Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft
File:                     53anM2-PZ4WjagEEaEC1FKDUGSk.mft (raw, json)
Hash identifier:          l9d70TKfxVbI8MzibANXBLWlxZOP3X4iMAxbu6nW2yE=
Subject key identifier:   24:60:0F:C4:68:3A:95:BA:A3:A4:99:E7:70:AA:CB:21:9A:34:01:63
Authority key identifier: E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29
Certificate issuer:       /CN=A91E1486/serialNumber=E776A7336F8F6785A36A01046840B514A0D41929
Certificate serial:       0CEC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft
Manifest number:          0CE3
Signing time:             Sat 18 Apr 2026 18:10:49 +0000
Manifest this update:     Sat 18 Apr 2026 18:10:48 +0000
Manifest next update:     Sat 25 Apr 2026 18:10:48 +0000
Files and hashes:         1: 53anM2-PZ4WjagEEaEC1FKDUGSk.crl (hash: iQEHQizh7eOnpMwgJ4cGMjGQCst8nOXuWHkFfmtSzA8=)
                          2: 964FB9AE06A111EAAE446E30C4F9AE02.roa (hash: iN7sl2PixdgDnEYUUCbyRGWI2GW4jkLaHOESu7/SU1Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl
                          rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 18:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3308 (0xcec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1486, serialNumber=E776A7336F8F6785A36A01046840B514A0D41929
        Validity
            Not Before: Apr 18 18:10:48 2026 GMT
            Not After : Apr 25 18:10:48 2026 GMT
        Subject: CN=69e3c929-54ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:8e:dc:92:3c:66:de:eb:e1:c7:7b:3b:a5:
                    e6:43:55:5c:8d:82:02:8c:d4:b5:11:24:7f:be:54:
                    44:94:73:2f:8e:c0:3e:39:f7:2d:56:08:8c:a7:13:
                    ea:79:f4:18:aa:70:37:19:7e:51:af:b2:61:56:a7:
                    6e:d8:fc:35:16:73:e9:c7:a2:4a:86:f8:f8:aa:de:
                    9d:d5:90:2e:8f:dc:a6:3f:e4:6e:bb:95:13:1d:e5:
                    cc:bc:b6:56:10:12:83:21:ac:cb:c6:de:4d:60:fd:
                    f2:8b:60:14:c4:b4:9d:9e:bc:ff:ed:72:81:c4:5e:
                    33:0c:18:41:62:2c:39:f4:22:05:ad:d6:ed:3d:0d:
                    b4:4b:07:19:d3:13:f8:6d:ad:64:35:92:76:0d:6d:
                    f2:25:b7:2b:38:24:9d:c9:5e:07:fb:e4:9d:e9:29:
                    d9:ff:e6:44:d5:35:cd:71:f7:08:18:47:d6:89:9d:
                    e2:b6:39:25:cf:ec:c5:ac:89:4a:e2:b4:f3:89:5f:
                    71:69:5d:fd:7f:8c:8c:04:ac:eb:25:dd:59:f5:32:
                    61:ee:34:36:55:be:36:7f:21:c9:8a:d3:5e:a2:02:
                    ba:7d:70:7a:e5:dd:d0:cb:91:85:d9:e3:64:08:e4:
                    46:7b:59:5d:83:f4:50:16:2e:d1:03:5c:7c:33:d7:
                    7e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:60:0F:C4:68:3A:95:BA:A3:A4:99:E7:70:AA:CB:21:9A:34:01:63
            X509v3 Authority Key Identifier:
                keyid:E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e3:81:b9:ee:d2:fa:fc:8a:ed:65:92:b6:ac:2d:0a:4f:f1:
         aa:2f:09:10:08:ec:1e:cc:4b:f5:18:e1:c0:05:18:21:ba:6b:
         0e:a6:09:88:47:ac:15:93:31:2c:fa:21:61:09:e2:8d:2c:bc:
         ce:b8:d8:f3:8d:4f:89:47:2a:a5:5c:d6:a8:57:15:c4:78:1e:
         1f:e5:54:fb:d8:43:da:6c:42:cc:25:a5:35:de:b9:be:fb:30:
         2f:8f:3a:98:56:9d:72:3b:81:9a:15:fe:51:10:2c:fe:68:32:
         1e:9f:7b:97:db:0b:86:75:a9:77:5d:81:5d:05:c3:e9:f8:1e:
         9c:5a:0b:50:b4:f2:28:8d:d9:74:3d:44:ee:ea:ba:ea:76:ac:
         2f:86:c3:13:fa:08:44:34:ee:ce:31:c8:c7:81:8c:72:fb:6c:
         14:9b:2d:14:8a:c6:a1:48:f7:fa:3b:c1:b7:c9:a0:c0:55:ca:
         cd:cf:3c:23:83:5a:1a:05:b0:cf:d0:69:69:ad:38:6d:70:60:
         41:9c:cc:97:0d:ff:f2:5e:e1:59:5d:99:c6:6f:d2:e8:53:a9:
         8d:68:f9:67:13:91:5c:a3:29:10:d1:8e:3f:76:2e:b6:ad:cc:
         0e:06:5a:3a:b1:b5:88:32:8f:7e:35:68:2f:e9:66:c7:7e:67:
         7e:29:37:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:18:11 2026 by rpki-client