Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
File:                     sb1NsCH1THJj88NTX4g2hJui5g4.mft (raw, json)
Hash identifier:          5ozgIJfpBdYpALEFGlNTGOzGV/+dHUXF82/8cZKyXv8=
Subject key identifier:   7B:BC:4F:4B:2F:8C:F0:81:25:DE:6B:A6:91:7D:C1:97:AA:97:97:25
Authority key identifier: B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E
Certificate issuer:       /CN=A91E520F/serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
Manifest number:          0109
Signing time:             Fri 17 Apr 2026 05:45:22 +0000
Manifest this update:     Fri 17 Apr 2026 05:45:21 +0000
Manifest next update:     Fri 24 Apr 2026 05:45:21 +0000
Files and hashes:         1: sb1NsCH1THJj88NTX4g2hJui5g4.crl (hash: AqCGcdWjqnRG2sdofmQrWj7wtMcRZjSZEzCsRGzcnNE=)
                          2: A30B17FAA81911EF862F3A56C4F9AE02.roa (hash: PGZEC43Jrl4xxGDivGAOBx4e7We0intHItmZzFxukHM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl
                          rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E520F, serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E
        Validity
            Not Before: Apr 17 05:45:21 2026 GMT
            Not After : Apr 24 05:45:21 2026 GMT
        Subject: CN=69e1c8f2-2e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:22:1f:f0:d7:e0:c1:90:5c:d3:c9:ce:39:af:
                    68:47:75:d4:95:39:6d:9d:5d:d5:1e:9a:c4:37:07:
                    f6:e9:bc:a9:25:4f:34:ee:de:20:1f:15:14:44:28:
                    4c:37:5d:c3:ab:d0:36:1f:98:6a:15:b1:eb:16:ee:
                    71:0f:65:4e:fd:62:de:b8:e5:4e:aa:a3:7e:5e:f6:
                    f2:1e:07:8d:90:35:d5:c4:df:99:db:fe:0b:c2:59:
                    94:8b:6b:a0:bf:f6:ce:14:9f:8c:ab:3f:92:2e:a5:
                    7d:41:d3:65:6f:82:f2:5d:36:c3:12:42:d3:e7:ba:
                    ed:cc:46:2a:9e:d5:10:08:69:a2:3c:09:ba:7c:ec:
                    f9:8d:c4:6d:5c:9d:29:43:37:e9:72:5a:81:e7:d8:
                    44:29:8f:27:af:b9:e1:c9:14:d7:c1:cb:3d:c6:34:
                    f7:a6:8b:e3:47:b7:cf:2f:68:44:f3:8e:2a:db:17:
                    a0:19:b4:c0:74:fc:5b:46:bf:59:b4:b6:6c:78:40:
                    1a:7f:e7:9f:13:4e:aa:54:37:3d:c6:a6:17:30:e6:
                    fb:a2:a4:c9:ec:4c:aa:96:3c:c0:91:09:24:c9:4a:
                    da:69:01:a2:62:e8:05:39:ca:5a:94:72:cc:8e:b0:
                    1c:83:9f:56:f1:14:c4:28:c7:36:1f:0a:69:36:9f:
                    48:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BC:4F:4B:2F:8C:F0:81:25:DE:6B:A6:91:7D:C1:97:AA:97:97:25
            X509v3 Authority Key Identifier:
                keyid:B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:2b:d1:a6:29:85:16:f0:ca:e4:de:db:11:b0:e1:c8:62:d1:
         de:7e:44:09:9c:dc:88:dd:7c:96:a2:d6:c9:87:55:9f:5d:a9:
         f9:5e:ed:f5:22:b3:50:bc:4a:d1:14:c0:81:a5:38:bc:b9:93:
         7e:1f:69:4b:57:39:c7:e7:47:d9:51:35:58:79:7f:26:4d:4d:
         46:89:69:2b:dc:55:9f:31:e0:5a:fc:ec:87:09:5f:7a:f0:6e:
         ee:19:33:e8:4b:ed:d9:a7:62:0b:1a:e6:16:7f:2d:68:f5:f8:
         a6:72:9e:e6:b8:a7:ad:97:31:0a:1e:40:84:ae:53:05:5d:f0:
         90:a7:6a:b8:89:9a:a0:68:9e:f3:92:31:6f:81:20:bb:31:c4:
         36:be:bb:66:aa:ca:11:6f:3a:c7:93:14:c4:e8:6d:d3:e3:26:
         d1:6c:dd:fb:60:2a:94:f6:7d:28:7a:fa:e0:8e:5c:dc:9b:16:
         e2:71:00:6f:8a:c0:be:45:c0:dd:43:bd:24:25:d8:a6:c0:1e:
         68:17:bb:f9:63:1a:1f:2e:64:b6:9f:f9:b6:7f:ce:fc:63:2b:
         b5:ff:40:6f:30:82:6f:7e:b4:ea:68:12:f8:f1:ae:89:c8:65:
         96:02:0e:8b:3d:27:d4:02:26:11:0b:7b:6b:70:7d:7e:e7:8e:
         02:87:48:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:18:45 2026 by rpki-client