Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
File:                     MnuOg9VLpp18NcajREfRsbAR2WY.mft (raw, json)
Hash identifier:          KYNZPkDL4tkxc/KXdWNrzX8Pbp3YltK3IOJyuKqKHj0=
Subject key identifier:   67:06:46:BD:A4:F7:9C:A0:C8:D9:09:A3:C2:61:4F:AA:4D:76:AA:92
Authority key identifier: 32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66
Certificate issuer:       /CN=A91E6B9A/serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
Manifest number:          0138
Signing time:             Fri 17 Apr 2026 05:08:55 +0000
Manifest this update:     Fri 17 Apr 2026 05:08:55 +0000
Manifest next update:     Fri 24 Apr 2026 05:08:55 +0000
Files and hashes:         1: MnuOg9VLpp18NcajREfRsbAR2WY.crl (hash: N5sEfUfRf1+b/H2pPQMy36uWHLS0w3+yeyWH32Jw8Tc=)
                          2: 91EDFFF27CBF11F0BCA8A74FC4F9AE02.roa (hash: SuO5gKigwqPDmvXKmrORggCQXMP3mH8zK7MYPJxCt/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6B9A, serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966
        Validity
            Not Before: Apr 17 05:08:55 2026 GMT
            Not After : Apr 24 05:08:55 2026 GMT
        Subject: CN=69e1c067-d63a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:21:09:0a:37:e7:f4:e8:f8:bc:d7:19:7c:4b:
                    43:85:86:f7:18:3d:e9:12:46:f1:3a:48:26:a6:af:
                    45:8c:dc:d0:dc:e0:5e:59:f9:e3:5a:87:a0:3e:c4:
                    e2:8f:4a:f1:70:e6:90:e7:6c:24:6b:4a:bb:5a:25:
                    c9:fa:fe:66:a4:e6:06:7f:85:f7:b0:1c:b9:d1:8a:
                    cc:a3:29:18:93:e4:aa:07:32:2a:09:4a:4d:4b:10:
                    64:75:e1:cd:ac:2c:55:49:89:7a:6a:2a:d9:47:9e:
                    ef:dd:99:9d:2b:ac:ea:33:fe:10:90:24:cd:91:a8:
                    e5:02:86:d2:b1:98:d5:bf:3d:68:e6:94:f1:f5:fe:
                    17:9e:2b:20:34:46:d6:8e:12:51:1d:aa:c8:d2:5d:
                    67:00:43:92:d4:d3:5e:d3:f8:b8:c5:2b:50:58:e0:
                    54:c5:32:fd:87:3f:71:b7:38:8c:35:ae:b3:b5:ce:
                    ef:b3:d9:64:9b:41:3f:a6:15:95:6b:a3:97:ca:68:
                    b2:3c:d0:b7:d8:15:57:22:c3:92:a8:3d:3b:b6:2c:
                    db:20:49:63:44:c6:84:ed:57:cb:05:29:42:5f:be:
                    10:c7:18:b1:27:0b:4e:20:d1:4e:e1:7b:6e:5d:27:
                    36:66:b8:13:f9:71:ce:60:a8:de:f5:0a:d5:41:4c:
                    5a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:06:46:BD:A4:F7:9C:A0:C8:D9:09:A3:C2:61:4F:AA:4D:76:AA:92
            X509v3 Authority Key Identifier:
                keyid:32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:28:49:a6:49:1b:06:3a:38:a6:63:b5:41:1c:68:20:8f:43:
         d7:63:46:80:7b:34:b2:ae:9f:71:64:1c:c2:fc:8a:c7:e5:d4:
         60:fb:7d:51:25:7b:48:4f:70:11:5e:b7:bb:f4:77:7f:02:7e:
         3f:11:04:71:68:c5:c1:ba:8b:8c:30:c1:50:51:c1:30:16:bc:
         0e:96:52:4a:08:2c:bf:a7:cb:bc:67:2a:4f:5b:b9:75:98:f6:
         07:ef:ca:97:8a:b0:af:cc:11:94:b2:f8:05:4e:c7:ae:5a:fb:
         b1:f1:c8:74:50:59:c0:e2:7d:1c:ed:d6:07:74:25:5b:bc:1b:
         f9:34:6c:c3:91:78:0f:8e:b0:71:c9:2e:5d:7f:2a:53:9a:3b:
         77:fe:19:74:c4:ca:03:80:dc:34:ec:e8:da:6a:ee:b4:48:3a:
         09:73:c5:f3:59:3b:d2:76:7a:71:5d:6c:73:24:9b:be:3f:bd:
         8f:6c:91:86:65:03:0a:3d:83:35:95:ad:19:fd:fd:a1:d7:e5:
         fd:82:8f:67:02:fc:42:75:06:34:b0:9c:d9:2b:50:5b:4b:7b:
         54:85:2f:98:d5:de:8e:b0:4f:ba:99:1a:70:b6:8b:dd:17:73:
         f8:90:8c:32:9d:fe:19:7f:a2:e0:60:2c:79:f4:76:e0:70:cd:
         0f:0b:64:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:08:52 2026 by rpki-client