Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
File:                     rea1d9VLWrCQBc5hO7E2SGUuams.mft (raw, json)
Hash identifier:          oBrGxNyurl8H/VomGVWMeo/4qkEAPkyaW/ChAsJjVbk=
Subject key identifier:   F2:33:34:1C:64:12:59:7E:EC:D0:75:66:C5:F6:D9:08:56:7D:FB:C3
Authority key identifier: AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B
Certificate issuer:       /CN=A91F4553/serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
Certificate serial:       0601
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
Manifest number:          05FB
Signing time:             Thu 16 Apr 2026 22:49:08 +0000
Manifest this update:     Thu 16 Apr 2026 22:49:08 +0000
Manifest next update:     Thu 23 Apr 2026 22:49:08 +0000
Files and hashes:         1: rea1d9VLWrCQBc5hO7E2SGUuams.crl (hash: A1yt99k+MlD37AWc8wuoNyQlgqzn2pmswEZlhO2LGvA=)
                          2: A1491F7CEB7811EB9134133BC4F9AE02.roa (hash: LMpJMuYVTyY2sVa9uHYEonkQ7494tf0v3yx1gmrO5vY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl
                          rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1537 (0x601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4553, serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
        Validity
            Not Before: Apr 16 22:49:08 2026 GMT
            Not After : Apr 23 22:49:08 2026 GMT
        Subject: CN=69e16764-abce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5b:49:6f:ef:8b:30:93:5d:b3:f8:e0:47:23:
                    bd:02:ce:cc:b7:cd:60:1a:04:70:8e:34:05:d3:40:
                    4b:14:2e:64:af:78:fe:2d:46:ca:be:40:ca:c7:a7:
                    92:a3:2c:fe:c5:63:0b:c2:ab:c9:5b:95:0d:85:fa:
                    30:d0:e7:d9:d0:1f:56:ac:de:cb:8d:9c:e5:ef:24:
                    23:a4:5a:4d:28:b1:71:f9:b4:f2:02:48:f3:1b:7a:
                    6f:f2:d9:18:ed:f8:52:85:f5:08:ee:8b:04:7b:64:
                    95:e1:24:7a:cf:8b:93:c7:bc:17:da:e4:00:13:b9:
                    9a:09:35:d3:16:4a:3e:d4:5b:9d:74:45:84:c5:45:
                    cd:f7:f2:1f:54:be:88:7d:c5:bc:17:ae:3f:9e:7f:
                    b3:f6:34:ec:5e:fc:bd:c3:dc:07:92:ae:f7:3d:0f:
                    d4:0c:24:6d:38:00:bf:e1:d7:6f:9c:0b:19:8d:a6:
                    f1:86:16:da:24:36:3b:b9:86:74:ba:79:2e:15:13:
                    dd:31:51:df:cb:f1:20:bc:fa:97:74:7a:61:2a:47:
                    4c:e5:2b:90:12:76:cd:0c:00:2a:6c:ac:ea:47:5c:
                    a0:da:0d:82:99:df:ec:e6:2f:3c:c7:ad:7f:17:b8:
                    04:1e:07:8d:3a:46:70:29:0b:76:c8:6c:66:4c:63:
                    79:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:33:34:1C:64:12:59:7E:EC:D0:75:66:C5:F6:D9:08:56:7D:FB:C3
            X509v3 Authority Key Identifier:
                keyid:AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:20:a4:ae:2e:1c:3d:46:cc:c8:82:a8:bd:fe:a5:ba:3f:13:
         bf:e7:a7:d5:e2:b4:5e:05:de:b4:9e:28:14:38:3c:c5:cd:2b:
         90:76:57:8c:11:e7:da:80:ce:30:97:9e:82:c0:6a:17:b3:f5:
         0f:a3:2f:d8:52:1a:43:9c:2a:56:d6:7a:e2:2f:68:f6:7a:82:
         5b:78:f6:99:2e:e9:4e:6a:55:c5:93:a5:df:06:97:88:e1:9d:
         c0:08:61:47:01:d1:cb:8e:36:a8:ff:a6:3d:a2:35:f8:48:33:
         77:ab:10:97:94:a5:30:22:ed:c3:e7:0f:3c:b6:42:28:71:b4:
         b0:b2:6a:cb:e0:a7:95:c5:b4:7b:0e:1f:0e:b3:65:d3:a1:0b:
         eb:b7:3d:96:00:da:0c:2e:85:72:27:cd:1e:ab:2c:4f:0c:89:
         a6:09:b2:06:c6:c4:04:7b:e3:df:d1:c5:9e:8b:9c:15:73:49:
         57:7f:b7:ba:67:be:e8:8a:29:ec:1d:bc:cb:4d:50:37:c7:bb:
         a1:bc:1c:ef:68:28:36:52:4e:f3:26:e4:68:d4:14:a0:a9:6e:
         d7:07:b9:e7:3d:13:ad:85:c1:2b:e9:3e:ef:cf:bb:c9:4e:7a:
         49:00:b2:e7:38:50:7b:84:c9:9d:35:da:a0:de:5b:93:90:e9:
         4a:fb:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:26 2026 by rpki-client