Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
File:                     fHiVltWjewRcnZ8TpCAMHodHf3Q.mft (raw, json)
Hash identifier:          4G+z1UJSoKkSkyi2+8XnxI+mOr0DQHq67KASfiNj/ww=
Subject key identifier:   1D:45:C5:3B:63:3E:EA:A7:7F:86:50:65:7E:72:C5:11:02:EC:E0:68
Authority key identifier: 7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74
Certificate issuer:       /CN=A91E9CD4/serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74
Certificate serial:       59
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
Manifest number:          57
Signing time:             Wed 15 Apr 2026 07:42:06 +0000
Manifest this update:     Wed 15 Apr 2026 07:42:05 +0000
Manifest next update:     Wed 22 Apr 2026 07:42:05 +0000
Files and hashes:         1: fHiVltWjewRcnZ8TpCAMHodHf3Q.crl (hash: YaKk8yefoBPGKrI0bEF2Ftk3bGS0BWV+LOoaSk/aUnw=)
                          2: 9402F1E2B95711F0959B8139C4F9AE02.roa (hash: 02q/fl3zFJ/KDWK7HpIR1Cl5Rby/X/6GDy/HiTRSiik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl
                          rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9CD4, serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74
        Validity
            Not Before: Apr 15 07:42:05 2026 GMT
            Not After : Apr 22 07:42:05 2026 GMT
        Subject: CN=69df414d-aa7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0b:0b:ad:4e:3d:6b:53:29:0b:14:c2:2c:3c:
                    88:cd:3b:8e:1a:24:83:37:16:59:b0:5f:c6:52:f7:
                    a3:1f:e1:25:52:69:2e:de:c1:ae:ce:dd:88:07:81:
                    a1:b4:d5:7b:1c:a4:a6:37:ed:0b:42:36:18:c2:c3:
                    0a:3b:6c:d5:6d:72:9c:0e:6f:a7:af:19:85:8a:3b:
                    99:54:9b:92:88:9a:cf:b1:4b:fc:9d:a8:cf:13:2e:
                    3d:87:66:27:fa:b8:53:d0:4c:28:62:24:62:21:15:
                    ff:0a:10:29:aa:3c:e9:09:53:b1:2e:1e:b1:f0:78:
                    36:97:9f:ab:a5:21:a3:14:e9:cb:4a:26:eb:dc:65:
                    eb:61:61:ad:ec:42:22:aa:5e:64:b9:34:6b:b6:f4:
                    5a:59:c3:9e:56:74:9b:f3:7f:94:5b:5e:cb:87:e6:
                    6c:d5:97:10:87:11:34:01:3b:4d:4c:52:b6:09:7c:
                    f3:e6:6e:c1:6f:9e:a1:26:b0:83:d5:ef:99:28:72:
                    83:66:3a:55:41:9d:d1:13:30:ea:a9:cc:20:7f:b1:
                    4d:e8:59:b0:1a:ef:46:d7:e6:59:87:e5:42:a4:46:
                    17:f8:0b:22:f4:68:5e:94:e3:6a:7c:7d:93:72:df:
                    da:38:c8:6c:b3:3e:00:29:36:0a:9b:07:17:09:bf:
                    ff:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:45:C5:3B:63:3E:EA:A7:7F:86:50:65:7E:72:C5:11:02:EC:E0:68
            X509v3 Authority Key Identifier:
                keyid:7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:6f:d0:6f:e4:f0:2b:d8:62:35:67:24:e8:5f:95:36:cd:a0:
         74:65:6c:ca:9d:5b:96:d5:c4:18:9a:35:95:a4:71:20:a9:ad:
         3e:5a:a0:d2:cd:2f:00:f2:7d:f4:ac:b2:57:fa:69:c4:60:bf:
         25:f2:78:9b:d9:4b:a9:d7:17:5b:f8:e0:88:7e:6f:20:a0:6d:
         48:8b:85:9d:74:c0:77:9f:c7:0d:30:34:5d:1b:65:dd:e9:d8:
         aa:a0:97:b9:75:dc:92:f6:68:e4:6b:83:5c:65:87:e7:44:38:
         03:5f:2e:b7:d2:f1:13:83:b0:9a:f9:ca:2d:fb:1f:8e:84:45:
         67:3c:b9:e6:a9:fd:2a:57:8f:24:be:1d:1b:c2:5d:6b:5b:df:
         5f:5a:3a:4c:5d:18:34:df:9d:08:28:a3:be:3e:6d:a6:c4:c3:
         10:c6:6e:d7:c8:1c:63:78:aa:3b:8b:5c:43:7e:d9:20:d0:77:
         af:6e:db:ff:4c:da:fb:f3:e0:ef:05:fd:c1:a8:8d:5a:8c:92:
         ec:07:ed:ab:71:36:dd:0f:38:6d:79:a1:4d:0f:41:1e:d0:ea:
         3d:56:ea:1b:d1:80:50:e0:f6:05:78:ad:72:bf:68:f4:6e:bb:
         66:91:fe:f7:9a:99:b4:cc:6c:a2:78:c7:74:49:4b:78:35:e1:
         7e:13:8e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:42 2026 by rpki-client