Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
File:                     9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json)
Hash identifier:          N1MY4Dhd+oeKRmexhN5lKyJs3Lg6KupSz33ZZUdu/y4=
Subject key identifier:   E8:1E:42:A1:41:E1:9E:0E:5B:C4:AE:4A:2D:2C:4B:AF:7A:6D:A1:4A
Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12
Certificate issuer:       /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
Certificate serial:       3548
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
Manifest number:          3539
Signing time:             Thu 16 Apr 2026 14:48:07 +0000
Manifest this update:     Thu 16 Apr 2026 14:48:06 +0000
Manifest next update:     Thu 23 Apr 2026 14:48:06 +0000
Files and hashes:         1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: /F/0ZhX6S9rkSpBvwK/pG+g6BgYvbatFk44F8nMmSS8=)
                          2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: 3TvgIIQrzHdKEkfomFpL2w7xqxyJsgbpjgTdJxGfg7U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl
                          rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13640 (0x3548)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD799, serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
        Validity
            Not Before: Apr 16 14:48:06 2026 GMT
            Not After : Apr 23 14:48:06 2026 GMT
        Subject: CN=69e0f6a6-6db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:40:af:76:c6:94:53:94:17:7a:a4:6a:18:
                    c3:34:96:6f:51:19:0e:a4:5c:a5:30:7b:5f:6f:4f:
                    c6:75:26:bb:e7:0a:34:dc:30:72:f5:68:8a:25:a9:
                    ef:40:0b:ae:eb:c3:45:89:3f:a5:83:ce:a1:6d:8e:
                    3a:e5:d3:1c:72:14:17:f3:6f:95:4c:d1:f8:53:0e:
                    e3:ed:18:b1:5a:f9:c9:19:b8:bb:30:e8:8c:d4:31:
                    e5:db:bf:7a:99:f2:31:5c:3e:80:40:03:f2:be:0e:
                    f7:1b:f6:a1:75:0f:24:e0:27:3e:7f:72:7f:a5:2b:
                    ae:29:ed:f6:f3:da:19:3c:47:92:78:a0:bf:3a:f9:
                    b9:46:a2:21:9b:23:ec:53:bf:bb:46:fa:ec:d5:80:
                    a0:ce:3d:6f:56:03:d0:32:de:6c:b0:e5:4b:45:67:
                    40:f3:90:e9:13:98:6f:86:85:34:ae:b6:64:34:8a:
                    d0:f6:66:89:cf:22:de:95:79:85:bd:73:e6:f9:b5:
                    cd:99:28:7a:a6:cd:97:b6:ab:ca:a3:df:18:b7:76:
                    0e:08:9d:a5:bf:e6:1e:25:7f:ad:dd:92:be:ef:64:
                    94:b9:dd:19:80:fb:57:12:12:46:3f:06:78:5d:ba:
                    86:bb:a7:40:30:5d:49:9a:a7:62:04:0c:20:c7:7e:
                    b6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1E:42:A1:41:E1:9E:0E:5B:C4:AE:4A:2D:2C:4B:AF:7A:6D:A1:4A
            X509v3 Authority Key Identifier:
                keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:8a:80:14:39:bf:9c:b7:24:40:a0:f8:e8:89:ae:b3:fe:ed:
         11:cb:1b:b0:74:e1:f8:f4:3b:87:ec:83:64:40:56:90:57:8f:
         e8:de:b4:0d:07:d5:b8:5a:bd:cd:45:a6:c4:87:7e:bc:4d:5d:
         88:ac:63:cb:fe:7f:2d:50:ba:e8:6f:b5:50:7a:e5:d4:bd:04:
         4b:3a:cf:01:2c:57:3b:a4:da:10:ea:a0:b1:5b:ad:07:8b:5e:
         90:42:2f:75:1a:a6:b8:07:dd:03:a0:6f:68:31:df:2c:16:4b:
         b2:3e:9f:bf:85:4f:dd:ed:1f:5f:ca:6c:d8:32:4b:f6:8d:4c:
         3b:3d:f4:b7:de:1b:f7:d2:c8:ae:72:a8:80:65:37:e5:69:8b:
         7a:99:39:b0:89:a3:8b:ac:e4:c0:74:27:e6:01:2b:e5:07:a1:
         dc:00:cb:cc:6f:ed:cc:da:1c:63:26:f6:e1:cb:30:bc:78:56:
         87:9f:5d:b9:0b:fe:c7:93:7f:72:34:41:20:56:d8:ab:02:0c:
         68:fb:b7:1c:60:17:59:76:cc:7a:b4:69:22:84:13:a0:3c:15:
         f7:52:a9:66:b7:c1:36:c6:82:ff:eb:b4:44:9e:07:80:a9:c7:
         f0:e2:8d:e6:cd:87:7e:7d:a6:28:3c:38:93:33:62:9c:94:c3:
         a1:d0:a6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:04:12 2026 by rpki-client