Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft
File:                     _0Md-OE71_7FHntTUHtFOan5ZWY.mft (raw, json)
Hash identifier:          hiwLxifyQPNuXtI3kwuuVDvLTswK8TSvQkaw14+fKcs=
Subject key identifier:   27:DB:42:88:60:F0:C2:85:5A:E8:57:B6:CB:0E:66:DB:64:F0:B8:70
Authority key identifier: FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66
Certificate issuer:       /CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566
Certificate serial:       21B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft
Manifest number:          21A6
Signing time:             Sat 18 Apr 2026 15:50:49 +0000
Manifest this update:     Sat 18 Apr 2026 15:50:49 +0000
Manifest next update:     Sat 25 Apr 2026 15:50:49 +0000
Files and hashes:         1: _0Md-OE71_7FHntTUHtFOan5ZWY.crl (hash: f4t+N9v2F/GlM94j/fAebaqPiNG6YGpwnJgjW77CsUg=)
                          2: 5F0B20081CBF11EAA5FCAC86C4F9AE02.roa (hash: h5Pjnbs6tYIgU2xEGeVFnaHiDWrTR38hutsH6p/eIKo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 15:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8629 (0x21b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6C4E, serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566
        Validity
            Not Before: Apr 18 15:50:49 2026 GMT
            Not After : Apr 25 15:50:49 2026 GMT
        Subject: CN=69e3a859-324a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0a:f2:b0:e2:f2:bb:2f:8b:15:35:9d:d7:36:
                    e7:45:9b:0d:88:f4:08:6c:38:e8:9f:89:86:e5:36:
                    47:88:c0:76:f2:5e:ef:75:b7:81:91:29:64:24:92:
                    7a:b3:89:4b:55:6f:d4:ed:5c:9a:63:39:01:cc:07:
                    4e:8a:8f:12:13:f8:fb:f5:9c:4d:ee:00:b3:81:b7:
                    92:60:b6:00:1e:cb:dc:81:92:22:5e:95:40:59:e4:
                    27:16:b0:d0:6e:fb:77:d1:9a:94:42:1b:26:43:39:
                    a2:51:dc:5c:6f:b7:57:f2:b1:d4:b1:e3:ec:5d:05:
                    53:9c:70:7e:aa:cc:88:e0:71:30:7b:3f:73:22:74:
                    d8:49:9d:8b:ce:26:12:f9:fb:e0:58:f8:21:5d:b5:
                    80:b6:22:b8:e0:e9:d6:6c:cd:40:10:82:19:7c:56:
                    32:d9:64:06:04:12:47:74:ad:bc:33:e3:2d:a6:02:
                    0b:20:6b:75:89:11:f6:94:c4:45:eb:ae:ed:30:d7:
                    69:2e:b5:44:cc:44:82:4e:9e:83:75:b1:be:9f:6b:
                    f6:55:62:c5:ec:37:8c:80:59:72:e6:01:db:79:e3:
                    83:68:df:ab:4b:ff:f0:b5:d4:3b:a6:c9:a9:77:4e:
                    48:b9:1e:2f:52:4e:09:45:be:a6:37:22:a9:9d:f1:
                    b6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DB:42:88:60:F0:C2:85:5A:E8:57:B6:CB:0E:66:DB:64:F0:B8:70
            X509v3 Authority Key Identifier:
                keyid:FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:81:35:70:ea:20:d5:f2:76:81:fa:60:d1:0b:f4:c4:68:df:
         7c:84:3b:5a:6e:eb:8c:81:2d:ac:4e:9e:f9:07:d4:c2:8c:61:
         e6:c3:33:9a:43:b9:99:d8:db:94:5e:95:ff:5a:13:33:6b:50:
         05:90:dc:c5:df:e8:3b:b3:dd:16:71:b3:6d:03:80:e2:a8:39:
         cc:d1:23:b8:cd:d9:21:8e:09:c3:7d:68:9e:b2:a9:5f:3d:a4:
         d5:97:8d:cb:ae:d3:ec:85:45:b4:77:b8:22:23:7e:34:37:05:
         47:f3:7d:ee:77:0a:78:44:b7:f4:df:be:f1:1a:31:e5:1a:da:
         3d:d2:af:17:de:07:76:85:50:d1:36:fe:44:22:82:95:7d:2c:
         a5:99:d6:01:28:65:b7:06:c7:83:f3:cf:94:62:c7:ca:0e:04:
         0f:e0:8e:fb:3a:88:33:e9:3a:b3:8a:75:67:3c:b8:85:9d:b0:
         82:fc:a1:be:be:47:cd:98:42:42:89:16:b1:f9:10:f9:c7:6b:
         e1:85:b5:ec:74:db:ab:5a:d2:fc:7a:6f:56:60:2b:e3:93:28:
         dd:1d:a9:6a:29:86:74:1b:71:e5:76:25:ae:05:a0:3e:24:39:
         11:5a:47:31:c7:c8:aa:33:c7:8b:c9:c8:89:a5:b7:10:38:df:
         01:08:48:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:50 2026 by rpki-client