Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
File:                     Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft (raw, json)
Hash identifier:          JJgmUZlrtkeOZ+HX0y6ANQciJ1qdXQHkJM6Vftotk1M=
Subject key identifier:   31:74:C7:4A:EB:42:CC:E6:CA:7A:41:E0:EC:C2:FC:5F:58:0B:82:86
Authority key identifier: 22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A
Certificate issuer:       /CN=A91F83DC/serialNumber=224E668F405601CADC3391383FCA96DF9468D95A
Certificate serial:       0169
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
Manifest number:          0161
Signing time:             Fri 17 Apr 2026 04:39:31 +0000
Manifest this update:     Fri 17 Apr 2026 04:39:30 +0000
Manifest next update:     Fri 24 Apr 2026 04:39:30 +0000
Files and hashes:         1: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl (hash: sgLfqVxR8AC2aAYRz8KcRYdMe+ThaGoJ64YdyV38AVk=)
                          2: 097951DC271E11EFA1884C2EC4F9AE02.roa (hash: wfWPCJF64COMQ4+GFRDWNSHHIcvg9J+oSNDdFL1r5Eg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl
                          rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F83DC, serialNumber=224E668F405601CADC3391383FCA96DF9468D95A
        Validity
            Not Before: Apr 17 04:39:30 2026 GMT
            Not After : Apr 24 04:39:30 2026 GMT
        Subject: CN=69e1b983-dbe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:1a:2e:ee:7e:52:a6:ac:5d:7d:84:ae:41:
                    d0:fb:d6:7a:3c:15:7c:fe:70:2c:52:a4:2a:73:76:
                    bb:b6:e6:17:43:a6:dd:67:32:b8:31:9e:6b:7f:01:
                    a9:7a:b1:ba:00:86:a5:a0:b4:18:b3:1d:7c:1e:76:
                    1f:03:2d:dd:28:d2:e7:74:19:48:39:94:01:cc:c0:
                    4b:c1:0a:6d:4d:64:4e:3a:e9:8b:ad:ea:87:fd:35:
                    eb:3d:88:35:e4:17:46:78:e1:70:34:c5:44:35:94:
                    91:21:01:d2:14:55:dd:95:fc:4e:85:b7:7d:f4:d4:
                    a3:cd:b6:3f:ae:9b:5e:1a:a0:08:9e:4d:de:6b:a1:
                    f7:95:3b:f5:1d:82:c8:a6:eb:a6:d6:c3:68:da:70:
                    d0:bf:fd:2e:a7:8a:ba:4e:48:91:57:be:ac:22:06:
                    37:1a:35:f8:a9:e9:61:24:97:72:f7:23:23:dc:96:
                    fb:e0:46:39:d1:98:ab:dd:cb:97:04:b5:c9:ed:aa:
                    9f:45:7d:8d:a0:85:86:df:ea:a4:c3:80:d1:6c:4f:
                    1f:de:34:46:0d:ca:2a:55:f1:a0:6c:d5:d8:fc:d7:
                    4a:48:18:c4:9e:ae:ad:d6:c6:c7:26:a1:aa:0e:d1:
                    6d:b6:b7:83:16:a4:01:17:92:1c:bb:16:11:7b:ac:
                    4a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:74:C7:4A:EB:42:CC:E6:CA:7A:41:E0:EC:C2:FC:5F:58:0B:82:86
            X509v3 Authority Key Identifier:
                keyid:22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:98:98:bb:31:be:06:78:92:cf:28:f8:e2:7f:14:28:ba:b0:
         20:b5:73:41:91:a4:1e:d4:3f:3e:27:59:27:08:de:ed:54:a8:
         f8:a9:25:82:3c:6f:21:4f:20:2b:0f:46:64:0b:98:3d:da:73:
         29:4c:24:6b:36:74:ec:b4:44:8c:04:8a:bf:d2:cb:99:96:6e:
         2c:01:97:d2:3a:58:38:3b:46:a2:33:d1:7a:11:e9:9b:cf:e0:
         9c:4e:5d:af:98:e0:28:fb:25:6b:81:fc:27:b5:d0:5a:f8:cd:
         0d:b9:4f:b5:ea:78:6a:09:4a:58:6f:a8:ac:f3:80:b0:e6:72:
         03:0f:aa:8e:27:cd:93:a8:78:2b:6b:a1:1d:a5:7b:a4:5f:74:
         73:ea:85:70:d8:9f:53:fb:3a:4b:1c:f4:e9:0f:a3:f3:2c:2b:
         37:52:4f:96:09:58:72:51:21:12:be:a1:2f:ca:22:b3:90:12:
         49:4f:14:02:fe:2b:b1:a4:67:fb:41:6e:3d:51:13:75:10:2f:
         27:04:b1:e8:df:8e:3f:c2:1d:97:36:71:eb:ec:30:99:57:79:
         c2:32:fc:48:e5:a7:2b:c0:a4:dc:99:aa:23:87:47:94:62:f3:
         94:52:ae:40:d1:13:0b:35:31:3f:00:5b:eb:ee:2b:ac:f2:56:
         e5:16:6f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:34:26 2026 by rpki-client