Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
File:                     9rFFECBSR85YMyWRuaKXoV0q6j8.mft (raw, json)
Hash identifier:          YN4in+hgPApbjfRR4gyGYXRzCysBEu1W6wo5eT46sqM=
Subject key identifier:   54:59:1C:17:F0:9C:36:B1:41:8A:10:1C:5C:5F:50:C8:56:FF:7D:9B
Authority key identifier: F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F
Certificate issuer:       /CN=A91E4FB7/serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
Manifest number:          67
Signing time:             Sun 19 Apr 2026 07:31:28 +0000
Manifest this update:     Sun 19 Apr 2026 07:31:28 +0000
Manifest next update:     Sun 26 Apr 2026 07:31:28 +0000
Files and hashes:         1: 9rFFECBSR85YMyWRuaKXoV0q6j8.crl (hash: 7negqC0x6vuTMivWePizqBoSER7UNtFk1ZHex4Dnz2w=)
                          2: 581240AAA04511F0BECA9449C4F9AE02.roa (hash: ABz2wyyPJmQiKwD0Cid0vK+VZEE/DgOmkSrsLq1Yrtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl
                          rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4FB7, serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F
        Validity
            Not Before: Apr 19 07:31:28 2026 GMT
            Not After : Apr 26 07:31:28 2026 GMT
        Subject: CN=69e484d0-3474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:22:13:58:92:16:06:49:49:6d:1f:8e:94:92:
                    be:14:46:64:a3:12:e6:6f:30:94:89:9e:0b:e3:d2:
                    9e:a0:24:06:86:52:f9:6b:ce:8c:44:4a:15:07:4f:
                    63:77:b4:92:8a:56:9a:8b:8c:6b:cc:26:12:ec:1a:
                    5b:a9:40:fe:b1:52:59:8a:d0:b3:53:8f:57:0c:9a:
                    55:ff:b6:cb:36:25:d2:5d:58:84:61:97:7e:ad:fc:
                    e3:4c:f2:c5:d5:01:c3:5a:0f:d0:26:39:92:8d:8e:
                    ac:35:58:58:f5:b4:ea:35:0d:81:2d:1a:86:90:5f:
                    83:b2:ff:52:99:20:ed:af:17:23:bc:51:1e:19:97:
                    a4:25:b9:59:29:5a:11:c1:49:fd:23:0c:5d:19:37:
                    3e:b8:95:15:6f:e4:16:47:aa:88:0b:d7:0c:e2:cb:
                    ed:00:79:36:67:55:c8:eb:85:45:cf:e2:6e:85:a1:
                    1e:c8:15:66:72:cd:60:9a:9b:62:1b:39:eb:3c:4f:
                    16:4c:b3:fa:4a:4b:f6:98:04:bc:1d:bc:7e:dc:22:
                    67:52:45:96:35:a8:37:f5:96:b7:d2:bd:c5:86:19:
                    b1:c3:ca:b9:fe:91:90:1e:f9:a4:30:07:68:93:04:
                    70:2e:09:3e:41:05:07:38:d5:2b:4a:66:de:50:04:
                    c0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:59:1C:17:F0:9C:36:B1:41:8A:10:1C:5C:5F:50:C8:56:FF:7D:9B
            X509v3 Authority Key Identifier:
                keyid:F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:d9:62:c2:df:b8:0b:9d:c4:37:59:ff:37:a6:2d:ec:4e:a9:
         d0:77:aa:c2:38:b7:84:9d:87:5e:34:2c:bd:d2:56:00:de:2d:
         a5:b7:ac:d0:8d:9a:a9:4c:a3:c7:12:e1:3b:c4:d1:e3:08:7a:
         21:f8:66:c3:28:5f:83:a4:da:cf:66:e6:c6:cb:2a:a7:bf:f6:
         42:83:f2:62:33:2b:bc:fb:da:79:5f:c1:90:21:6e:83:7a:77:
         d9:35:fd:ec:89:3d:c6:5a:34:dd:cf:65:7f:01:10:7e:4d:aa:
         ea:43:2c:86:d5:b2:09:99:29:49:04:1f:8f:70:1a:a2:04:3e:
         06:4f:be:ea:5c:ac:0e:94:e8:04:18:29:2b:02:d3:c9:3f:7b:
         53:68:3e:89:e6:b8:94:d2:38:c3:1b:2b:92:15:c7:47:b3:00:
         8c:b0:04:34:6c:54:f6:eb:ff:78:50:50:5b:f5:7c:cd:71:ae:
         91:30:7c:68:44:72:d5:16:3d:01:ae:24:e4:67:2b:6a:ee:05:
         75:b3:a9:1d:68:98:38:c6:56:f0:78:dc:b2:ac:f8:04:98:e7:
         0b:a1:b4:25:ac:1b:b1:0c:32:73:28:c7:76:f9:b9:1d:0b:56:
         98:ad:4c:8f:61:c0:95:9f:9f:3c:9b:87:f8:f6:88:23:62:0c:
         60:70:e4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:22 2026 by rpki-client