Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
File:                     mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json)
Hash identifier:          pTIzFpeSJ38YShdz+u8u/sErv0j8AkRavU9oVKIGUQQ=
Subject key identifier:   0C:27:FC:DC:08:D4:B9:73:61:D4:8F:AD:29:FF:9B:E1:EA:A7:67:D1
Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
Certificate issuer:       /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Certificate serial:       035A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
Manifest number:          0350
Signing time:             Fri 17 Apr 2026 00:50:42 +0000
Manifest this update:     Fri 17 Apr 2026 00:50:41 +0000
Manifest next update:     Fri 24 Apr 2026 00:50:41 +0000
Files and hashes:         1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: pHqsZFwXPuBhcl/yNNQjwyQKE4uoxZu6VQoMK0+0Xy0=)
                          2: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: RLoDGqQrLMN8RtNfib91dVRLKMKiKWs7GUo1oIVrybg=)
                          3: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: Nz0DVL+CvZ5dT8akmCAjwfXowXzmBOEn4Hxk/rEQ7LY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
                          rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858 (0x35a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57C9, serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
        Validity
            Not Before: Apr 17 00:50:41 2026 GMT
            Not After : Apr 24 00:50:41 2026 GMT
        Subject: CN=69e183e2-f5bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b2:6d:a5:ca:c4:5e:52:52:02:aa:4f:8a:f2:
                    7b:1b:7a:0d:a0:4e:1b:cb:3a:c6:46:87:83:dd:ea:
                    37:ac:9e:c8:6d:9a:7f:b1:e9:2f:e4:13:16:d3:d2:
                    4c:f5:eb:9d:7b:b3:f8:da:b1:e1:1b:08:d5:3c:23:
                    56:3e:85:0d:9a:d7:24:5f:1f:f8:d6:1f:4f:2f:a9:
                    23:77:f7:d5:7b:1b:64:b9:8b:21:37:79:04:53:0e:
                    4e:58:6a:1b:eb:34:c1:03:a0:22:67:cb:56:6f:23:
                    30:c9:17:b5:40:4f:22:25:cc:44:44:ec:27:50:43:
                    f5:b5:ce:60:95:a1:c8:22:d7:8e:f9:13:db:c0:66:
                    6d:66:45:f2:85:77:81:05:10:c0:bc:13:f2:c0:c9:
                    c4:04:88:59:cf:c0:aa:6c:03:32:b7:b4:14:be:67:
                    f0:35:34:3c:87:76:74:97:14:dc:12:38:1f:95:43:
                    39:99:94:79:47:b4:51:74:fe:bc:bb:e7:ce:8d:49:
                    d1:7c:2a:ea:df:ba:f9:d2:af:f6:01:a1:0a:48:f3:
                    8d:e3:00:4e:2a:67:4c:fd:7d:da:0e:2a:5e:38:1c:
                    77:b3:99:fc:71:8f:a7:85:47:43:1a:49:d5:3f:ef:
                    31:33:a8:e8:21:57:60:5f:f1:f5:8a:1c:2a:3e:3f:
                    76:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:27:FC:DC:08:D4:B9:73:61:D4:8F:AD:29:FF:9B:E1:EA:A7:67:D1
            X509v3 Authority Key Identifier:
                keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:fa:07:86:94:d7:a6:aa:6c:69:27:ee:70:c5:13:98:e4:18:
         59:e9:d7:20:06:92:07:9e:b2:8d:b0:74:b6:0b:f2:c5:4f:d2:
         14:5d:90:ab:8a:5c:32:2f:a3:c9:f1:b7:a2:a9:6f:bb:2b:31:
         ba:45:fb:72:e6:6f:c1:c1:1d:88:28:91:e6:cf:45:3b:14:fb:
         19:f1:e1:17:f9:fd:32:a8:13:28:4b:f8:c9:ce:61:14:fb:e4:
         66:dc:3b:ec:a0:96:e2:b4:a7:f7:23:c8:09:4b:f3:48:4e:ec:
         a1:93:5c:25:45:7e:19:4d:61:93:75:0f:5f:87:01:12:2d:36:
         68:e0:f9:ce:8a:37:88:65:bb:b3:de:dc:8b:e0:1f:3f:22:6f:
         fc:c9:5b:1d:a0:23:0b:41:53:83:28:8d:a8:8e:73:2d:32:75:
         9c:6e:e3:66:52:2f:33:bc:6b:52:77:47:6c:cd:67:a6:17:57:
         5c:2b:15:6e:cf:a5:4f:1a:94:4e:d2:54:b4:27:14:32:ea:9b:
         7d:10:52:55:28:ed:04:61:f5:37:9c:28:4a:c4:3b:ba:67:ea:
         f3:b7:de:3f:e0:d0:a6:0e:b4:c6:ef:b1:71:af:9d:b3:af:1a:
         8d:20:41:94:27:67:9f:7a:dc:99:05:d8:68:dc:b5:4c:04:ba:
         23:5e:e2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:52:20 2026 by rpki-client