Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
File:                     RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft (raw, json)
Hash identifier:          txuq8WoB7+rrD/G+y9zNYgN43+fpTlBHF73pYrBp+9c=
Subject key identifier:   8F:1B:34:04:2D:2E:A1:1A:05:40:E3:88:12:AF:92:C1:14:61:03:91
Authority key identifier: 44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5
Certificate issuer:       /CN=A91DEB01/serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
Manifest number:          70
Signing time:             Fri 17 Apr 2026 07:18:00 +0000
Manifest this update:     Fri 17 Apr 2026 07:17:59 +0000
Manifest next update:     Fri 24 Apr 2026 07:17:59 +0000
Files and hashes:         1: RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl (hash: KI5+NkrcnqiK7s6pN9iWJY09TgsIG657DHe7l+4hm4k=)
                          2: 8EA99A70B53311F09D886D26C4F9AE02.roa (hash: 8wP/NlNE2Z/JRbzUdllp1czpJ2kBXEzpgll4z9yQeFg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl
                          rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEB01, serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5
        Validity
            Not Before: Apr 17 07:17:59 2026 GMT
            Not After : Apr 24 07:17:59 2026 GMT
        Subject: CN=69e1dea8-e04d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:96:83:8a:ef:e3:a1:25:da:e8:8c:1d:c2:
                    d6:cf:4a:bd:25:df:1d:c5:9c:01:54:10:a6:d9:0c:
                    90:b1:16:d7:27:fc:47:1f:ed:bd:1e:3b:c1:52:de:
                    8d:f6:bb:fb:79:f1:33:2b:cd:c5:cd:1d:24:0b:08:
                    99:08:30:e0:2c:f0:31:0c:44:40:d1:91:73:bd:d0:
                    be:8e:9a:bb:2a:5a:3f:ce:10:eb:66:ac:46:58:e5:
                    fd:0b:0a:19:4c:1c:0c:07:80:46:45:df:79:69:bf:
                    d6:1f:af:1b:2f:87:15:d3:0e:87:f8:dd:42:2e:e4:
                    ff:95:49:50:7a:eb:26:98:5c:51:8d:61:76:d3:27:
                    4c:a0:5e:5b:44:23:47:ee:91:51:22:fd:6e:b0:63:
                    1b:99:da:3e:a0:e6:02:c7:1f:31:04:a4:c1:c2:5f:
                    e3:92:5a:b0:bf:65:9b:28:7c:f3:03:ed:83:e3:29:
                    51:09:ec:16:9e:3d:74:6f:fa:c8:43:a9:12:5d:24:
                    d9:0a:3b:b5:5b:29:dc:13:50:17:f4:f4:39:15:ca:
                    7a:ab:01:24:86:14:02:de:4d:60:ba:45:f2:87:e6:
                    e0:b6:22:ef:a1:6d:49:3f:ed:b6:be:51:3d:94:5f:
                    1d:22:73:17:a6:cd:91:35:6f:6a:00:ff:fb:0a:c0:
                    2a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1B:34:04:2D:2E:A1:1A:05:40:E3:88:12:AF:92:C1:14:61:03:91
            X509v3 Authority Key Identifier:
                keyid:44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:55:4c:4b:88:68:3d:29:a0:62:aa:71:c6:a0:a0:f0:e8:31:
         da:bb:86:25:2e:6a:f0:ed:31:25:b6:db:c1:96:14:9c:54:d2:
         4d:0f:60:46:61:b7:df:46:73:a6:0d:c4:7a:80:50:ed:ec:bf:
         4d:59:af:85:cf:69:96:98:04:24:51:ff:8b:ea:a1:38:4f:2a:
         22:d1:97:a5:8c:05:47:10:db:1e:97:e3:e9:1e:1f:6f:a4:e8:
         0a:17:0d:b3:57:82:de:14:03:0f:96:b2:5e:16:66:3e:62:3d:
         6d:ad:21:50:46:31:82:a3:c1:df:ac:e8:41:ab:a7:48:c3:76:
         04:39:2b:a4:6a:7f:b4:1b:82:8c:02:5e:ab:56:01:8f:5d:f5:
         3a:49:90:98:04:57:20:a8:da:21:8e:c7:a3:20:56:ba:d5:b3:
         d7:a7:b1:7e:b6:68:c0:cc:b4:06:e1:68:b9:d5:a7:70:9e:51:
         c8:3a:f0:49:ca:a5:bc:6f:2b:8f:d9:8a:9c:f5:c6:cf:72:49:
         50:5d:9a:ab:30:05:54:07:09:3c:92:80:d5:30:59:6c:09:37:
         ab:5d:31:6a:8e:89:22:69:b6:b3:c6:6f:1e:5f:62:29:fb:bb:
         33:11:4b:1d:e1:98:08:d0:51:c7:dc:c7:0d:66:ea:59:6e:aa:
         c7:b9:57:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:22:12 2026 by rpki-client