Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
File:                     CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft (raw, json)
Hash identifier:          eAe+EPzSeuhY4RMiTfWI2Vut5pRXgiHWbYsCgFy/HrY=
Subject key identifier:   0E:DB:EC:A0:2A:16:AF:EF:D3:4F:0F:CE:06:E0:C3:72:4B:8B:B1:13
Authority key identifier: 09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00
Certificate issuer:       /CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00
Certificate serial:       020C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
Manifest number:          0205
Signing time:             Fri 17 Apr 2026 02:48:43 +0000
Manifest this update:     Fri 17 Apr 2026 02:48:43 +0000
Manifest next update:     Fri 24 Apr 2026 02:48:43 +0000
Files and hashes:         1: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl (hash: BLxDvS83fCyi4WlCLKTHd2pr3MGquwgQ55qS2U/za64=)
                          2: E0A69DBC2AB311EE9CA5E515C4F9AE02.roa (hash: 7Bxn3wZA5E3LlFzXPZWxpmh9knM5LDb9n3/rau33dLY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl
                          rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F05B5, serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00
        Validity
            Not Before: Apr 17 02:48:43 2026 GMT
            Not After : Apr 24 02:48:43 2026 GMT
        Subject: CN=69e19f8b-fe89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:86:f2:7f:2e:c4:68:27:80:c2:df:fb:53:e8:
                    4c:16:a9:88:77:c1:03:f4:47:d6:e1:58:a6:87:af:
                    bc:7f:35:88:1f:46:ff:57:9c:7f:cc:c6:d8:d4:67:
                    db:2b:f6:b3:5c:82:d6:36:af:a6:f2:31:11:f9:a0:
                    a9:7d:8d:ee:38:c3:2f:59:65:5a:e8:6c:56:42:88:
                    69:67:b3:e1:bb:c7:b9:a3:e7:41:dc:70:4b:a1:b5:
                    b7:c2:5e:9d:f6:6f:26:9f:8e:12:31:8c:54:12:7e:
                    29:b3:e1:d0:f7:a7:b1:31:7b:2e:3d:4e:f5:04:fb:
                    b9:fd:f8:bf:b8:81:8b:90:81:0e:be:a0:db:d4:fd:
                    7d:41:f2:94:0b:82:65:79:8d:2f:a5:41:d4:7f:47:
                    70:e0:d1:46:d3:eb:5b:7b:d7:3f:2f:a9:80:6c:17:
                    6d:1a:4c:fc:d8:75:d9:36:97:2e:dd:f2:e6:cd:13:
                    ef:5b:59:a3:a3:63:3c:8e:29:9a:a1:87:9e:b9:fd:
                    4d:6e:2d:7a:00:91:75:57:8b:c9:bb:17:bf:a2:1d:
                    75:32:bc:d7:c7:58:ef:58:42:f7:89:81:28:ee:2f:
                    4c:83:98:a4:d3:e3:da:c9:1c:a3:0e:49:65:ee:78:
                    be:1c:ad:e1:02:65:ce:54:f0:17:ff:1a:e5:a5:3e:
                    14:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DB:EC:A0:2A:16:AF:EF:D3:4F:0F:CE:06:E0:C3:72:4B:8B:B1:13
            X509v3 Authority Key Identifier:
                keyid:09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:7d:27:07:12:85:88:7c:26:31:44:39:33:5a:ca:44:18:66:
         a2:75:d7:97:79:64:c1:ae:32:65:62:86:81:b2:0d:85:c9:f5:
         bc:e6:c8:bb:2c:aa:bd:c2:48:6f:89:98:f9:07:63:88:b9:20:
         af:eb:aa:97:2a:aa:41:f3:28:cd:c2:d4:18:43:93:38:2f:bc:
         10:8a:f6:90:89:41:88:f3:c8:ac:c8:a2:3f:98:d1:7a:39:ac:
         34:d1:28:8f:15:48:fa:79:42:33:e2:c5:5a:2c:dd:9c:0e:3b:
         f1:e3:a2:53:fc:e4:1d:3e:2c:7e:24:5e:4f:19:24:91:ab:c5:
         8d:5a:a1:ba:0f:99:50:24:03:7d:03:8d:60:e9:e7:3f:08:78:
         d7:79:e0:0d:17:62:71:40:56:fe:d0:33:50:b7:92:60:c2:28:
         a9:02:e5:8e:73:d7:98:c0:e3:3b:be:87:56:4c:c7:36:56:67:
         d1:cc:65:1b:7a:3e:a9:60:fb:83:21:f2:d9:bf:fa:0a:0e:0a:
         27:b5:41:35:fd:b5:87:8c:8d:89:25:9a:e4:fc:78:47:dc:41:
         3a:c0:47:9a:39:7b:02:84:f3:69:e9:66:91:42:29:2c:45:6c:
         90:a8:8f:bf:cb:35:66:54:98:00:3e:a0:e5:23:6e:01:e0:7a:
         06:c2:bf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:26:18 2026 by rpki-client