Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft
File:                     SPEydjLX2-8zHA4kie7j9b77hFI.mft (raw, json)
Hash identifier:          twnnfjRKzsSH7iPuQXlrJxbZXaUJbDZFSTr8BBpDo88=
Subject key identifier:   80:54:12:ED:9D:40:0E:F2:93:7D:48:47:90:61:C9:87:ED:CB:9C:A5
Authority key identifier: 48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52
Certificate issuer:       /CN=A91F60A7/serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452
Certificate serial:       0689
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft
Manifest number:          067B
Signing time:             Thu 16 Apr 2026 22:28:40 +0000
Manifest this update:     Thu 16 Apr 2026 22:28:40 +0000
Manifest next update:     Thu 23 Apr 2026 22:28:40 +0000
Files and hashes:         1: SPEydjLX2-8zHA4kie7j9b77hFI.crl (hash: m5WMEN4JxYR104gUm9l3rhDvtDZBC6+XQE52rCgxFIs=)
                          2: 2E809260BFC511EBAD79ED25C4F9AE02.roa (hash: FPfmVwpTYMNQ4U5n1Dcya5Lt6CLsXP0IYEvObMjwM64=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl
                          rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1673 (0x689)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F60A7, serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452
        Validity
            Not Before: Apr 16 22:28:40 2026 GMT
            Not After : Apr 23 22:28:40 2026 GMT
        Subject: CN=69e16298-4c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:74:55:56:37:fb:24:43:ad:d6:ff:9d:11:f8:
                    93:d8:46:34:d3:b6:35:a9:c7:3a:1d:f5:10:6a:9a:
                    16:61:b4:0f:91:53:6d:a1:58:21:91:f7:2c:b1:6a:
                    a7:3e:22:fa:f1:c9:83:33:90:64:cf:64:28:59:c4:
                    c0:cf:38:d4:a0:5e:79:ba:bd:12:2d:3f:4e:27:20:
                    f4:76:6c:71:8b:cb:54:ba:f0:88:74:10:70:c1:07:
                    5e:5f:34:f9:c0:53:b1:fb:d3:bc:9f:5b:8a:d9:89:
                    b9:4a:b3:19:4d:2c:ff:0e:4a:ef:8e:f7:8f:95:70:
                    18:81:1d:54:88:55:7c:37:78:20:7e:d3:41:cf:5e:
                    ff:bb:07:ca:ab:99:b3:bb:12:60:66:4f:7b:8d:ec:
                    4f:de:8c:b0:ae:61:d9:76:f8:f5:92:40:2b:be:d5:
                    a8:78:70:e7:56:43:16:26:ac:03:6d:81:91:f2:4c:
                    96:92:2b:b2:49:62:f6:ec:f1:51:0d:7d:7f:a1:a1:
                    cc:d1:6f:51:ed:33:e9:bb:52:96:93:82:c1:e6:44:
                    34:f7:47:c0:8e:f8:b3:2e:1f:8b:19:62:36:ba:dc:
                    4c:aa:af:b7:22:be:d4:6b:ac:1b:9d:93:98:43:da:
                    e1:52:0b:ad:88:77:bc:89:6a:5f:98:0c:27:50:f3:
                    e0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:54:12:ED:9D:40:0E:F2:93:7D:48:47:90:61:C9:87:ED:CB:9C:A5
            X509v3 Authority Key Identifier:
                keyid:48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d4:c1:b2:14:18:d5:d1:41:d2:1d:dd:71:3c:9f:af:7f:58:
         cd:df:90:65:70:2b:dd:ee:3e:66:82:19:aa:18:dc:1a:c4:b3:
         20:dc:cc:3b:38:8d:09:74:55:8f:20:17:48:e6:fc:0d:ed:36:
         a2:40:87:6e:c9:8e:ec:78:67:dc:8b:c6:5a:15:62:62:f0:b8:
         aa:d0:c2:5c:97:8d:7d:e5:1d:33:be:82:4c:a7:67:d1:f2:9f:
         bb:7c:ca:ad:88:3f:2a:e1:c6:20:68:39:ce:8b:5a:98:41:85:
         fe:46:62:b8:fe:f9:66:ec:b7:43:64:13:b9:22:c6:68:7c:18:
         17:9c:99:97:69:93:7c:79:e6:ae:a4:f0:e8:e4:28:97:7a:86:
         59:5f:1c:d1:87:60:1a:fe:58:11:34:15:b1:4f:af:18:6b:52:
         eb:79:47:d8:51:79:33:11:c4:9b:65:6d:12:34:2d:c8:25:e5:
         48:fa:67:af:57:db:5e:be:b3:c7:e8:f5:64:f3:f0:c8:11:e0:
         eb:f0:fe:c4:0e:fb:0b:23:bd:9d:b2:63:f6:93:f6:d9:d7:53:
         c8:36:35:5b:5e:75:2c:e9:5a:3a:25:0b:f4:77:58:14:bb:33:
         61:09:e7:ad:71:97:51:ca:30:ab:6a:3e:c5:33:4b:ff:d6:a2:
         10:4c:98:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:35:22 2026 by rpki-client