Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
File:                     _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json)
Hash identifier:          zIItT2pW8cfsz2ddL77qp9xeilCI8M8E5woK/8rLnbY=
Subject key identifier:   E1:8F:32:46:E1:09:EE:63:1E:27:E9:D7:41:45:84:9C:E1:BD:BD:0C
Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B
Certificate issuer:       /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
Manifest number:          011A
Signing time:             Wed 15 Apr 2026 05:32:53 +0000
Manifest this update:     Wed 15 Apr 2026 05:32:52 +0000
Manifest next update:     Wed 22 Apr 2026 05:32:52 +0000
Files and hashes:         1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: JPIAg/d93a1mWQO4Tk3jbr36cQ9dhVftx0hY24QQcsw=)
                          2: 3117605AFF2E11F099836B6D89EE528E.roa (hash: 5oMhHK5GexMn6Fihs/+IOJ93dC15hw4lCqu3Gtv/Uc8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl
                          rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 05:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
        Validity
            Not Before: Apr 15 05:32:52 2026 GMT
            Not After : Apr 22 05:32:52 2026 GMT
        Subject: CN=69df2305-ceb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6c:ec:fb:d4:09:a4:8f:18:1d:c8:6b:ec:24:
                    25:90:0d:48:a1:6f:80:8e:c6:c9:f6:6d:76:7e:bb:
                    68:ef:de:e9:c8:01:29:01:98:32:f6:f7:b4:25:d9:
                    68:b4:dd:5e:e2:c0:5e:38:c9:cd:d4:5e:96:be:c3:
                    4f:8a:20:f5:3a:77:b0:f5:f2:a8:48:95:11:95:32:
                    eb:e8:d1:6b:27:96:31:f1:39:47:05:41:b0:7d:b3:
                    07:1a:3e:aa:03:2e:fe:20:58:53:fd:e2:4d:16:25:
                    16:8f:ed:06:0f:18:a1:93:ec:89:8d:df:10:63:1d:
                    92:14:0e:d1:3f:de:8c:34:cf:e6:86:ea:dc:84:da:
                    f7:34:23:b8:4b:68:31:f0:8d:75:ab:09:f1:ff:c7:
                    d6:c0:1e:20:e3:ae:3c:f6:0c:bd:b0:06:06:b8:31:
                    76:52:72:f2:0e:4e:69:9a:33:a9:c2:2d:f3:21:13:
                    6f:9a:83:67:26:e7:1e:af:c5:bb:88:b3:d0:3d:91:
                    83:e4:0d:68:03:bb:4d:21:d5:cc:68:31:01:79:b0:
                    33:7d:28:88:46:61:39:5a:79:2b:5e:51:fd:47:0e:
                    4f:dd:ab:dd:b1:06:84:b2:2a:dd:98:64:dd:0e:3f:
                    06:53:6d:6e:ef:18:97:c7:6f:19:96:13:21:85:de:
                    7b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8F:32:46:E1:09:EE:63:1E:27:E9:D7:41:45:84:9C:E1:BD:BD:0C
            X509v3 Authority Key Identifier:
                keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:37:5e:89:0a:50:59:c2:b8:13:3c:c8:c8:ae:2b:bd:a7:07:
         07:1e:cc:cc:49:7a:df:6f:96:1a:5e:56:fc:a7:71:d2:ae:0c:
         25:7c:eb:b3:03:9c:2d:4d:3c:3b:39:96:b3:5b:20:c8:79:c1:
         0e:ae:b3:25:78:70:0b:23:3f:80:5e:e3:8c:bf:ca:78:14:61:
         d7:12:46:89:b3:34:55:b5:a4:15:58:a3:60:42:4b:94:fa:16:
         d5:6c:06:ad:86:51:fe:c3:66:d7:51:2b:79:98:d4:df:09:4d:
         1b:16:31:4e:b0:da:d5:a9:a6:6d:ed:fc:c1:32:53:61:99:76:
         68:0e:1b:c9:71:11:c7:56:86:30:66:e4:8c:bd:97:a1:bf:2d:
         98:c5:9a:25:80:7d:e9:03:5d:87:fe:e3:19:48:00:cb:d4:0a:
         69:7f:a1:66:6b:70:aa:e1:f1:69:15:1f:70:0b:62:f9:86:08:
         df:eb:47:4c:8b:e9:bf:f0:08:94:a1:eb:4b:fd:a3:9b:01:88:
         22:6a:63:9b:c6:aa:36:a1:22:36:d4:0f:f1:70:54:8c:4d:77:
         63:8d:d7:0c:3e:56:4b:3c:e1:4d:e8:71:d0:91:ba:de:04:7a:
         38:fa:c9:f6:a6:ef:e1:8c:d7:2e:7f:d5:4f:c6:49:1b:28:56:
         c2:8f:30:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:58 2026 by rpki-client