Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
File:                     TiWbqHpAtm2EKsjOCup4TkvXOC4.mft (raw, json)
Hash identifier:          LjnAPZM+ng6ljjMBxqCLPB2u1LrERrgTkAHPeUxmTtI=
Subject key identifier:   7D:95:18:FF:A5:36:EA:2A:E4:79:6F:57:B8:EE:C3:89:6F:A6:A3:DA
Authority key identifier: 4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E
Certificate issuer:       /CN=A91E57A9/serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E
Certificate serial:       016A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
Manifest number:          0161
Signing time:             Fri 17 Apr 2026 04:36:21 +0000
Manifest this update:     Fri 17 Apr 2026 04:36:20 +0000
Manifest next update:     Fri 24 Apr 2026 04:36:20 +0000
Files and hashes:         1: TiWbqHpAtm2EKsjOCup4TkvXOC4.crl (hash: 6Qya4aeXDj0V5/7ZaMW2/kNS0GEkEe57FH/PyH7yzC0=)
                          2: 4647BCD66E7F11EF9223EA62C4F9AE02.roa (hash: FxWk3CYoUsmOWP3BThgvkKbLGxzzM1P6yOk19JYKyZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl
                          rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57A9, serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E
        Validity
            Not Before: Apr 17 04:36:20 2026 GMT
            Not After : Apr 24 04:36:20 2026 GMT
        Subject: CN=69e1b8c5-328c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ab:b2:bf:42:6c:ae:6f:d7:43:6b:19:cf:4c:
                    ab:d4:de:0e:f1:4b:d6:79:f3:3b:80:a9:f7:47:b0:
                    3a:b0:12:d5:0d:91:b4:38:c3:1d:71:94:f0:ed:3b:
                    c1:82:64:86:5b:24:c8:75:7e:78:3d:0f:1d:b8:c1:
                    53:43:cf:85:d3:33:00:60:c2:f3:7a:f7:83:90:f4:
                    af:08:5a:4e:a8:80:3b:0a:00:da:cf:ef:1a:bb:7a:
                    8b:da:6a:b7:97:34:17:9d:be:de:af:5d:ef:56:08:
                    04:bf:a8:0a:1a:14:22:2c:a2:2e:cf:dc:cb:93:fc:
                    9d:f2:aa:aa:13:8c:4b:f7:4a:62:97:df:24:e7:ff:
                    9e:1a:1f:93:22:fd:78:da:60:13:16:98:77:f0:6a:
                    3b:bb:f5:48:c7:f7:51:79:40:2f:0a:c3:2e:1f:01:
                    a1:fd:ea:9f:61:42:7f:77:44:43:d4:d2:5d:2c:f6:
                    9d:d7:7d:08:87:4b:ee:5f:33:30:d7:7d:b5:23:7f:
                    b9:1e:0f:c4:fa:d2:64:dc:d3:2a:b4:f6:b1:68:43:
                    d5:9e:6f:29:73:36:d9:96:bb:27:b8:c4:e3:43:a1:
                    57:8d:89:91:11:66:89:a7:03:7c:48:ea:e4:1d:fb:
                    a3:e2:2b:2f:c0:66:ec:41:ed:e7:c6:5c:3d:7e:3e:
                    24:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:95:18:FF:A5:36:EA:2A:E4:79:6F:57:B8:EE:C3:89:6F:A6:A3:DA
            X509v3 Authority Key Identifier:
                keyid:4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:76:e3:67:e8:2c:32:1c:61:34:42:d5:c5:40:bf:10:09:dd:
         4e:d9:22:87:f9:49:c7:53:12:73:be:db:09:b7:97:03:33:66:
         d9:d6:9c:22:7b:27:61:7c:ea:0f:1a:9c:b2:ee:07:90:69:c8:
         83:c6:74:71:f5:a2:a7:bc:78:ea:a6:f2:59:c6:84:8a:01:d5:
         ab:5e:14:c0:7b:a2:5e:9e:67:32:87:f7:e1:96:4f:a9:c3:c7:
         91:45:1b:55:05:7c:73:b4:0c:42:b0:95:f7:91:55:0e:cc:6c:
         06:a0:84:16:b0:15:2d:67:65:8b:c3:11:70:84:16:d9:df:ed:
         15:82:fe:15:60:a3:f2:7a:68:9b:bf:6c:61:f7:61:ac:16:a0:
         2c:61:ba:67:c0:64:fd:2d:92:95:50:e9:c3:93:30:25:b1:f6:
         e6:92:1c:ba:05:a9:4e:b5:db:66:a9:0c:0b:77:91:43:7c:b9:
         b9:32:2d:0e:6f:0f:82:22:ab:ee:fd:d2:29:b7:50:3b:8d:cb:
         97:2a:27:ba:4d:34:cb:5d:3b:cf:b7:e2:ab:08:f9:ec:87:ad:
         2d:e4:3a:4f:63:c0:f0:e1:41:30:41:bd:6f:cc:cf:81:cd:7e:
         9f:d4:a6:47:21:6b:d8:f8:71:3f:3c:c8:1f:b5:85:c5:cd:49:
         af:64:d8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:45 2026 by rpki-client