Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
File:                     MQjy14qQC-lzk3j4GKWpYcpRLEs.mft (raw, json)
Hash identifier:          36ZD0m0xnO/jLK7aVZC69I7cg2dYDX1cOUlW28gwIIE=
Subject key identifier:   4D:D4:8D:71:5A:1C:35:6F:3E:50:AB:BC:83:2B:96:57:B4:8E:30:7A
Authority key identifier: 31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B
Certificate issuer:       /CN=A91E04E1/serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
Manifest number:          2C
Signing time:             Fri 17 Apr 2026 08:25:43 +0000
Manifest this update:     Fri 17 Apr 2026 08:25:43 +0000
Manifest next update:     Fri 24 Apr 2026 08:25:43 +0000
Files and hashes:         1: MQjy14qQC-lzk3j4GKWpYcpRLEs.crl (hash: tgJFJlf6NVjFv/aLqa37Pqcb4Tt0dQD0uIMjWKEZbcQ=)
                          2: B3695572FD9E11F087EE26735F6F56BC.roa (hash: rCPj89ZhrAuLJpKSrj2V9nyJ0NP4IwMB9Wn3wdAsanU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl
                          rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E04E1, serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B
        Validity
            Not Before: Apr 17 08:25:43 2026 GMT
            Not After : Apr 24 08:25:43 2026 GMT
        Subject: CN=69e1ee87-13f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:83:90:fb:95:a9:e6:dd:f2:a7:7a:60:0d:34:
                    a3:25:ad:e5:c4:60:d5:36:3b:73:9b:4d:13:e0:88:
                    69:a7:a6:92:20:da:5d:8e:4a:f5:f6:a8:b1:39:fd:
                    cf:4e:3d:ee:d0:76:26:cf:a9:f7:99:50:3f:70:a0:
                    4e:5f:d5:08:7e:e7:72:55:d6:ee:7b:d7:6f:b7:23:
                    f6:a3:6b:53:c0:e6:a2:68:cd:f2:7e:c5:1b:c4:a0:
                    c9:2a:6d:8f:ca:6a:3f:ac:c7:e1:f3:4a:96:c5:32:
                    84:66:40:52:73:aa:74:88:fc:13:ba:2e:b1:32:ff:
                    17:b8:ef:62:8e:2a:15:f8:5e:04:26:a6:af:6b:cd:
                    42:e1:d1:7a:ff:fd:a5:f0:df:1c:2d:64:da:df:16:
                    80:51:bf:05:72:aa:d1:85:1b:29:f6:df:95:d5:61:
                    97:25:ab:bf:d5:4a:10:7b:9f:8f:0d:6b:50:16:7e:
                    87:1d:4f:78:6b:86:e1:30:bd:ac:27:02:1a:93:88:
                    92:0a:ec:c4:f4:4e:2b:8a:c7:53:7c:5a:98:fc:60:
                    65:0c:05:8c:bc:22:b8:30:3d:7f:a1:04:e0:26:73:
                    6e:21:95:17:7b:c5:93:95:1d:6f:33:2c:9b:75:ca:
                    52:f8:32:ba:6d:9b:2d:96:37:5d:0b:67:3f:58:09:
                    67:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D4:8D:71:5A:1C:35:6F:3E:50:AB:BC:83:2B:96:57:B4:8E:30:7A
            X509v3 Authority Key Identifier:
                keyid:31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:23:70:8d:60:67:c8:66:3e:2e:0c:6a:9b:69:65:03:b5:95:
         74:9a:a4:7f:4c:1f:ca:d9:2d:48:5b:e8:58:88:ef:3a:84:f6:
         7a:9a:50:4e:f7:e8:85:11:cc:44:fd:bf:c3:cf:01:fa:cc:11:
         30:bb:82:db:49:c1:5d:89:58:04:7a:62:e6:89:49:35:60:41:
         45:f2:2c:81:bb:6b:97:bf:b0:bb:80:b9:95:48:ea:c6:b9:b0:
         f1:ad:3f:9e:c6:33:a4:2f:73:ea:9a:12:7f:d8:5f:70:6c:d1:
         3d:62:4c:36:07:c9:6a:b5:95:4b:0e:b2:56:1b:08:d5:e0:75:
         35:76:30:cf:40:df:cc:14:29:8b:3f:c4:60:8d:4c:ae:42:58:
         9b:09:56:04:ec:8b:f4:a7:05:4c:1e:70:54:1a:37:ee:62:93:
         1e:a2:ce:14:fb:b1:88:95:97:b6:75:07:e3:d1:1b:0c:e7:bd:
         33:ff:f3:60:86:fa:e5:be:2a:bd:cf:21:cc:92:5d:8e:71:4c:
         87:9e:5f:15:e4:f3:64:8b:6b:f2:77:36:f5:78:1a:fd:49:3b:
         bf:9e:4e:d5:59:b1:c0:6d:73:9d:29:88:87:81:0e:74:d0:05:
         8f:b7:c6:1c:3a:1c:41:07:40:34:ed:8c:60:01:0c:64:3a:d6:
         e3:d0:b8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:35:55 2026 by rpki-client