Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
File:                     _eDYrIjb_GreZ9__WjrC7yZsXNw.mft (raw, json)
Hash identifier:          /X+v855h7rqUCyuNSYpLP+5FBGzCh9H17GC24thIn2A=
Subject key identifier:   9F:FA:98:7B:8D:FA:50:F5:17:90:AF:9B:74:99:1A:F0:0A:E3:08:35
Authority key identifier: FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC
Certificate issuer:       /CN=A91E7FA1/serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
Manifest number:          B2
Signing time:             Fri 17 Apr 2026 06:49:47 +0000
Manifest this update:     Fri 17 Apr 2026 06:49:46 +0000
Manifest next update:     Fri 24 Apr 2026 06:49:46 +0000
Files and hashes:         1: _eDYrIjb_GreZ9__WjrC7yZsXNw.crl (hash: U7M+eHAO2yr9Tzl5G8Tqp24ujb1WjLxFK99ofU3fOe0=)
                          2: 292A3CF0376511F0A9D2D035C4F9AE02.roa (hash: LfCoz7Dnyj7tBchjned94Fjoj2Azlhk3SF6mzP2Fido=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl
                          rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7FA1, serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC
        Validity
            Not Before: Apr 17 06:49:46 2026 GMT
            Not After : Apr 24 06:49:46 2026 GMT
        Subject: CN=69e1d80b-95c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:88:3c:99:7c:86:e9:b0:94:71:7b:00:81:82:
                    a7:37:61:6e:1a:3f:2a:eb:9e:95:a2:0a:63:a4:ba:
                    75:25:b6:3c:6a:0d:01:8c:79:b7:9f:51:a0:72:1b:
                    a0:93:50:7c:46:c1:0b:6c:ca:36:0c:33:67:b1:93:
                    97:07:42:0e:4a:88:17:43:04:b1:00:74:8f:1d:36:
                    03:58:e1:d4:46:2c:13:bc:d2:64:f4:34:83:24:a2:
                    a7:ea:9a:12:ff:5e:be:c7:95:88:12:22:0d:7b:ae:
                    14:1a:3a:b5:2c:70:3e:4e:ba:18:71:d9:8c:80:5a:
                    01:4f:47:7a:bb:d2:47:e6:cc:2e:83:f0:f4:9c:63:
                    42:7c:ab:10:39:36:7b:68:e6:7d:c2:36:22:18:d3:
                    64:26:bb:ca:c0:31:2d:e7:d7:2a:d9:33:78:4e:c6:
                    1a:87:55:b2:0a:4f:ea:c0:c1:16:1e:dd:72:f6:5c:
                    9c:bd:09:85:c9:af:52:24:da:88:36:94:bf:7e:c5:
                    68:47:52:b2:2f:4f:a5:ad:03:aa:8e:26:b0:95:f7:
                    8a:57:92:c3:93:fe:7a:fa:cf:f4:04:0f:c0:09:f4:
                    46:b9:50:c5:13:3e:a4:ac:da:de:74:7e:f6:fe:c5:
                    1d:aa:c6:1f:83:8e:e4:a4:bd:8d:d0:03:76:43:5e:
                    cf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FA:98:7B:8D:FA:50:F5:17:90:AF:9B:74:99:1A:F0:0A:E3:08:35
            X509v3 Authority Key Identifier:
                keyid:FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:16:23:f6:65:cd:03:d9:e0:1f:b0:36:9c:db:50:d5:38:04:
         97:35:5b:33:21:96:26:1f:da:c5:72:fb:51:03:11:26:56:20:
         bb:13:62:bd:a9:b7:fd:e7:0f:b0:de:d0:06:06:7e:47:03:df:
         c5:02:73:1e:a5:e3:d8:a1:21:dd:18:03:ce:c0:d5:0a:40:ad:
         97:b2:28:50:fc:c6:cf:1b:8f:ac:4d:11:db:16:a0:88:1a:7a:
         fc:79:b4:60:d7:b0:6b:5a:2d:4f:3b:1e:14:d6:9d:0d:96:02:
         6e:ff:b3:37:14:fe:c2:46:26:ce:3a:d8:a9:99:f2:c3:0a:ea:
         ff:f4:8f:69:28:7e:4e:2c:1d:48:f0:d2:36:21:d9:1f:8b:d2:
         4a:2b:0f:9f:01:e6:40:55:65:c1:b7:bd:c2:97:e7:e5:3f:91:
         80:0d:43:7d:c1:4f:4a:1d:46:3f:8e:a9:6a:65:ee:1e:e8:f5:
         1f:68:04:8c:fb:ff:31:32:e9:fd:11:14:02:d1:6b:85:e0:0a:
         bb:ec:74:df:bf:12:e6:b3:9c:cd:9c:9a:75:74:cf:7e:f2:57:
         3f:b2:c9:ff:73:74:4b:a4:b7:f1:30:77:8c:12:c1:73:50:fa:
         37:46:63:fa:06:09:af:13:64:19:0d:f3:ce:c3:a6:da:9f:28:
         80:40:d8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:50:47 2026 by rpki-client