Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
File:                     Xs7vXyjy82UFPfuM780W4cPehK4.mft (raw, json)
Hash identifier:          D0ReL9giPGzR/LE8sP1Eto9QfHhpiifPe+m06Je/aJA=
Subject key identifier:   A6:39:76:77:99:4D:64:7A:BD:E6:6C:77:1A:D9:85:0C:A8:C6:DF:99
Authority key identifier: 5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE
Certificate issuer:       /CN=A91DB8D9/serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE
Certificate serial:       045B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
Manifest number:          044C
Signing time:             Fri 17 Apr 2026 00:08:31 +0000
Manifest this update:     Fri 17 Apr 2026 00:08:30 +0000
Manifest next update:     Fri 24 Apr 2026 00:08:30 +0000
Files and hashes:         1: Xs7vXyjy82UFPfuM780W4cPehK4.crl (hash: JnX9qw6U2Y8c0LqC5JuxnNItIc4rkd934DIy3/seWog=)
                          2: 7E044E58A06B11ECBF29B644C4F9AE02.roa (hash: JHvS1f6jdKLwIeNTGazWPjS7qbi1eE+mp2wF3npKP1k=)
                          3: F31E86967B2311EF93801A72C4F9AE02.roa (hash: D6LiWMFH6d2ytAEKNZQXXNvSijIWaNdo5eD9rEi5mZA=)
                          4: 728139D62FA311F0A9129814C4F9AE02.roa (hash: eWlYnOj+XzRjYM0rC0+ZAzd4ERRZ2swjPOnqLD6EJ/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl
                          rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:08:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1115 (0x45b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB8D9, serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE
        Validity
            Not Before: Apr 17 00:08:30 2026 GMT
            Not After : Apr 24 00:08:30 2026 GMT
        Subject: CN=69e179ff-e41c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:97:87:a2:44:df:82:16:12:42:a4:07:da:15:
                    a0:0a:01:40:81:28:86:69:1a:aa:36:e7:d0:29:c5:
                    c4:11:74:0b:f1:6d:1a:74:88:f8:f3:51:92:38:70:
                    2c:9b:60:8f:5f:f9:9b:b3:13:5f:b3:d9:72:98:8a:
                    fe:df:a9:50:1a:0f:12:ce:ed:2a:9c:b0:61:51:2f:
                    b2:30:44:77:f7:88:20:62:c3:87:16:65:04:83:fe:
                    bc:6b:e8:c4:18:99:ee:8b:05:5e:ca:3c:21:f7:b0:
                    91:b5:28:79:e7:a5:74:57:e8:1d:b5:bf:18:a5:98:
                    7c:00:3a:65:f8:3b:61:e9:fe:1e:c2:f7:2d:32:3b:
                    84:78:a8:f9:07:ba:20:7b:1c:ea:5e:9f:6e:ad:55:
                    b7:c5:ae:01:80:30:57:e7:31:a0:5f:eb:5d:b8:58:
                    06:6a:63:c7:fd:8c:e7:ad:28:aa:1b:8f:55:11:a3:
                    51:f8:1c:c7:d5:dc:24:71:12:cf:b4:34:7d:ef:f9:
                    d3:c1:9b:d0:5d:31:05:54:fa:b5:2d:8d:a5:f6:92:
                    d4:33:da:fd:6d:bd:61:6f:0c:f4:27:9b:b9:b6:c9:
                    b2:de:60:3b:a9:f8:1a:90:12:e8:ed:29:5d:3d:e9:
                    a5:58:60:b2:69:5b:be:ea:e9:3f:8a:7c:79:58:60:
                    b5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:39:76:77:99:4D:64:7A:BD:E6:6C:77:1A:D9:85:0C:A8:C6:DF:99
            X509v3 Authority Key Identifier:
                keyid:5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7c:0f:40:ab:ad:14:84:3a:ea:5e:cb:94:53:d8:09:94:12:
         d1:f6:00:3a:56:c2:7c:30:d2:82:9f:73:3f:13:97:7e:2c:e9:
         37:22:b1:a1:bb:24:17:76:cb:78:b0:db:96:23:d0:61:e9:62:
         52:98:64:f2:4e:fb:ab:34:c9:81:20:d6:74:d4:79:2a:11:c4:
         ff:73:e0:25:df:40:72:b7:f8:b9:e3:c9:94:df:5b:9e:94:f8:
         57:83:0e:9e:96:c7:8a:b3:a5:4e:5f:ba:9f:86:21:f6:27:8c:
         cc:91:6d:e4:b5:04:33:11:3f:01:ad:38:9a:ec:84:2c:c8:a4:
         85:15:03:25:15:84:73:97:92:ce:9e:59:d8:4b:4e:d3:ae:f9:
         40:f8:9b:43:1f:ac:b3:ef:8c:eb:14:f9:7c:a4:83:31:02:43:
         cc:76:21:03:54:b3:d8:29:de:d0:5d:a4:aa:4e:3d:b1:27:46:
         29:97:79:8a:e4:6e:ff:80:0b:fc:1d:d1:de:cc:7d:07:07:69:
         6c:4f:cc:04:e3:3f:58:d9:eb:c8:69:7e:56:ba:e3:c0:e0:4c:
         e2:16:7f:c5:c1:51:34:40:43:27:b7:32:95:83:c2:f3:d5:76:
         cc:f3:9d:52:02:8c:c4:7e:94:e1:a7:2b:03:e8:11:fd:c0:a4:
         83:d5:56:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:14 2026 by rpki-client