Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft
File:                     Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft (raw, json)
Hash identifier:          xpMKG0P1hxC//LZo2DT7SQP15Fc850Yf3Q6LUTceb00=
Subject key identifier:   00:9B:CD:B2:9C:56:64:FB:09:1C:B2:EE:E7:A0:55:8C:3F:AE:EC:76
Authority key identifier: 0B:0E:4A:4E:AA:D1:50:A3:F6:3E:61:1B:04:84:31:0F:E5:FA:F9:54
Certificate issuer:       /CN=A91E9B39/serialNumber=0B0E4A4EAAD150A3F63E611B0484310FE5FAF954
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft
Manifest number:          47
Signing time:             Fri 17 Apr 2026 08:05:11 +0000
Manifest this update:     Fri 17 Apr 2026 08:05:11 +0000
Manifest next update:     Fri 24 Apr 2026 08:05:11 +0000
Files and hashes:         1: Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl (hash: ERl91pw2hOzKQNIUfvp6ac3cfCP2Uw4yTOsvitlRqMk=)
                          2: 97B11C3CD29411F09264510FC4F9AE02.roa (hash: QApOxw4AB+QU5Y26DW3TDa/Ln50nbLLZSnM8Pz+sHv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9B39, serialNumber=0B0E4A4EAAD150A3F63E611B0484310FE5FAF954
        Validity
            Not Before: Apr 17 08:05:11 2026 GMT
            Not After : Apr 24 08:05:11 2026 GMT
        Subject: CN=69e1e9b7-fef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1a:06:5a:ee:b5:cc:8b:01:fc:da:23:26:c1:
                    b1:b8:7d:ab:e9:32:78:d7:bb:75:24:e2:42:c1:5b:
                    dd:86:6f:03:56:46:23:39:97:1d:58:76:38:7a:92:
                    15:05:08:3a:48:65:16:b0:d1:8d:69:0f:c2:09:25:
                    dd:1c:8d:13:ed:1c:cf:7d:17:36:9a:5d:8e:f4:d1:
                    41:9f:36:9e:a8:10:7b:09:33:ed:b0:5c:be:58:b2:
                    c6:3a:17:cf:ea:71:4a:8f:20:7c:44:d1:92:53:fd:
                    f5:dc:bb:7a:f1:3d:68:c6:be:02:67:5c:4b:b7:c8:
                    69:f8:d0:ba:4b:bc:04:4b:91:dc:65:59:e7:76:42:
                    b7:d2:b8:7b:2d:f3:a7:df:86:c7:89:8a:5b:dc:e0:
                    57:da:fb:34:fa:78:eb:e2:f4:19:51:ba:82:42:49:
                    f2:a1:16:80:4b:dd:67:66:d0:8c:1a:ac:6c:79:81:
                    9d:dc:ac:f8:9e:ba:f8:fc:82:3d:05:34:10:4e:7d:
                    a9:6c:59:63:a8:52:08:66:e9:69:00:30:56:8d:08:
                    79:c0:df:3d:3e:c5:4d:58:32:d0:3b:f3:35:6b:12:
                    f6:dc:57:5f:71:f2:05:18:10:ef:a4:fd:fa:bb:53:
                    bb:9b:08:ac:6d:01:56:ee:9e:9d:08:01:8c:9f:bd:
                    15:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9B:CD:B2:9C:56:64:FB:09:1C:B2:EE:E7:A0:55:8C:3F:AE:EC:76
            X509v3 Authority Key Identifier:
                keyid:0B:0E:4A:4E:AA:D1:50:A3:F6:3E:61:1B:04:84:31:0F:E5:FA:F9:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:da:6c:eb:d1:53:af:7a:50:ab:54:94:25:43:e9:06:8c:3d:
         80:cd:20:d6:af:16:d2:dd:46:00:c3:0c:5f:2a:51:c5:13:d0:
         1e:6a:e1:a1:39:9e:93:b4:4e:db:ad:ea:fe:55:a8:c1:f2:58:
         bd:58:93:9c:7e:7f:39:1d:5b:5a:53:84:6e:a9:65:8a:68:33:
         db:4a:9e:1e:5b:da:a3:0e:1e:61:aa:ed:9a:38:e4:b5:f4:76:
         72:3c:97:72:9a:e2:15:48:d1:e4:7e:d5:b4:15:4f:81:7a:b1:
         90:9c:c2:94:f8:a5:cb:83:16:b6:b2:67:1c:48:ae:2d:b5:f6:
         f3:73:36:fc:a9:b2:cf:37:2b:91:87:9e:0d:92:d4:3f:92:e6:
         08:9d:22:7e:ed:d7:ea:03:02:9b:c0:82:04:60:ce:2c:74:12:
         25:2d:99:7a:94:35:09:e3:42:15:b4:55:15:a9:6e:dc:b6:e9:
         a0:25:c5:92:21:e2:17:9d:09:d9:33:a8:72:04:30:50:6b:f4:
         da:41:28:95:be:85:29:17:03:99:16:e3:f0:71:0e:f6:35:a5:
         1e:a8:de:30:77:3d:8d:74:3f:0a:e4:c4:fb:d8:2f:fe:9b:c0:
         da:23:40:75:ab:f1:43:b8:87:ff:10:86:8c:a8:05:66:99:c4:
         77:0c:4a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:24:02 2026 by rpki-client