Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
File:                     rC4NP0JyIX_vudMtzhozLelqOF4.mft (raw, json)
Hash identifier:          J5G1i8DJ0aJULIIqvIAsNI/83Gfes67RXZ5nx05r0jU=
Subject key identifier:   76:3F:03:4E:3A:BB:E1:F4:24:C0:DC:51:95:45:1C:EB:D6:0D:F8:EF
Authority key identifier: AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E
Certificate issuer:       /CN=A91DD5E1/serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E
Certificate serial:       094E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
Manifest number:          0943
Signing time:             Thu 16 Apr 2026 20:05:18 +0000
Manifest this update:     Thu 16 Apr 2026 20:05:18 +0000
Manifest next update:     Thu 23 Apr 2026 20:05:18 +0000
Files and hashes:         1: rC4NP0JyIX_vudMtzhozLelqOF4.crl (hash: VfCYEiZjYm+rww9lY/ImDLTdUHoI6VG6MJ11XrKzlH8=)
                          2: E034D1A6BC6F11EA8FE53280C4F9AE02.roa (hash: +Pd2aWEI7828mfSanwxonyoz5UIPIwJJCaXRRPJ3RbQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl
                          rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:05:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2382 (0x94e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD5E1, serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E
        Validity
            Not Before: Apr 16 20:05:18 2026 GMT
            Not After : Apr 23 20:05:18 2026 GMT
        Subject: CN=69e140fe-08b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7d:30:5f:77:5e:d7:60:63:7f:a3:12:15:a5:
                    e5:6f:1d:46:1e:98:6d:e7:f6:44:a3:31:f2:6a:3e:
                    08:7a:3a:e5:44:53:01:9e:2d:e4:28:4f:e7:3c:15:
                    0b:c1:2b:bc:0a:3a:e3:45:4d:4d:cd:a7:57:3a:63:
                    70:d5:8f:19:43:0a:ed:c6:87:01:f7:76:87:80:4b:
                    54:f1:33:a3:fa:fe:9d:ec:ff:fc:8d:02:f1:df:d4:
                    14:5f:e9:b3:22:ff:d3:f0:6b:7c:ff:c3:45:cd:b3:
                    9e:d2:2d:a6:59:5c:a9:fa:ec:78:43:82:be:56:c8:
                    ba:ec:72:9d:f8:16:6f:14:68:01:40:cd:e4:1b:19:
                    aa:ac:ec:ce:89:16:4a:82:03:e0:1c:4b:d5:49:56:
                    3c:b8:ab:89:ed:19:37:5e:8b:6a:c3:ca:0c:8e:4f:
                    43:d0:d3:19:db:81:0b:75:a4:c4:70:04:b0:f3:21:
                    30:b8:4b:5e:c3:0b:38:0a:8d:ea:fc:b3:96:17:f1:
                    5f:05:5f:d2:e1:36:f2:5c:b2:f6:c4:09:1e:6b:b8:
                    61:75:1f:d4:6d:77:62:fb:b3:89:39:0a:40:69:f4:
                    8f:14:84:4c:ba:f7:d1:80:26:95:b8:75:ad:8c:6b:
                    63:e1:9b:83:a7:b8:05:92:e2:f5:e7:31:8f:ea:33:
                    6d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3F:03:4E:3A:BB:E1:F4:24:C0:DC:51:95:45:1C:EB:D6:0D:F8:EF
            X509v3 Authority Key Identifier:
                keyid:AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:5d:48:f7:29:d0:28:6b:9b:f8:ec:88:e0:f0:2b:61:6d:b0:
         ee:de:8a:46:f9:0d:44:f5:a4:63:1a:a7:d7:10:1b:3a:03:3f:
         86:f3:1e:9a:10:18:b5:5c:6a:34:ec:6c:0e:a1:cb:d7:50:8e:
         b5:48:04:b4:37:fd:8f:b7:45:91:f5:c2:41:65:26:2e:4c:ec:
         d2:0f:a7:2b:57:fa:3c:ca:46:26:aa:dc:25:ee:13:45:5a:f7:
         49:e5:2f:ac:8a:66:3d:03:a2:eb:f6:43:60:76:d6:ee:a7:d9:
         f9:5d:d3:f9:61:ca:ec:50:9e:74:08:29:dd:44:f0:37:34:2c:
         17:fb:54:88:3a:f4:c5:de:68:51:89:e0:31:ff:72:ef:6a:0e:
         61:f9:a3:c3:b8:66:e3:7c:2c:e1:1a:f5:8d:0d:06:f1:f9:e3:
         a0:ad:94:e9:b4:38:99:b1:10:e6:fd:e2:27:35:ef:65:b1:a2:
         85:a7:ad:b1:12:e3:a0:1e:0d:27:52:da:d4:5c:29:57:fb:b0:
         e3:8a:fe:87:e0:60:93:5d:d1:9f:94:b0:12:36:a2:de:bc:ea:
         d0:2a:b8:8a:94:24:b2:9a:71:98:2f:af:97:d0:21:7f:d7:31:
         b9:95:58:35:74:13:60:c1:ff:a6:da:ed:eb:4b:15:7c:53:b9:
         23:c1:ca:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:38:07 2026 by rpki-client