Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
File:                     90n3b5KhbSqHFDf3LIbQ0F3imtU.mft (raw, json)
Hash identifier:          I1v6F/iIuOwflSK3E2JgIphHXbmEyPH8qJZCAofQ1xQ=
Subject key identifier:   0F:88:92:CD:82:5C:BF:52:7F:B6:47:A0:A4:86:D7:31:FB:62:7B:20
Authority key identifier: F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5
Certificate issuer:       /CN=A91DDDED/serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5
Certificate serial:       0263
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
Manifest number:          025D
Signing time:             Fri 17 Apr 2026 01:59:11 +0000
Manifest this update:     Fri 17 Apr 2026 01:59:11 +0000
Manifest next update:     Fri 24 Apr 2026 01:59:11 +0000
Files and hashes:         1: 90n3b5KhbSqHFDf3LIbQ0F3imtU.crl (hash: Hddl4AEjObNyjT7CxcqhbjzaDEZ2SeipGC6xgyD7v/s=)
                          2: 69B6C14A9DF611ED8D51D272C4F9AE02.roa (hash: 6qNNz/jU6Jc8rG9yGhVLuObMTM5ias6oQqU63sjwttY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl
                          rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 611 (0x263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDDED, serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5
        Validity
            Not Before: Apr 17 01:59:11 2026 GMT
            Not After : Apr 24 01:59:11 2026 GMT
        Subject: CN=69e193ef-6fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:5a:43:8e:15:ce:e5:fd:a5:91:2f:30:48:
                    9b:3c:17:d7:e7:d3:24:ba:f5:62:dc:73:04:5b:75:
                    cf:11:d0:38:4c:6b:a4:31:b0:ef:11:a9:28:c7:0c:
                    f0:8a:27:1a:77:7c:7f:29:40:6f:21:8a:ec:55:72:
                    f7:be:0d:e1:f4:b5:cb:ca:93:4b:51:43:23:dd:8a:
                    14:50:57:10:dc:78:88:30:b0:80:f3:c6:05:d2:e1:
                    35:84:f8:b9:b4:76:e7:b3:fd:62:e3:43:ab:b1:45:
                    49:58:65:f6:02:f3:30:4b:f6:16:2f:f3:e7:e4:ac:
                    e9:f1:25:58:28:ed:50:d2:5e:7c:b4:45:d6:45:e6:
                    f6:0b:82:fe:28:8e:77:c4:e5:c9:1c:2b:ef:69:39:
                    fe:10:1d:b1:e0:83:96:0f:77:d4:af:ae:a8:2f:1e:
                    f6:53:28:1d:2a:5a:46:7b:f1:d3:77:84:74:33:ff:
                    1b:59:93:11:20:2c:35:71:0d:48:0c:5f:cb:f9:72:
                    b0:4f:f5:a6:72:6e:34:60:b0:53:ab:d0:22:ac:ca:
                    4e:a9:70:f3:4c:66:45:77:b9:72:bb:20:b6:e6:8d:
                    3b:ed:91:1b:f3:16:aa:5a:2d:af:09:a4:f4:c5:b1:
                    1c:90:83:7e:1c:42:73:8e:17:b9:64:39:d2:00:8e:
                    87:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:88:92:CD:82:5C:BF:52:7F:B6:47:A0:A4:86:D7:31:FB:62:7B:20
            X509v3 Authority Key Identifier:
                keyid:F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:81:03:0b:7e:c3:91:bd:cd:f7:52:58:e6:fa:86:77:4d:ca:
         5c:8d:23:f7:93:94:15:54:50:77:32:79:a6:b2:56:a3:58:59:
         c3:8b:3f:ff:af:9c:29:0c:4a:47:5c:d3:6b:6a:5f:80:ce:a1:
         b0:c8:2e:f4:76:7f:c4:3a:1a:44:70:57:18:97:7c:29:d0:5a:
         18:77:ee:49:69:5e:98:d9:24:d0:b1:a2:12:55:40:c7:23:ff:
         87:17:cd:d3:f0:a6:a2:14:39:6e:e5:36:48:cf:46:49:38:f0:
         fd:4e:f5:29:57:04:b3:18:dc:77:bc:58:71:0b:ed:99:11:14:
         14:5e:9e:63:74:32:a5:23:28:0b:ba:27:a9:cc:9a:0d:cb:c2:
         aa:d1:76:e2:1a:73:8a:22:81:1d:55:88:f6:22:2c:91:c0:07:
         01:fb:df:00:d3:eb:09:37:9d:44:55:88:9b:fb:a9:c4:8b:7a:
         04:41:8d:9c:03:6e:08:12:16:88:b0:9a:98:f6:e7:24:e2:c0:
         39:74:57:64:36:1c:48:47:e1:d7:50:e1:54:bf:2f:ee:82:50:
         e0:7f:e0:70:22:f9:a4:48:82:9f:31:8a:23:f6:d1:01:9e:3f:
         49:4b:97:e2:62:d7:50:f6:e8:b0:fb:63:60:4d:2d:2a:6c:34:
         18:0d:6d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:55:55 2026 by rpki-client