Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft
File:                     t45_48stS1oeuSimkLxled-IG-k.mft (raw, json)
Hash identifier:          h0pCqdvy2LwPgtwVeAOU6WJPw2rxwbyBsiXwnPs27tI=
Subject key identifier:   CA:02:AE:FB:49:94:64:61:1C:1E:92:E5:4C:DD:AD:0D:9B:DE:A7:DE
Authority key identifier: B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9
Certificate issuer:       /CN=A91E22E3/serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9
Certificate serial:       0174
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft
Manifest number:          016D
Signing time:             Fri 17 Apr 2026 04:31:52 +0000
Manifest this update:     Fri 17 Apr 2026 04:31:51 +0000
Manifest next update:     Fri 24 Apr 2026 04:31:51 +0000
Files and hashes:         1: t45_48stS1oeuSimkLxled-IG-k.crl (hash: 2LQe0qxRUPhwgiQNsnt+DU54Ml3W0VdEN+c5x0i2Eb4=)
                          2: 60E63D04171011EFA738EE2BC4F9AE02.roa (hash: ET8KIX8KG6p1fBCY4Yz+ouiaXQY/pJNpfMquiJCvLEQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl
                          rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E22E3, serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9
        Validity
            Not Before: Apr 17 04:31:51 2026 GMT
            Not After : Apr 24 04:31:51 2026 GMT
        Subject: CN=69e1b7b7-fa26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cf:33:be:a7:5e:94:46:c6:ec:6c:c2:4c:ca:
                    94:4e:78:e7:7f:20:c9:25:a0:8b:4d:32:eb:28:ad:
                    61:98:09:50:26:3b:13:d8:c2:ca:f1:8b:91:df:41:
                    fe:bb:d9:38:ca:02:71:60:67:70:cc:98:3b:bf:80:
                    ae:88:fb:74:fd:97:8c:b6:02:3e:45:52:1b:f1:3e:
                    42:f6:5a:a7:ab:e2:6b:98:76:89:eb:0f:ce:4c:db:
                    bb:3d:cd:43:90:88:62:88:7f:21:89:96:e1:17:4b:
                    33:c3:e1:5a:d6:22:17:40:e7:b9:28:e2:ef:83:1e:
                    79:c0:38:f7:97:eb:77:bf:c6:66:36:03:62:9c:5c:
                    ec:c7:4e:13:a7:02:8d:72:23:ce:7a:cb:e2:5d:81:
                    44:4b:59:82:a3:cc:ea:47:54:86:25:3f:e3:54:0b:
                    8b:1c:9a:9e:dc:2a:2e:e7:00:4b:3a:72:4c:44:4b:
                    06:ea:63:bb:4d:72:d1:6a:7a:d8:dd:be:aa:72:cd:
                    51:9a:a7:7a:e3:12:77:65:c5:c7:d0:50:d1:74:6d:
                    e0:45:8a:1e:d5:47:f3:f5:28:8b:1c:27:74:eb:27:
                    47:1e:33:b2:70:91:d9:9e:80:24:85:ec:5a:d6:05:
                    8e:49:b6:3e:dd:74:03:0c:1e:d2:9e:43:fb:a8:bb:
                    02:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:02:AE:FB:49:94:64:61:1C:1E:92:E5:4C:DD:AD:0D:9B:DE:A7:DE
            X509v3 Authority Key Identifier:
                keyid:B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b6:21:73:67:3c:43:9e:14:04:6d:d8:1e:82:82:9c:14:d9:
         d5:77:7e:36:38:72:49:5a:6a:76:7c:bc:07:0f:85:9a:83:52:
         bb:13:bd:cb:75:cc:6c:15:74:31:32:c8:02:54:21:ab:7d:35:
         75:64:52:0e:b0:b3:f4:8f:af:1e:a6:f1:a6:aa:29:8e:0b:ea:
         f3:bc:e7:9b:9f:dd:14:c0:f9:ff:54:25:9b:81:cd:fc:b7:f4:
         46:af:02:c0:6f:cd:1e:16:67:f8:ff:db:c4:75:61:2d:a6:62:
         3b:ad:d0:dd:89:ca:b4:01:61:4a:0c:fc:0f:5b:a6:e6:2e:e2:
         55:57:84:54:bd:af:fd:3c:ed:27:f6:1b:3f:20:1c:77:fb:1b:
         67:e1:1c:f6:78:b5:1b:1b:14:a1:8c:b3:0d:88:9f:bf:28:de:
         b9:f2:d8:1a:ff:18:54:67:75:39:4e:6f:ed:a7:0a:b5:77:3f:
         08:8c:e2:40:1f:0d:34:14:28:3e:72:d4:2e:35:9d:aa:c7:d2:
         46:9e:43:30:92:71:0e:15:9a:f6:e3:fe:87:18:bb:15:e6:71:
         71:69:40:30:13:38:62:1c:92:1f:93:1e:42:24:8d:6c:75:07:
         db:0c:83:6e:f1:70:49:3a:1f:55:51:e2:05:fd:63:eb:eb:bc:
         c5:e1:6a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:30:10 2026 by rpki-client