Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
File:                     x52oqmnxJno4UemSoGnAL1DoArw.mft (raw, json)
Hash identifier:          4O1nPm3lI9FmsdnjiGZcn5876vWu4hkwN/1m49qe3n8=
Subject key identifier:   CF:51:2F:36:A6:24:21:5D:92:FC:01:81:1B:23:9B:E5:E0:67:9D:87
Authority key identifier: C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC
Certificate issuer:       /CN=A91DC524/serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC
Certificate serial:       0207
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
Manifest number:          0201
Signing time:             Fri 17 Apr 2026 02:50:22 +0000
Manifest this update:     Fri 17 Apr 2026 02:50:22 +0000
Manifest next update:     Fri 24 Apr 2026 02:50:22 +0000
Files and hashes:         1: x52oqmnxJno4UemSoGnAL1DoArw.crl (hash: JU/z2EjoUmyBJXrP0D4euz3z4LmNKbII2UrdaB1VWY0=)
                          2: 0D705F8A2C5911EEBB4C2C4BC4F9AE02.roa (hash: NZR7cop8QVWqUsDBeZWfV0zvXiChucbzAQ2g4pUVe3k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl
                          rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC524, serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC
        Validity
            Not Before: Apr 17 02:50:22 2026 GMT
            Not After : Apr 24 02:50:22 2026 GMT
        Subject: CN=69e19fee-db6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:72:71:15:0e:e6:30:d8:ff:c7:ca:fd:f6:cb:
                    68:80:ff:06:66:9f:96:f5:43:33:47:05:b7:d0:52:
                    a0:60:ce:7c:a9:1d:12:e6:df:4c:2a:ea:75:b2:a9:
                    40:07:83:7d:d1:74:05:a8:b1:8c:4e:88:e5:9d:a3:
                    c3:d2:67:40:98:b4:ff:52:49:fc:6c:96:19:c2:8b:
                    fa:78:45:4c:02:3c:cf:00:a8:51:33:2c:69:52:34:
                    47:2f:6e:98:14:87:8a:e8:7c:9c:26:4a:fc:fd:ed:
                    03:ae:bb:e0:c3:80:df:67:05:ae:c0:3b:36:e6:18:
                    5f:31:63:e6:af:fb:c4:7e:17:0f:8d:55:0b:35:73:
                    36:4e:ad:03:6d:6d:53:cb:74:b4:23:7f:0f:5e:2c:
                    af:64:20:d4:85:62:a2:aa:c8:27:31:ac:0e:f8:94:
                    66:68:95:eb:c9:56:9c:a8:eb:fa:c4:65:8c:fd:8f:
                    8e:b9:82:42:a6:cb:b7:3a:0f:9b:94:38:12:3c:71:
                    5b:62:e7:c3:c9:51:14:63:52:ab:cb:f8:ee:7b:6b:
                    20:94:53:2c:59:08:f7:e1:7e:98:7e:d5:f3:ca:4c:
                    ea:10:b5:3a:85:fb:b0:80:c0:fe:0e:9c:c4:29:3d:
                    f3:ee:e1:f9:32:f1:68:6d:54:50:b0:fb:71:34:78:
                    89:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:51:2F:36:A6:24:21:5D:92:FC:01:81:1B:23:9B:E5:E0:67:9D:87
            X509v3 Authority Key Identifier:
                keyid:C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e6:b5:ab:66:05:94:2a:94:28:97:95:e2:43:26:13:d8:27:
         f1:a3:b0:de:ee:13:e0:0b:44:97:e9:63:70:88:d0:cf:6e:ae:
         68:93:07:d2:ed:38:cb:93:2c:31:28:d0:88:8e:19:54:c1:2f:
         27:90:c0:70:56:d6:3a:47:87:41:f2:86:ae:ab:5a:17:cc:e5:
         eb:10:00:64:a4:07:3b:20:fb:8b:27:41:7b:9d:b6:ff:18:ae:
         7b:4b:68:28:a8:35:a0:67:1c:e5:ed:44:b5:49:23:1f:fa:cd:
         58:43:57:50:8d:84:84:32:39:29:e3:1d:5d:90:3c:84:fd:43:
         66:fd:8a:cc:01:47:8f:28:af:fe:10:2d:71:d4:11:a0:a7:c3:
         ea:4e:0a:99:35:3b:1c:0f:63:23:19:47:75:44:0c:98:9d:bc:
         ac:39:21:11:ae:77:6d:e3:b2:4c:79:7b:58:5c:8b:ac:4f:0d:
         40:47:89:e4:4f:b3:17:e4:b1:fd:9f:e9:f6:a5:68:08:b4:1a:
         8b:11:14:40:2e:e0:95:c2:b4:e8:c1:82:30:ad:76:6f:49:e1:
         21:e3:0c:eb:65:8f:55:fb:77:cb:1b:f3:d5:48:dd:98:26:46:
         54:de:76:40:a8:e5:74:7e:0d:03:cc:b7:be:99:55:d4:d7:04:
         2b:e4:cb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:33:32 2026 by rpki-client