6FM9RRds2gBi+1/PGKY=)
                          2: 58893B2878DC11F084C71D2BC4F9AE02.roa (hash: cA1zRf5hGPx366nz55tbLEUSAsNqCtNhxK7+ift/7Yw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl
                          rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D901E, serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
        Validity
            Not Before: Apr 17 07:23:14 2026 GMT
            Not After : Apr 24 07:23:14 2026 GMT
        Subject: CN=69e1dfe2-8bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:86:fe:55:4b:7d:97:46:53:6e:7f:cb:53:f2:
                    57:1f:b1:6e:b5:d8:44:31:7d:69:3b:fa:76:3e:14:
                    e9:99:be:3d:2c:b4:12:01:f5:54:15:f2:ce:1c:57:
                    be:41:5d:84:3b:59:48:75:d6:11:e2:bc:7c:5f:e1:
                    00:be:57:30:42:7d:58:05:01:58:11:44:07:f2:02:
                    ad:da:5c:d8:21:f5:1b:a0:da:0d:dd:8f:4d:09:76:
                    6c:03:44:49:ae:bc:8a:ee:64:f4:f1:f4:d4:aa:c1:
                    c8:40:e3:56:13:9f:80:2e:5a:22:e4:41:fd:bf:33:
                    be:43:99:63:1b:06:6a:62:40:35:03:4e:af:91:4e:
                    bf:ea:63:e7:5b:4c:ce:cd:08:ed:88:4a:e0:6c:34:
                    7d:7d:54:02:96:92:0c:67:9e:f7:bb:90:a5:a0:a5:
                    91:e5:37:d3:e4:7e:9e:6e:55:e5:26:01:72:fd:5a:
                    1c:86:e4:a5:86:09:a5:1c:88:46:23:2c:db:c9:98:
                    18:9c:6d:2f:e9:83:97:d1:7b:2a:45:3e:7e:12:f5:
                    63:8d:f0:2c:2a:21:c5:30:5b:f1:19:45:83:fe:8f:
                    54:60:be:d6:39:82:c3:40:02:44:a1:f9:4e:4a:e8:
                    44:6f:95:2c:31:d6:cf:88:c9:30:91:65:47:57:81:
                    99:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:91:F0:E0:3E:6B:6F:BD:AD:31:6B:7D:BB:37:7D:9D:24:2D:3D:15
            X509v3 Authority Key Identifier:
                keyid:03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:62:44:42:9a:92:94:ac:a4:a5:63:47:db:47:7f:0f:94:e5:
         b2:16:84:0e:7b:22:d3:4c:c3:88:a5:54:a9:91:a1:2c:67:4f:
         e7:4f:c6:5a:be:53:34:52:55:d2:63:d4:03:be:6d:6f:2a:cb:
         2a:d9:e8:5d:33:6c:4f:6e:5f:12:df:8b:b5:69:08:84:e6:62:
         36:d7:67:fe:b7:28:0a:34:dd:0f:5c:ce:2b:2c:90:f4:9b:34:
         7d:66:0c:15:7e:93:3a:71:57:bc:a7:17:6a:6c:cf:2c:0c:40:
         32:20:82:e7:7d:6c:aa:dc:df:be:38:da:05:8c:89:40:e8:03:
         1f:6c:20:23:2e:e0:c1:00:d4:9c:bb:86:2a:00:14:f9:ec:4d:
         e9:09:ab:b0:1b:89:cd:17:cb:9e:fc:37:0e:05:ff:bb:56:6c:
         32:bd:84:67:c3:8e:e7:0c:2d:c0:0f:d6:1a:1f:1e:d6:78:08:
         b4:56:9a:18:ad:97:68:39:fd:aa:bf:6e:3f:39:4a:1f:64:55:
         be:bd:59:11:a7:2f:4e:9d:cc:04:3b:85:03:78:f7:cf:9f:21:
         5e:68:e2:34:31:98:85:6a:f3:9b:14:7b:9d:2f:53:8a:42:e6:
         45:34:d0:3e:4d:b3:7a:dd:a2:e9:3d:d2:e2:19:3a:87:5b:a3:
         98:c3:5f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:35:53 2026 by rpki-client