Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft
File:                     F4SvaM922Ze5n3dAY3gNspm1SpM.mft (raw, json)
Hash identifier:          pzUF6c2D+nYm21zfIn1fYp3AOj+tvX+2T3KYECXdiKM=
Subject key identifier:   08:39:29:F7:BD:66:4A:97:1D:02:EE:08:D3:E3:19:0D:BF:F5:C1:2D
Authority key identifier: 17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93
Certificate issuer:       /CN=A91EC3C9/serialNumber=1784AF68CF76D997B99F774063780DB299B54A93
Certificate serial:       B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft
Manifest number:          AD
Signing time:             Wed 15 Apr 2026 06:44:19 +0000
Manifest this update:     Wed 15 Apr 2026 06:44:18 +0000
Manifest next update:     Wed 22 Apr 2026 06:44:18 +0000
Files and hashes:         1: F4SvaM922Ze5n3dAY3gNspm1SpM.crl (hash: 2HDFFe/+x5oJyfXqx//vXfxctZd7fgH+FXuFHcPgwOY=)
                          2: 00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa (hash: VbbAYRDB1MrB+OHsle6cq0lEvb0Mg7dou4jfOd/d1WA=)
                          3: 7B6FCB36340B11F0B358096BC4F9AE02.roa (hash: 9rHElgQGkin/9e3Db5VLV3ihFuBVV27/iuFOrelwuPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl
                          rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 06:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC3C9, serialNumber=1784AF68CF76D997B99F774063780DB299B54A93
        Validity
            Not Before: Apr 15 06:44:18 2026 GMT
            Not After : Apr 22 06:44:18 2026 GMT
        Subject: CN=69df33c2-c8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7c:e1:ec:32:9f:47:15:06:f7:2a:59:34:cd:
                    3e:2e:6d:f6:bb:0c:55:85:d9:24:d5:47:81:2c:51:
                    98:c4:34:76:7d:54:1e:ba:53:54:4f:e6:a6:e4:36:
                    8c:84:0b:41:9d:00:7b:bc:95:a6:c0:51:ea:0b:31:
                    8b:2a:33:64:0a:d6:11:3d:7d:53:3b:76:6c:33:68:
                    01:69:96:fd:93:9d:5d:02:2a:31:42:57:c4:94:fd:
                    d6:93:3f:a6:67:f4:83:07:58:17:e2:c8:4b:83:81:
                    d8:ce:63:99:2c:74:43:93:b7:70:72:ac:a5:7b:8d:
                    cd:24:fc:0d:82:d1:08:ae:0d:2c:fe:c8:ee:50:ca:
                    6d:46:a9:94:bf:3f:47:7f:f1:78:08:13:51:95:b5:
                    47:ec:0c:20:3a:25:5a:fe:93:87:b0:78:90:10:31:
                    8d:96:1b:2b:ed:aa:96:1a:33:cc:b7:11:4d:b6:d2:
                    86:39:f8:47:de:e8:f7:93:6c:a3:93:03:ca:80:23:
                    d2:1c:24:6d:eb:61:36:1b:75:d2:ae:20:24:8c:d2:
                    dd:81:5f:db:fa:c1:02:0d:78:38:8f:13:08:82:23:
                    81:30:c6:0c:80:5e:ed:b1:92:21:74:03:fc:69:55:
                    36:c8:23:69:8e:e1:2e:1c:ee:1f:4e:bc:b9:eb:9c:
                    12:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:39:29:F7:BD:66:4A:97:1D:02:EE:08:D3:E3:19:0D:BF:F5:C1:2D
            X509v3 Authority Key Identifier:
                keyid:17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b6:81:0b:45:05:a0:04:7b:40:44:93:17:25:03:52:10:9f:
         a1:53:fb:0c:ae:fb:25:4f:88:04:ad:ab:ab:41:87:59:82:aa:
         82:44:ce:ff:d5:ef:36:7e:55:4e:30:d5:d4:00:98:2d:3f:8c:
         2a:a4:5e:cb:ba:7e:db:29:8b:3f:9c:d9:77:39:6f:36:03:55:
         11:8b:a1:25:69:a4:46:98:93:46:f8:ec:23:92:bb:e1:38:b1:
         ec:6a:3a:ba:53:83:e2:7a:ec:f0:4b:df:fb:e0:2f:53:a5:2a:
         35:66:63:5b:f2:9b:60:e4:6e:e6:bc:dd:dd:c9:41:4c:cc:66:
         a0:91:fc:92:84:aa:59:f5:cb:ed:5c:18:3b:ae:d6:17:cc:1b:
         d5:43:cf:71:76:4c:61:e3:4f:52:eb:27:28:ab:2d:92:85:69:
         c1:ac:93:c5:86:c4:48:1f:fc:3e:6f:d6:f9:91:65:f2:e5:f6:
         8e:59:2d:11:b8:47:10:a3:81:42:05:39:2c:70:0a:a0:72:a7:
         47:e8:61:a9:6b:5c:b9:9e:8d:c5:37:0a:da:cc:3a:84:f6:59:
         54:71:59:24:40:25:3d:71:74:c2:47:13:7b:95:1d:b8:d5:bb:
         ca:97:91:3a:d0:e0:9c:cb:4b:06:49:6c:f8:00:d7:e8:ce:40:
         28:34:2c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:12:08 2026 by rpki-client