Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
File:                     Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft (raw, json)
Hash identifier:          KViGFCOAoQ0BVbaBX4+RLqpYj8tY6UZ8UAkfd9dKezk=
Subject key identifier:   A1:06:C7:07:68:0C:F4:48:30:C7:12:5F:A5:D6:01:D8:92:D8:FF:3D
Authority key identifier: 52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B
Certificate issuer:       /CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
Certificate serial:       0C5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
Manifest number:          0C56
Signing time:             Thu 16 Apr 2026 18:37:14 +0000
Manifest this update:     Thu 16 Apr 2026 18:37:14 +0000
Manifest next update:     Thu 23 Apr 2026 18:37:14 +0000
Files and hashes:         1: Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl (hash: vteOZ0yqB6mERvr02RWsOqQtxEskMqiXb5qoeWCwssk=)
                          2: C7F8C83C217311EA93A29F82C4F9AE02.roa (hash: zVKPBOvgf5ZBPV/BL1nd0Q/b/L3Ds0nzM2EgbZq2Spo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl
                          rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3167 (0xc5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9C95, serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
        Validity
            Not Before: Apr 16 18:37:14 2026 GMT
            Not After : Apr 23 18:37:14 2026 GMT
        Subject: CN=69e12c5a-ffcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:04:b9:49:59:d1:73:31:c9:53:13:3f:34:
                    9c:aa:98:c4:17:59:26:6e:25:a4:5e:ee:97:d6:5c:
                    dc:48:8e:96:98:02:ed:a8:d4:61:f7:4e:80:67:22:
                    23:46:10:b4:ce:3d:ce:cd:5f:32:f3:a2:f1:86:86:
                    80:87:2c:25:52:42:96:f2:40:e5:54:df:24:5a:58:
                    29:54:69:44:4d:32:89:43:90:7a:fc:4c:d2:d2:b6:
                    08:59:d6:40:10:75:ae:ea:24:f6:a0:36:1f:8e:a0:
                    9b:e4:89:e5:cd:96:58:6a:e0:c7:34:21:19:e1:7d:
                    87:db:84:8f:c4:4a:fa:b4:fe:29:2b:31:4d:8c:71:
                    6d:70:13:c7:12:b9:3b:40:65:ea:0a:47:80:fa:26:
                    e0:0a:71:e4:c3:b5:90:77:b3:29:bd:76:f9:67:5d:
                    77:5f:47:93:eb:ce:3d:ac:d7:6b:09:76:37:c2:62:
                    ed:0d:55:3e:19:ba:f4:b6:38:53:8c:c9:18:f6:96:
                    27:36:df:cd:46:39:f6:cb:a9:91:65:84:8e:bb:c0:
                    28:1a:76:c9:ad:2b:de:ef:f1:aa:87:fa:38:35:41:
                    bb:fb:6e:e1:06:d1:42:f6:f7:51:35:ca:88:9d:37:
                    b9:a0:ae:c4:a6:88:76:f0:9d:b1:1d:e2:30:48:00:
                    c1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:06:C7:07:68:0C:F4:48:30:C7:12:5F:A5:D6:01:D8:92:D8:FF:3D
            X509v3 Authority Key Identifier:
                keyid:52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:03:8a:a7:c8:2e:9e:07:7b:31:ab:cf:4b:72:c2:b5:0f:d7:
         90:e1:bc:4c:a4:79:71:33:33:e7:10:93:76:a8:b3:04:de:5b:
         5e:a0:86:84:2f:64:68:84:05:d2:3f:cd:43:cd:d3:6b:b6:40:
         b5:da:9f:a0:4d:56:bd:b4:69:20:e5:ef:1f:2b:99:af:9b:d1:
         07:3c:56:e4:cf:b9:5b:cf:6a:86:54:34:13:d2:29:2a:23:f1:
         29:d7:83:42:a7:2d:23:d7:a2:c8:8d:5b:c7:a9:92:2c:7c:1e:
         80:5d:44:ba:58:fb:ff:c9:84:e0:11:78:e8:fb:02:c3:8b:15:
         15:b9:fc:a0:10:73:d3:67:51:ec:64:af:2b:98:02:59:fb:42:
         b4:11:c7:31:28:37:5c:6d:94:35:70:fe:ce:17:c4:80:fa:cc:
         ef:4a:ce:13:a7:a7:38:f4:37:2d:32:c6:96:48:14:3d:73:11:
         6e:51:f9:99:e0:df:fb:14:3a:08:5f:90:56:85:38:8c:27:4d:
         05:8b:92:e6:20:98:bd:da:35:ca:ab:c6:f0:9f:a0:84:bf:6f:
         34:01:db:ee:43:35:fe:98:44:85:b9:9d:cd:4f:34:be:3e:71:
         41:42:da:18:76:1f:3d:3d:82:53:a5:fe:c2:21:8d:20:3f:2a:
         ef:f7:40:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:06:38 2026 by rpki-client