Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
File:                     9htN6lh5mctuFcVAieTbmD0BuxA.mft (raw, json)
Hash identifier:          K8z5E9oNLOEB/pTIyF/B8nDP4DmESr4IUAyAowOu1tQ=
Subject key identifier:   DC:A0:5E:AD:20:69:BF:0B:1E:25:D1:5C:46:47:EC:51:5A:5C:EE:40
Authority key identifier: F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10
Certificate issuer:       /CN=A91F7315/serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10
Certificate serial:       091D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
Manifest number:          1504
Signing time:             Thu 16 Apr 2026 18:45:40 +0000
Manifest this update:     Thu 16 Apr 2026 18:45:40 +0000
Manifest next update:     Thu 23 Apr 2026 18:45:40 +0000
Files and hashes:         1: 9htN6lh5mctuFcVAieTbmD0BuxA.crl (hash: KzYA0tltM6PkR4hnc+WY7sHZKPdbnwyW9wRJcqzKD7A=)
                          2: 341C7414CA6111EA97DD3439C4F9AE02.roa (hash: 1kffUSlltPUrAXr4qbgMKEHLahPn0f0i1hKA6TYPuXQ=)
                          3: 336BD320CA6111EA97DD3439C4F9AE02.roa (hash: WP8uvLo3dm5cFDDJiS6DGbwFfOiibsT0ay5tm2cY/KY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl
                          rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:45:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2333 (0x91d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7315, serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10
        Validity
            Not Before: Apr 16 18:45:40 2026 GMT
            Not After : Apr 23 18:45:40 2026 GMT
        Subject: CN=69e12e54-59c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:0a:f7:da:42:a3:4a:9b:51:3c:30:e9:19:
                    ab:90:fb:ec:bc:b1:e2:4b:ab:7a:12:7d:d0:3b:52:
                    78:21:29:d9:40:ff:44:bd:f0:05:89:aa:eb:57:5f:
                    28:82:e2:52:0d:17:dd:b5:6f:50:bb:9c:cf:d1:93:
                    a0:2f:d3:6f:83:bd:c7:c9:9f:42:de:34:5a:db:7d:
                    94:a0:4a:2e:fb:b4:3d:7d:aa:74:02:82:5f:f6:e1:
                    6a:d2:65:1d:5a:e1:d2:bc:0e:59:1b:12:03:dd:6c:
                    44:a4:f4:f5:76:a4:0d:4a:b2:fe:ef:e7:2c:db:2a:
                    2f:5a:a5:7a:3b:7e:d9:99:cf:06:d5:56:08:b9:0e:
                    fe:f7:a0:98:73:f2:55:3e:31:76:25:61:e5:7e:70:
                    13:c3:e7:81:7d:50:c9:ae:cf:db:cb:db:d3:9e:9f:
                    e5:ad:dd:47:35:d0:58:9a:de:f7:20:24:76:b1:bc:
                    49:f1:a5:19:fd:af:80:92:88:a4:9d:0f:02:81:8f:
                    70:96:26:03:c9:fa:67:1f:0a:da:ad:c4:d7:85:ad:
                    a1:e9:6b:62:8e:02:4c:fe:8e:45:85:f1:70:a9:80:
                    8e:57:fc:f5:ad:bd:c2:da:eb:8c:4e:da:83:c5:b0:
                    b9:e7:5d:f9:ed:2b:2e:14:20:a7:53:2c:b4:44:55:
                    10:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A0:5E:AD:20:69:BF:0B:1E:25:D1:5C:46:47:EC:51:5A:5C:EE:40
            X509v3 Authority Key Identifier:
                keyid:F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:30:cb:d4:22:f6:06:cf:01:e1:94:0a:5f:78:28:25:99:86:
         22:76:9f:6d:65:67:d5:83:1b:48:06:50:75:6d:5a:c4:e0:84:
         00:99:69:22:1d:85:e5:0c:6d:5a:fc:ea:87:9d:31:e2:6b:bf:
         43:0c:68:96:eb:a1:a5:90:f1:c3:a0:44:1e:c1:1d:dc:cc:6b:
         ce:d6:2e:be:56:c9:59:84:19:e8:57:d1:20:2a:25:1f:f7:b5:
         94:74:80:90:39:af:c8:48:77:15:e8:7a:4d:55:c1:1f:ef:3e:
         cd:c8:60:20:cc:9d:4b:f7:9b:10:21:24:75:db:4e:c2:be:bd:
         3c:6b:8a:e2:64:4f:7c:e6:09:7b:6c:e5:5f:9f:15:91:d9:e7:
         8b:79:22:b5:eb:4b:87:61:e4:36:3a:14:f3:94:ed:c6:e3:99:
         3a:56:73:21:5f:c8:78:3b:28:c3:d4:c1:3b:4e:36:fd:ea:4e:
         f2:d6:c7:17:6e:6a:4f:ad:9a:a0:e6:45:f0:8b:22:95:fa:f1:
         ca:22:17:16:1f:cc:0c:8b:71:6d:7c:36:66:3f:cf:13:26:57:
         02:9b:72:0c:18:28:83:a2:56:c1:fe:df:ea:cd:98:1a:ab:70:
         5f:a7:85:dc:60:92:2e:dc:f5:16:c8:27:57:3e:69:88:82:9e:
         30:f4:87:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:50:45 2026 by rpki-client