Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
File:                     D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json)
Hash identifier:          rs/M6EHmC8v2PZx0vzV+z5Ii7FatrR7G4AO1jo7Vs+M=
Subject key identifier:   4C:8C:B4:03:C5:40:2F:EF:4F:63:37:45:9B:B8:8D:56:18:25:73:E4
Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96
Certificate issuer:       /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
Certificate serial:       01A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
Manifest number:          0186
Signing time:             Sun 19 Apr 2026 04:13:38 +0000
Manifest this update:     Sun 19 Apr 2026 04:13:38 +0000
Manifest next update:     Sun 26 Apr 2026 04:13:38 +0000
Files and hashes:         1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: NbB+YuAIdIQNwvx8POXQYEv7TlQseXs0yhWOPfKF1XA=)
                          2: 507476EE6BD811EFBDD72932C4F9AE02.roa (hash: irjK47i6Sld0YH0p5+DxVPsO0MEpAL8iYc9/ecny0Gs=)
                          3: 1132F3026BD811EF90DBC631C4F9AE02.roa (hash: RseQd9x0Qtjlynx4q/LTY8jY17t9oSxHJT5UuEAvOWU=)
                          4: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: NSdNu+vXnYcTSniUQqnt8p+QBPXnXEprmzukCezOx0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl
                          rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
        Validity
            Not Before: Apr 19 04:13:38 2026 GMT
            Not After : Apr 26 04:13:38 2026 GMT
        Subject: CN=69e45672-6add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cf:94:46:e5:95:68:c5:3d:4b:a6:45:20:06:
                    ab:e4:21:d0:a3:b4:b1:71:ca:ae:5a:11:62:fd:ef:
                    f7:47:01:41:94:3b:84:e1:36:35:0d:73:17:fc:67:
                    94:44:02:e6:68:33:25:c4:f2:2f:89:20:05:ae:70:
                    7e:8d:67:47:05:cb:c8:08:42:1c:8a:b1:6f:b5:03:
                    84:b4:f2:f9:fc:f0:3b:94:f9:fe:79:68:f2:50:09:
                    ed:60:0c:77:81:5a:de:8d:06:0c:7c:ab:5d:33:bf:
                    ff:a2:e1:51:ef:a5:c0:06:99:c3:67:5c:1f:ec:4a:
                    2f:e8:4c:9c:ce:20:c6:83:5b:9b:68:2f:2e:42:0e:
                    ad:cd:e3:28:2e:ce:92:7c:75:d0:74:79:b9:62:ac:
                    cb:5a:f1:7b:a7:5a:71:22:51:ce:82:3d:b2:d8:e5:
                    97:ec:bb:88:fa:e7:00:2f:77:cf:fd:86:69:78:e2:
                    51:be:67:00:a9:95:1b:95:74:0f:fe:3a:7d:24:c9:
                    42:41:34:9a:90:69:31:1f:85:aa:d6:29:7f:a7:bf:
                    88:30:6c:da:aa:d4:ce:1e:60:3d:c9:43:71:51:77:
                    6f:53:7a:3f:62:9c:59:43:a4:ca:8a:57:43:86:71:
                    b8:9c:65:20:fd:b2:67:ec:52:66:59:8a:be:c0:24:
                    4c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8C:B4:03:C5:40:2F:EF:4F:63:37:45:9B:B8:8D:56:18:25:73:E4
            X509v3 Authority Key Identifier:
                keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:6b:c6:9b:c7:c3:4a:e5:0c:a8:cc:bf:55:b4:35:cf:91:61:
         eb:21:80:0a:34:50:58:89:9e:75:b7:9f:3b:f8:4f:55:3a:bc:
         4b:32:2b:5c:80:a5:f3:54:b1:5b:99:0b:b1:d5:c7:5f:2c:02:
         12:0e:e2:33:e6:fd:98:4e:c5:3e:d2:8e:77:c7:c0:95:4b:0f:
         24:f8:e6:c8:d1:81:28:1a:21:3c:ec:96:da:10:44:12:f7:10:
         b2:85:36:1e:4c:c5:30:9d:97:81:2f:9a:08:12:52:80:62:77:
         3b:9c:de:28:9d:4e:33:c8:ef:90:26:9c:2c:65:5b:d7:66:d7:
         42:b7:68:ef:68:d9:1e:e9:34:10:01:13:6a:28:3b:9d:b8:63:
         d9:2d:29:31:fd:e4:83:c6:04:c9:34:1c:ea:5f:ec:14:5f:38:
         ec:f2:c8:1c:f5:6d:30:57:6f:e6:3c:19:f7:ca:0c:cd:26:01:
         50:20:e9:37:85:73:25:b2:48:ff:f3:ad:fe:62:bc:24:3d:19:
         1a:ae:b4:70:96:b8:c9:a5:d8:1f:06:67:8f:2f:49:ed:46:fb:
         f3:30:5e:f7:06:45:12:43:64:a4:0e:0b:ef:82:88:26:62:c2:
         35:04:91:59:27:4a:fa:b0:59:06:f4:52:42:43:1b:43:0e:6a:
         4e:e5:5c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:25 2026 by rpki-client