Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft
File:                     rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft (raw, json)
Hash identifier:          5C1nWXjhWOPEH2ngANXMfHuWHy4LsAgW/Nwv56Hytho=
Subject key identifier:   B3:D6:A7:4A:23:D0:FD:1D:36:CF:DF:D0:B9:4C:27:98:69:64:B5:EB
Authority key identifier: AD:CD:5A:4D:B5:99:C7:1A:ED:93:D0:96:AB:14:CA:FA:08:15:E6:17
Certificate issuer:       /CN=A91E1498/serialNumber=ADCD5A4DB599C71AED93D096AB14CAFA0815E617
Certificate serial:       019B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft
Manifest number:          0193
Signing time:             Sun 19 Apr 2026 04:05:56 +0000
Manifest this update:     Sun 19 Apr 2026 04:05:56 +0000
Manifest next update:     Sun 26 Apr 2026 04:05:56 +0000
Files and hashes:         1: rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl (hash: ujNXwrlu5EouqtzNEfLjED0kkau/zic5c/Wd5p1ObD8=)
                          2: 6C523164E03F11EE87838439C4F9AE02.roa (hash: j08RGf04FdX/xIitHauHUQrvUNZaizkLeJ3LyPUNoUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl
                          rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1498, serialNumber=ADCD5A4DB599C71AED93D096AB14CAFA0815E617
        Validity
            Not Before: Apr 19 04:05:56 2026 GMT
            Not After : Apr 26 04:05:56 2026 GMT
        Subject: CN=69e454a4-d6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:ac:73:70:48:7a:b9:3d:a0:3d:0e:60:aa:
                    6c:b5:92:4b:2e:40:ba:5d:f6:68:41:12:70:3b:04:
                    a2:84:fb:7c:9b:34:e5:08:e6:f3:5b:36:c7:9d:98:
                    14:f6:95:bd:fc:ce:41:77:a0:14:83:65:ab:c6:b0:
                    7b:fd:0f:4d:fb:ea:90:f8:2d:29:38:72:b2:1a:aa:
                    3e:86:d6:72:5b:9c:78:d9:35:b4:10:0c:45:67:76:
                    46:2e:4b:c9:ac:16:96:b8:0b:2d:0b:8a:84:ee:5e:
                    c8:04:99:3c:cf:17:29:20:59:61:b8:aa:4d:80:a9:
                    c7:c8:92:7a:4b:9a:f8:84:52:7c:a9:be:c4:20:b3:
                    ef:f7:88:1a:64:4a:62:74:a4:df:14:58:cf:9c:a8:
                    44:1a:80:39:3e:ba:cd:af:ec:a9:7f:c1:b2:f5:88:
                    5c:52:49:a6:d3:0e:a3:38:ee:47:a8:46:aa:13:12:
                    6a:46:bf:96:ad:49:2e:a7:99:4e:8c:ac:af:5d:8a:
                    44:67:d7:3d:36:3c:b3:98:d2:5b:58:05:8d:c9:58:
                    bf:c5:6e:02:dc:10:c9:a9:36:d7:eb:c0:a2:91:de:
                    f9:0e:38:ed:c6:8d:09:f4:e9:22:3e:86:5d:de:95:
                    53:00:d0:59:15:d6:34:a5:32:9d:2d:80:33:d0:ab:
                    3b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D6:A7:4A:23:D0:FD:1D:36:CF:DF:D0:B9:4C:27:98:69:64:B5:EB
            X509v3 Authority Key Identifier:
                keyid:AD:CD:5A:4D:B5:99:C7:1A:ED:93:D0:96:AB:14:CA:FA:08:15:E6:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:8d:9e:ef:28:e9:76:98:7e:cd:0c:1d:7b:e9:bb:e6:2a:54:
         0c:2c:10:93:63:8f:e0:98:60:28:74:d2:3f:72:3f:a5:d6:77:
         be:de:dd:da:b1:a1:3f:78:fb:a3:3f:11:29:6d:5a:b1:00:85:
         22:74:16:16:4e:4a:e3:b5:87:2c:b2:6b:66:4b:88:a2:53:f8:
         40:f5:2f:b7:0f:1f:75:66:17:1b:07:b1:17:34:30:42:25:86:
         5e:97:43:4e:b3:3d:b6:f7:bb:3b:4c:d5:3b:68:b2:16:4c:e5:
         ce:db:ed:e4:c0:70:e0:22:bb:74:c8:f8:36:55:67:22:16:99:
         ca:ce:99:fb:48:6e:ea:94:34:f3:e4:07:bd:19:89:09:56:97:
         b8:e3:c1:5c:e3:e7:01:3d:6e:e9:3d:3c:f0:52:50:3d:ae:f3:
         c5:9e:58:71:8d:43:02:35:85:1a:b7:35:80:74:be:c7:69:83:
         ca:6f:ad:3e:19:69:81:f2:57:51:1b:2e:45:cc:46:a6:64:1b:
         b8:94:c2:a8:84:ad:cc:37:91:f6:6c:2b:be:c1:d6:e2:f3:0e:
         02:93:bb:97:8d:6c:f7:50:1d:c5:62:37:f5:5b:bf:42:21:aa:
         00:be:69:25:fb:81:54:b7:b2:6d:a3:9f:3e:3e:eb:7c:83:52:
         6e:2d:76:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:57:14 2026 by rpki-client