Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
File:                     cL0eSV4lCyLieYKWlpeFotd9c38.mft (raw, json)
Hash identifier:          upbWESNE7bFrnjnsF93BiJQlgXtI8EZOo0ifUFIKS60=
Subject key identifier:   BC:51:68:A7:4D:23:AC:4C:F5:98:73:12:18:1F:E3:D6:C9:1F:87:BE
Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
Certificate issuer:       /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Certificate serial:       07F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
Manifest number:          07DD
Signing time:             Thu 16 Apr 2026 21:14:01 +0000
Manifest this update:     Thu 16 Apr 2026 21:14:01 +0000
Manifest next update:     Thu 23 Apr 2026 21:14:01 +0000
Files and hashes:         1: cL0eSV4lCyLieYKWlpeFotd9c38.crl (hash: oYlBAmvOutRgqlvGpPcPM3gstJ1UfU2cMDdnsPJVVOg=)
                          2: AEFB1B262FB111EB89A04D37C4F9AE02.roa (hash: CTWOd8KheR3keIlbrNxRArJRmdo8CaaRry2+oBpk3yU=)
                          3: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (hash: QBJiXn1vmmVOKa4Qn9zvdWt1huYz5jaSfTVbrGzUrJA=)
                          4: D8EA255C2FBC11EB8E017F5CC4F9AE02.roa (hash: f5hhJw4iBxxWOy12bw08irJ3HIRgdS2JYxiH6LKMToo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl
                          rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2034 (0x7f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE1C4, serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
        Validity
            Not Before: Apr 16 21:14:01 2026 GMT
            Not After : Apr 23 21:14:01 2026 GMT
        Subject: CN=69e15119-c694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9a:b7:ef:47:85:a1:04:ef:3f:19:de:2b:9a:
                    d2:ee:f4:19:9c:5b:e2:fe:19:70:ed:b8:c2:7d:81:
                    75:2c:0b:3f:2e:57:b1:f1:7e:47:38:8a:38:65:94:
                    2b:9a:f1:09:01:aa:ac:00:e7:a8:27:4a:20:84:0f:
                    d7:3b:52:27:4a:7b:ed:1a:f3:30:53:76:58:69:57:
                    57:a6:3d:0c:30:6f:b6:a4:f1:1c:59:a2:83:95:72:
                    04:d1:b5:57:92:49:a0:e1:59:d1:75:39:96:5f:02:
                    86:46:02:03:50:be:04:17:b4:8e:38:02:27:79:47:
                    db:da:c3:ff:1a:7a:1b:a2:f2:c3:49:1b:3e:fa:00:
                    45:13:78:22:2c:9c:1d:a6:cb:7f:09:e7:ae:20:8c:
                    69:82:8c:87:19:bc:d3:77:86:c2:d1:ad:d0:d0:c8:
                    e9:fe:f7:cc:bc:8c:90:20:6c:4d:fd:1c:b0:86:11:
                    48:78:ee:15:3a:7c:5f:d2:61:af:a0:dd:12:4c:44:
                    b7:74:8e:0a:3b:76:d3:a4:53:db:0b:bf:e9:e0:40:
                    29:a2:0b:51:1f:c2:05:96:bb:cd:f9:1b:e1:87:bf:
                    c6:9b:03:3b:be:f9:91:e4:de:af:69:2b:9c:95:b9:
                    c9:7e:30:f6:ff:fb:5c:d9:23:5e:74:7c:68:81:b6:
                    46:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:51:68:A7:4D:23:AC:4C:F5:98:73:12:18:1F:E3:D6:C9:1F:87:BE
            X509v3 Authority Key Identifier:
                keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7d:cf:25:e6:a6:7f:73:10:cc:88:c9:d7:06:3d:54:a6:1c:
         74:58:28:4d:f3:65:84:e8:c6:51:67:c8:a9:fd:6c:cf:4a:8c:
         8f:c9:49:b7:33:23:ab:58:06:fe:50:f7:13:a6:0b:ba:0d:ae:
         de:52:eb:af:03:88:f6:58:cc:5f:d9:d1:f1:d0:ed:7a:7c:8a:
         96:27:a9:e2:0a:20:4b:de:07:d0:41:1c:93:a6:98:09:e2:b0:
         88:f5:5c:a8:55:06:c8:c7:f6:dd:c7:7f:d9:85:3a:84:c5:44:
         8f:05:07:a4:a5:de:3c:c8:12:f1:9e:2e:79:59:5c:dc:1d:b3:
         d5:0e:3c:28:74:21:19:87:f4:c8:30:3c:39:db:60:32:10:9a:
         69:a4:d5:f1:65:60:d8:7e:e7:5b:09:f1:5c:ee:68:54:3d:c0:
         b7:70:75:09:1f:c1:73:2f:69:29:35:da:63:03:77:43:00:b8:
         15:14:18:23:60:92:c5:aa:6d:e2:bc:01:16:26:6d:62:e3:f0:
         cf:c5:d6:c0:03:a2:39:9b:e7:6a:50:c7:a4:27:4e:b7:0f:1c:
         ef:26:05:f8:99:a6:15:26:bb:54:f5:b6:8f:4a:6f:ff:19:17:
         65:42:ab:c1:f2:b5:7d:14:98:38:27:64:f6:4c:57:87:ce:f5:
         df:3c:55:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:35:30 2026 by rpki-client