Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
File:                     1bScAI9ih18VJth200lAoJsOnW0.mft (raw, json)
Hash identifier:          2ylpIugHlts9TGakqAY0CR/zejDEc90yve9yExVb8KE=
Subject key identifier:   CB:31:36:4C:59:A1:87:97:39:56:8F:79:4D:C7:0E:49:68:C0:48:E1
Authority key identifier: D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D
Certificate issuer:       /CN=A91FB434/serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
Certificate serial:       15FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
Manifest number:          15E3
Signing time:             Thu 16 Apr 2026 16:40:11 +0000
Manifest this update:     Thu 16 Apr 2026 16:40:10 +0000
Manifest next update:     Thu 23 Apr 2026 16:40:10 +0000
Files and hashes:         1: 1bScAI9ih18VJth200lAoJsOnW0.crl (hash: vadIQHARAbGxNTIGIladpJeyDJB4gLmBsC8/bc+CbWE=)
                          2: EC796D6C42D411E88EC29742C4F9AE02.roa (hash: /XKpZWxHQtpMnU+ZHwwN48hOrY+K7y+jnl3ND5plgMo=)
                          3: EB843B92329A11EE89CD8544C4F9AE02.roa (hash: CLUWcZt+49NeH6K62G6A+1bRGb2EpGeJVNtijAJKCTI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl
                          rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5627 (0x15fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB434, serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
        Validity
            Not Before: Apr 16 16:40:10 2026 GMT
            Not After : Apr 23 16:40:10 2026 GMT
        Subject: CN=69e110eb-2c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7f:4e:5f:e2:42:e3:48:42:34:c7:98:5f:0d:
                    73:73:f2:0a:d4:3b:03:6c:46:2c:ca:f4:40:96:38:
                    e0:07:26:87:3f:d0:e0:d7:cd:b5:4d:34:a0:0f:1d:
                    f6:19:2f:1e:3e:18:b8:51:51:cc:eb:54:89:89:ca:
                    51:4c:9f:af:3a:fa:af:5d:41:95:30:1c:ef:fb:46:
                    fb:21:8d:dd:61:6e:c4:59:43:c6:8a:ae:6e:dd:df:
                    e7:a4:91:27:fa:72:01:54:22:7a:c2:53:72:d5:e9:
                    c4:23:68:f7:4f:53:72:db:4d:4e:28:ea:e2:61:0b:
                    76:62:4d:68:1a:18:59:2a:c7:81:68:f8:53:4b:23:
                    15:66:ea:92:40:8b:65:09:36:44:75:44:ac:82:b1:
                    f3:81:8f:9a:69:71:37:ad:82:80:59:13:ac:ec:1a:
                    83:fa:f2:f1:b8:5f:d0:ab:66:ae:a7:ca:85:1e:f9:
                    b4:d9:5a:25:7c:49:81:13:04:cb:b4:71:88:31:90:
                    82:84:4d:67:6b:79:80:7a:6a:11:ee:a2:a1:d3:51:
                    52:d8:3f:39:41:f1:e2:c3:ca:ef:23:47:d9:19:86:
                    3d:0f:b4:f9:f9:11:6e:5b:ce:0e:00:a1:40:2b:72:
                    d0:de:3c:5c:a7:f7:a8:33:e8:c0:e5:f8:29:d5:53:
                    00:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:31:36:4C:59:A1:87:97:39:56:8F:79:4D:C7:0E:49:68:C0:48:E1
            X509v3 Authority Key Identifier:
                keyid:D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e5:18:77:85:b4:2e:d1:d7:0e:dd:06:fc:ca:42:92:59:99:
         f5:67:3d:70:42:2c:da:b8:86:14:ea:f0:2f:81:80:c2:55:39:
         52:16:80:b7:6d:c9:b2:59:e6:fb:6c:1f:c9:a2:f4:0e:79:53:
         66:cc:0b:8e:1d:4e:c8:82:a5:bf:32:45:e5:bc:92:12:41:31:
         02:d0:7e:6d:fc:8a:91:a3:01:4b:31:a7:bf:69:9f:6d:7b:df:
         9d:85:79:b4:4d:95:31:c4:14:0b:7b:61:b5:7a:93:ff:b2:a8:
         f8:0a:57:58:3e:c3:b9:7b:49:73:72:12:b8:34:c1:78:17:ae:
         1d:a1:b8:c3:c7:49:18:66:be:98:33:14:39:6c:bd:cf:5d:5a:
         26:14:11:80:33:29:b8:db:2e:43:40:5b:04:0b:e0:7f:5d:51:
         88:4d:e7:3d:da:b6:e7:d0:db:31:5e:c1:c2:4d:f6:b9:9f:e7:
         88:c3:47:24:e1:44:9a:aa:1d:b3:02:89:e1:e1:60:63:11:19:
         4f:e3:de:11:fa:65:4e:b7:cb:38:a7:32:fb:10:47:26:58:59:
         03:fd:af:e3:67:31:ce:69:eb:21:02:9d:5e:04:ac:66:c2:54:
         5d:ea:72:66:8d:47:aa:4d:d4:d4:3e:2d:8a:ac:96:e1:ac:56:
         66:f4:b1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:20 2026 by rpki-client