Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
File:                     hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft (raw, json)
Hash identifier:          uk1Bo/ikcU0GwJjmmv/rmF1ilHN2WjJgi7wZ3czNC2k=
Subject key identifier:   A3:98:B1:9C:E7:88:36:55:97:E3:6A:D9:2B:C8:96:9D:72:B5:E4:E6
Authority key identifier: 84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31
Certificate issuer:       /CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
Manifest number:          0161
Signing time:             Sun 19 Apr 2026 04:31:08 +0000
Manifest this update:     Sun 19 Apr 2026 04:31:08 +0000
Manifest next update:     Sun 26 Apr 2026 04:31:08 +0000
Files and hashes:         1: hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl (hash: AxUHhqoV/6y1KNK8VBL1hgu+KkBHSOgYerOZAM7w/P8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl
                          rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4091, serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931
        Validity
            Not Before: Apr 19 04:31:08 2026 GMT
            Not After : Apr 26 04:31:08 2026 GMT
        Subject: CN=69e45a8c-1164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e2:44:e8:90:ce:0d:0e:72:8d:d9:af:e7:b8:
                    2f:ef:b3:b4:31:4f:ef:5f:e7:da:51:62:59:c5:da:
                    55:43:dd:0e:37:7d:76:b6:1f:60:57:a7:2f:fa:8c:
                    da:db:29:bd:e0:92:55:5b:5b:19:68:20:31:ad:20:
                    a0:7b:40:0d:92:ac:eb:d5:78:0d:88:97:3b:f0:04:
                    f8:af:3f:86:03:ff:ed:17:ee:15:f6:ae:2d:11:41:
                    a5:20:e2:51:de:05:c2:af:88:5f:2d:7a:23:b0:6f:
                    89:48:29:fb:b6:1f:c8:b6:ea:61:35:43:4c:f8:87:
                    cf:3a:08:dd:ad:58:46:7e:8e:78:1d:50:37:ce:12:
                    aa:5d:f2:f1:a4:2e:a8:69:5d:77:6c:20:03:b5:a3:
                    3a:65:dc:96:83:30:ad:2b:69:de:b9:42:84:5a:05:
                    4a:62:6f:37:5f:cc:4d:0e:80:8a:75:45:c4:f5:5b:
                    9e:22:f7:20:91:fb:a4:fd:09:66:3e:6b:3e:b0:5e:
                    e1:d3:13:ff:c5:b1:ff:d4:e6:f5:7c:7f:d8:d3:ed:
                    69:86:31:75:06:55:9f:23:5e:e0:74:2c:97:9f:bc:
                    40:d3:83:46:82:d4:2f:86:73:b1:3e:6b:2e:de:67:
                    55:9b:45:67:37:0f:d3:3c:a8:42:63:3c:ad:f1:bd:
                    8d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:98:B1:9C:E7:88:36:55:97:E3:6A:D9:2B:C8:96:9D:72:B5:E4:E6
            X509v3 Authority Key Identifier:
                keyid:84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ea:d1:06:c8:23:b8:e3:4e:26:72:62:ca:4d:d2:5a:d2:e8:
         4e:fe:39:72:97:8f:bb:8f:ea:a2:71:11:66:83:9d:12:83:1d:
         ad:1c:f8:59:d5:71:6c:98:b6:06:39:c3:4e:9b:37:cd:ba:d5:
         ca:13:19:15:a8:3e:ac:66:5b:6a:57:8b:c0:9a:36:2f:35:1b:
         82:5e:91:f8:36:7f:7a:40:cf:d1:21:a0:e1:cb:f3:d1:20:0b:
         71:1d:9b:ff:1f:05:37:a3:16:93:bd:a5:0d:79:64:d2:47:e1:
         16:80:5f:77:0e:02:d6:f8:64:2e:4f:3a:96:42:fb:6a:fb:71:
         5e:20:a3:8d:ab:1b:f8:9e:69:77:0b:6d:b6:48:d9:7b:c2:c4:
         13:f3:a7:b4:3c:01:15:12:32:e1:06:12:10:fc:32:77:a6:59:
         18:40:d4:38:fb:19:d3:85:3c:44:8c:3e:a7:7c:0b:b0:f1:8c:
         ac:b0:ef:36:66:22:b3:35:0e:90:e0:d0:20:75:a8:94:1d:ad:
         06:97:b9:de:61:dc:88:1a:5f:88:e2:af:1e:b4:a8:ab:39:99:
         ae:6c:f8:86:99:a3:50:60:c8:2c:52:62:50:6a:9f:47:f9:b0:
         72:13:13:89:f7:bc:66:95:c6:ba:a5:16:aa:02:6b:1e:48:ea:
         7a:5f:c1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:58 2026 by rpki-client