Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft
File:                     V02z1iXehCAuOsnBw9Wwd01reOM.mft (raw, json)
Hash identifier:          l9/Tz/VRrS+QJof2Q4kJZiM4/vkyrbAD9T0hEyGI8I0=
Subject key identifier:   EF:89:E4:02:77:15:E1:28:70:E7:4E:A7:8A:FC:45:3B:9B:FC:4D:9A
Authority key identifier: 57:4D:B3:D6:25:DE:84:20:2E:3A:C9:C1:C3:D5:B0:77:4D:6B:78:E3
Certificate issuer:       /CN=A91E33AA/serialNumber=574DB3D625DE84202E3AC9C1C3D5B0774D6B78E3
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft
Manifest number:          99
Signing time:             Fri 17 Apr 2026 07:09:24 +0000
Manifest this update:     Fri 17 Apr 2026 07:09:24 +0000
Manifest next update:     Fri 24 Apr 2026 07:09:24 +0000
Files and hashes:         1: V02z1iXehCAuOsnBw9Wwd01reOM.crl (hash: 44HyceUav8fbOmqbw0waBOFU3NwaDdtoHRTW6P+etCA=)
                          2: A5E6E422A8E511F0A46A7729C4F9AE02.roa (hash: Uf6HZPRPVaJl/FDZZQpXyev2o8OHPg1QV6rsUx5DyWU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.crl
                          rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E33AA, serialNumber=574DB3D625DE84202E3AC9C1C3D5B0774D6B78E3
        Validity
            Not Before: Apr 17 07:09:24 2026 GMT
            Not After : Apr 24 07:09:24 2026 GMT
        Subject: CN=69e1dca4-255b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:50:29:02:dc:fd:96:9e:42:8a:a2:33:ae:ee:
                    28:30:a6:4d:34:75:57:a0:92:21:58:a3:cf:87:1e:
                    ac:24:d8:d5:55:e3:a1:6f:1b:c3:7f:c0:32:29:56:
                    c7:d0:a9:81:7d:93:df:c1:cc:2b:54:3f:e0:73:e4:
                    90:07:49:d9:b8:07:25:be:db:70:39:31:85:ae:71:
                    30:25:16:5c:ce:21:3a:71:43:e8:df:f1:e9:ca:65:
                    2c:c4:91:b8:ba:e5:4e:5f:00:c2:40:c4:f1:fe:ad:
                    0d:97:ab:65:c1:34:4b:b1:09:db:ce:6e:b8:ae:af:
                    46:29:e0:f5:b1:bf:21:35:5d:83:e3:be:ef:33:81:
                    53:9e:01:44:7d:c2:a0:ff:d8:96:24:23:40:a6:a7:
                    a9:63:9c:19:21:27:6a:84:76:cf:6f:c5:8b:81:3a:
                    b4:a0:85:a2:2c:25:0c:8e:ad:d5:f7:5c:73:cc:c0:
                    30:74:d2:92:db:3c:6b:f7:ba:9a:34:6c:4d:ce:b5:
                    07:af:31:28:cb:ba:e9:07:5e:d8:4d:6a:46:5a:e8:
                    fe:0f:d7:c2:3a:48:49:12:bf:25:ce:ff:bd:59:73:
                    05:3d:44:b0:8c:2d:ae:af:07:47:38:af:f0:50:3e:
                    53:32:68:0f:64:f6:90:88:c9:18:8d:98:67:1e:ab:
                    47:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:89:E4:02:77:15:E1:28:70:E7:4E:A7:8A:FC:45:3B:9B:FC:4D:9A
            X509v3 Authority Key Identifier:
                keyid:57:4D:B3:D6:25:DE:84:20:2E:3A:C9:C1:C3:D5:B0:77:4D:6B:78:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b5:1b:5a:37:a5:e6:59:18:93:73:b7:8a:f5:9e:0c:ed:27:
         5f:de:4a:c5:a6:7a:86:fa:b9:d9:6e:e9:26:0d:59:18:52:2b:
         92:3b:27:7f:b1:de:4e:e9:02:18:e3:2f:41:90:78:8c:50:5d:
         dd:8b:a4:54:5a:a9:19:d5:f3:c2:f5:d3:d0:b9:03:df:5e:5a:
         20:45:ae:48:87:c3:10:38:09:51:ca:04:bd:4b:93:3e:a2:d9:
         97:b8:49:94:37:2b:de:87:45:f3:ae:aa:d8:7c:6e:91:bf:73:
         22:30:2b:f4:7c:38:54:6e:45:dd:dd:9f:5d:a3:67:6d:0d:2b:
         9e:6f:3e:ac:0f:39:a4:65:5a:10:c1:7b:0a:b3:1a:ee:8b:7d:
         c5:4c:e7:8c:cf:89:d3:94:2b:8b:af:ca:55:9b:f6:e0:93:6a:
         c6:4a:b1:fa:c0:b5:cc:f8:50:97:a1:fa:5c:fa:4c:ec:46:75:
         cb:d0:f6:35:d1:e5:20:88:22:52:9c:30:88:b3:30:51:06:8f:
         71:17:5b:3d:cf:18:dd:25:00:58:cf:4b:35:37:7e:b1:96:b8:
         7a:b7:e9:2d:4d:ca:a0:c8:8f:b3:0c:6f:96:0b:d8:45:a7:f0:
         4a:a0:4c:e2:ae:85:87:5a:c8:c2:cd:ac:fa:ba:1b:45:0f:81:
         b6:06:a5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:42:48 2026 by rpki-client