Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft
File:                     o0Zki0rfT8W0d8faLPBbFoQ3210.mft (raw, json)
Hash identifier:          INbs35NA7UISgvoZNrJxfE5yyAt6i5eQiLBOhNbOHjc=
Subject key identifier:   86:93:EC:50:E0:F5:DE:88:13:E6:63:15:8A:FB:85:1C:EF:04:21:63
Authority key identifier: A3:46:64:8B:4A:DF:4F:C5:B4:77:C7:DA:2C:F0:5B:16:84:37:DB:5D
Certificate issuer:       /CN=A91F78E2/serialNumber=A346648B4ADF4FC5B477C7DA2CF05B168437DB5D
Certificate serial:       2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft
Manifest number:          27
Signing time:             Wed 15 Apr 2026 08:24:58 +0000
Manifest this update:     Wed 15 Apr 2026 08:24:58 +0000
Manifest next update:     Wed 22 Apr 2026 08:24:58 +0000
Files and hashes:         1: o0Zki0rfT8W0d8faLPBbFoQ3210.crl (hash: ND7jSleYY8iaP83K/7HrvmjnQNDLgQ0VNNOQK9wSSNY=)
                          2: 82DA388A0F7911F1809984312C3D8C67.roa (hash: DwV5RyDcCjRsx1pQK6SE6C7k8xmybS0fqEBWiL5+TBM=)
                          3: 836B482A0F7911F1809984312C3D8C67.roa (hash: TwW5dd+M0PGrRvNWJtYRZ8DHnqNKe/MUb3Dt0nluACA=)
                          4: 825697D20F7911F1809984312C3D8C67.roa (hash: zwLj1p60QJZhGqM9OFrvvmZ63ABgfQGgbVPoX25wiFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.crl
                          rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 08:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F78E2, serialNumber=A346648B4ADF4FC5B477C7DA2CF05B168437DB5D
        Validity
            Not Before: Apr 15 08:24:58 2026 GMT
            Not After : Apr 22 08:24:58 2026 GMT
        Subject: CN=69df4b5a-b744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:10:0d:24:86:78:cb:ab:00:6e:e6:4a:69:26:
                    fe:85:a1:78:b8:40:44:ff:8a:d8:63:17:d3:3f:08:
                    8f:b8:94:d6:ba:ed:a5:0c:a7:0d:a1:4f:ab:bd:65:
                    c2:47:b3:74:db:7b:37:24:5c:37:b3:e7:71:8c:6b:
                    ef:92:db:88:04:3a:fa:51:b4:2f:d0:9d:9e:58:40:
                    d4:86:48:1c:fe:06:01:62:05:8b:9a:93:68:0b:04:
                    be:5c:e4:ec:58:46:aa:91:3c:ca:1d:f0:16:2d:69:
                    cc:01:18:b9:a1:f3:6f:47:b7:a3:7f:c0:19:9a:4d:
                    63:4f:d9:5a:17:2a:a5:04:f1:02:79:7a:e0:d2:48:
                    db:3b:ff:f1:1e:43:24:07:fb:22:07:75:75:e8:93:
                    97:f9:d7:db:eb:7c:c7:1a:4e:1b:74:5f:5c:67:a2:
                    b6:1a:1e:1f:f1:59:57:a2:43:d2:a9:36:4b:e9:83:
                    6b:2d:d2:67:06:4f:1f:62:28:6b:f3:62:2e:05:3c:
                    3d:fd:f3:75:d8:d9:f6:70:d9:c2:29:ff:8d:59:4a:
                    13:56:a5:ab:e5:1a:3d:53:d9:ce:66:1b:74:09:8f:
                    84:13:19:8a:d5:ad:d6:65:20:c3:b0:f5:2c:30:8b:
                    f1:89:63:cd:63:50:5c:05:cf:a4:d5:80:9c:7f:49:
                    41:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:93:EC:50:E0:F5:DE:88:13:E6:63:15:8A:FB:85:1C:EF:04:21:63
            X509v3 Authority Key Identifier:
                keyid:A3:46:64:8B:4A:DF:4F:C5:B4:77:C7:DA:2C:F0:5B:16:84:37:DB:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ed:87:2d:a8:54:5a:e6:2c:1f:2f:32:72:fb:93:b4:92:17:
         50:e0:0d:29:07:db:ff:b3:ad:57:3b:b9:7b:83:ae:58:06:98:
         bc:93:72:d8:7d:84:92:df:5f:ce:b9:92:79:f9:af:93:f6:69:
         6d:f8:d9:c8:d6:9b:28:2f:df:87:42:10:90:e3:01:22:ab:88:
         c8:4b:c8:13:d2:7a:19:48:c1:6b:94:95:1c:2e:d0:b0:79:9c:
         d5:cc:7a:ec:fa:0c:96:d9:71:25:9e:1d:08:27:24:36:4f:b6:
         1e:f4:c6:7c:47:e9:9d:17:42:8e:f4:90:64:e0:dc:20:57:47:
         3b:d8:69:c3:f0:22:4e:5d:79:6a:f3:77:2d:fc:72:d3:8a:a8:
         26:bb:f9:f6:d3:79:56:f6:7b:6e:22:e4:2f:1d:33:f6:4e:e4:
         81:e7:c4:e6:8f:2c:70:00:86:a2:d4:eb:82:1f:88:6e:ff:1d:
         04:30:46:da:a1:d4:4e:c5:f8:31:7e:29:84:e8:48:ff:b0:f7:
         1b:f4:25:2b:e9:2c:c2:b8:ae:14:c7:39:69:b2:9a:ee:f2:6c:
         d8:25:73:03:3b:f5:35:54:d4:26:fa:12:1e:27:cf:7f:d4:3e:
         70:1f:17:b4:ce:a5:72:75:9c:f6:92:fa:13:47:fa:09:56:17:
         cd:f7:65:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:54 2026 by rpki-client