Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
File:                     PurfFFrim0gkCj-6OvvZSajxU10.mft (raw, json)
Hash identifier:          GVIj9hTsVOh6jY9KNu6lJTbKJWqiLQXnmOcxPTkQsaY=
Subject key identifier:   4A:A1:2E:DB:6F:04:91:2D:78:36:53:8D:80:B9:00:1E:5C:3E:93:01
Authority key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D
Certificate issuer:       /CN=A91F823E/serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D
Certificate serial:       03B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
Manifest number:          03AD
Signing time:             Fri 17 Apr 2026 00:36:26 +0000
Manifest this update:     Fri 17 Apr 2026 00:36:25 +0000
Manifest next update:     Fri 24 Apr 2026 00:36:25 +0000
Files and hashes:         1: PurfFFrim0gkCj-6OvvZSajxU10.crl (hash: V+guldRPhd5kBJofNdPwV1lIia/R4D4qQ0nj6cRtdYQ=)
                          2: B3481ED4D5B611ECA61EEC28C4F9AE02.roa (hash: SFrPVIEcm3Sob1UjztJCMJRsgyH7hMthtgc0D0N7bCM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl
                          rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 948 (0x3b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F823E, serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D
        Validity
            Not Before: Apr 17 00:36:25 2026 GMT
            Not After : Apr 24 00:36:25 2026 GMT
        Subject: CN=69e1808a-9623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8b:65:4f:29:ad:fb:f5:04:86:da:40:5c:79:
                    dd:95:49:40:4e:75:a7:2d:03:16:fc:1e:03:b9:6b:
                    62:5d:f5:60:6a:42:8e:6d:14:7e:0f:33:f5:4a:8b:
                    60:ff:c3:10:5e:6c:1d:10:fa:a1:a8:85:33:bc:f9:
                    a4:b5:99:7c:2d:05:58:49:74:27:5f:21:55:40:33:
                    44:6b:90:99:d6:38:b5:57:8b:56:21:5b:1f:d3:32:
                    4a:d1:6b:88:81:55:f8:39:a7:ef:72:90:b6:8e:4b:
                    86:a5:bb:66:5d:a6:e3:8f:80:17:a1:20:b4:dc:33:
                    fe:4a:de:57:97:d9:e8:46:49:4d:96:aa:80:92:18:
                    81:12:b2:20:84:01:6d:61:e2:9b:62:4c:d8:69:68:
                    32:f5:f7:b1:d4:ba:73:c1:f8:f3:6d:c2:eb:ee:24:
                    fe:5f:fd:94:34:4a:7f:31:01:a8:96:eb:e8:bb:99:
                    14:1f:9d:e3:14:6c:9e:ed:87:be:d0:15:cc:c1:89:
                    99:8a:d6:59:1a:02:73:e2:ea:92:11:13:45:21:22:
                    f6:12:16:39:9b:10:be:d7:b8:38:9d:12:0f:4c:d9:
                    69:0a:fb:bd:94:a3:ee:b7:fa:e8:20:c6:44:7d:ce:
                    71:f4:6e:a0:c2:23:3e:78:32:7c:2d:9d:7a:f4:5e:
                    48:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A1:2E:DB:6F:04:91:2D:78:36:53:8D:80:B9:00:1E:5C:3E:93:01
            X509v3 Authority Key Identifier:
                keyid:3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:e5:d7:27:db:63:53:fc:c6:35:5e:fd:67:11:e8:38:8f:19:
         58:a1:2f:42:5a:3d:72:a8:f2:25:7f:f8:ec:43:40:04:77:cb:
         31:ad:a9:a1:d9:77:0b:8d:da:0b:79:e4:c8:5a:cc:fc:68:46:
         e4:27:6a:66:b0:00:01:08:6b:5d:0b:84:98:46:c0:15:d0:03:
         95:0f:86:cd:d7:24:5b:42:ac:3a:ef:ab:01:f8:0c:53:b0:03:
         84:01:34:5d:a6:87:2f:ef:db:58:c0:53:de:eb:b7:b2:a8:62:
         9a:08:8e:71:7f:71:b1:c0:c8:d4:b5:d0:ff:e2:19:64:e7:f3:
         87:7d:9a:43:19:5f:b4:c7:02:5d:2c:50:9b:79:5a:72:99:fa:
         2f:31:3f:70:56:60:13:67:a0:3e:64:c8:a3:4c:b0:a2:5f:ea:
         63:7c:79:58:8c:6b:27:07:1e:a8:2d:11:65:a2:50:d8:54:8f:
         4d:f7:87:a3:02:e9:f6:58:4f:9d:0f:db:d3:80:bf:77:41:f1:
         cd:17:36:13:57:1b:14:d0:2e:26:92:df:3a:97:81:4c:86:b7:
         69:eb:1e:a1:21:7d:67:49:02:80:f6:35:35:1b:2a:9f:ff:7d:
         b2:e7:b0:80:ff:fd:d5:61:5f:27:b8:2d:62:2f:3e:44:fd:3a:
         6f:c6:02:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:07 2026 by rpki-client