Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
File:                     O4dpDvQFVnODtvcv3TARYM6CHys.mft (raw, json)
Hash identifier:          zqZZcJFF6CawCqddfn8We3WrhSV2s0dk0ogMvwY3us0=
Subject key identifier:   91:65:DE:B8:F7:08:B7:72:06:AC:71:05:6A:D4:C1:8B:91:DF:7F:1D
Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B
Certificate issuer:       /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
Certificate serial:       02DA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
Manifest number:          02CE
Signing time:             Fri 17 Apr 2026 01:17:02 +0000
Manifest this update:     Fri 17 Apr 2026 01:17:01 +0000
Manifest next update:     Fri 24 Apr 2026 01:17:01 +0000
Files and hashes:         1: O4dpDvQFVnODtvcv3TARYM6CHys.crl (hash: 2ycW/XmndCXIuoki77SLMARMam8jNwPUlZ9F8pcs2Rk=)
                          2: F9424C6C80FA11ED9B35954DC4F9AE02.roa (hash: kA6NvISB8IT/6NkuxuF6Q7P9ApF1p1wHgdDAw6Jwa34=)
                          3: F86A2F7680FA11ED9B35954DC4F9AE02.roa (hash: 4SMwt+gACInnRK5OGYg5pUcdCWuk0YqF9HQ/Xt+IzcY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl
                          rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730 (0x2da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
        Validity
            Not Before: Apr 17 01:17:01 2026 GMT
            Not After : Apr 24 01:17:01 2026 GMT
        Subject: CN=69e18a0e-84cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:be:bb:81:50:fd:dd:ab:e7:a4:a9:15:26:
                    05:f1:76:57:1e:50:6e:36:1e:04:48:2e:f4:de:91:
                    63:42:fa:28:5e:06:58:5e:22:8e:1c:f7:28:1c:15:
                    9a:dd:eb:71:65:61:dc:13:7e:8f:96:7c:aa:5e:1a:
                    e8:6c:72:4e:e7:2f:fb:d7:cb:a0:71:fc:ac:bd:f2:
                    50:39:ab:95:0d:97:60:8f:73:9e:39:86:fd:ae:39:
                    bc:74:41:30:ea:e5:8a:1a:e5:8e:a0:46:c5:92:c6:
                    bd:8e:98:73:a3:24:87:e0:96:75:01:9b:3d:f7:ad:
                    f1:0f:4e:02:41:f4:d1:62:81:45:89:6a:09:19:a1:
                    86:a1:ee:b4:45:19:50:d6:a4:5f:60:de:03:a3:a7:
                    42:14:b1:ff:b0:25:d2:ab:3f:17:f0:17:98:b4:33:
                    6d:52:d3:b5:19:bc:47:b3:36:69:ed:a7:d2:54:e7:
                    23:15:a6:7d:17:db:f6:26:3b:1f:a6:72:08:ad:fe:
                    be:61:bb:63:5a:ee:aa:2c:0e:76:4d:9f:fb:59:c2:
                    4b:ce:05:50:d3:bc:df:6c:89:3b:b7:4e:75:ce:30:
                    1e:53:4d:b2:97:2d:e4:09:51:44:70:f8:f2:e0:0d:
                    2d:80:b8:56:3f:cd:f3:56:a5:83:b7:19:d9:14:1c:
                    70:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:65:DE:B8:F7:08:B7:72:06:AC:71:05:6A:D4:C1:8B:91:DF:7F:1D
            X509v3 Authority Key Identifier:
                keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b5:23:79:03:6e:e9:34:7a:66:70:2d:6f:0c:a3:06:c9:da:
         9a:5e:8a:40:8f:94:78:37:29:a0:f2:cd:a1:28:92:68:1d:28:
         e0:59:77:09:05:ea:4f:49:ee:cb:7c:66:4e:dd:fe:c5:2e:2a:
         e3:fe:dd:b2:5e:e7:43:64:cc:3d:06:d0:81:5b:92:00:5e:9a:
         03:22:c6:34:f7:a5:ca:ee:0c:4b:de:cd:a2:9c:1f:04:6c:a0:
         6a:79:2c:1a:28:d0:1e:4b:da:f0:0a:de:5c:6f:80:e5:91:d9:
         91:c1:37:fb:6b:07:f4:e1:d8:4e:b0:13:06:a2:c0:0c:a3:9e:
         1c:b6:c1:3f:fd:fd:0d:73:7c:f3:2e:cf:60:9f:85:64:7f:9f:
         99:65:32:43:b4:57:91:71:3a:b9:61:c8:2a:e0:35:58:bf:e5:
         70:d3:aa:c8:b5:31:8c:6b:73:7e:69:ac:d1:15:0e:02:23:fd:
         8e:91:40:6d:47:ee:42:5e:99:b8:4f:6f:11:f9:05:1a:50:a0:
         66:71:a8:8f:f9:4f:9b:32:a0:67:5b:b2:b9:83:60:b7:ca:06:
         6c:29:89:cb:dd:1e:21:b0:69:60:26:11:84:67:a0:2f:37:43:
         20:73:a1:8d:96:7d:34:6f:e5:8b:3d:dc:8a:08:0f:5e:02:bd:
         da:f7:cf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:08:42 2026 by rpki-client