Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
File:                     o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft (raw, json)
Hash identifier:          odu0U0InXHT28lJ9LZuWu8ecdILJ8ENgfa4Zv+I4gJM=
Subject key identifier:   F1:C5:24:C0:38:5C:EE:93:0E:24:7C:E8:11:21:96:C3:0F:E7:0A:0D
Authority key identifier: A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0
Certificate issuer:       /CN=A91FEF3B/serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0
Certificate serial:       E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
Manifest number:          DD
Signing time:             Fri 17 Apr 2026 06:16:59 +0000
Manifest this update:     Fri 17 Apr 2026 06:16:59 +0000
Manifest next update:     Fri 24 Apr 2026 06:16:59 +0000
Files and hashes:         1: o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl (hash: s9TyIn3XDfmbuGBvjS7Zzgqljf83uMopSMWUnUa5NW8=)
                          2: 10800248E9C711EFA1589312C4F9AE02.roa (hash: VpW1ss/FISZUa4YxltnTH36k8qN9hgV+vDjB+vqrTUU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl
                          rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FEF3B, serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0
        Validity
            Not Before: Apr 17 06:16:59 2026 GMT
            Not After : Apr 24 06:16:59 2026 GMT
        Subject: CN=69e1d05b-159d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2f:4e:36:5c:fc:b3:62:00:61:f0:9b:76:f2:
                    dd:1a:b9:f1:4e:6a:7e:a8:e0:1d:fa:18:96:42:c9:
                    77:2f:b8:d3:2b:ad:64:ec:64:85:ae:57:30:57:9f:
                    0f:3a:dc:9e:c4:6c:29:d6:cf:03:8c:b1:4c:61:02:
                    76:52:7d:8a:cb:68:9d:cf:03:dd:41:6c:8d:f8:ea:
                    8e:0f:dd:57:44:c8:73:77:10:17:76:30:65:29:1a:
                    c1:c6:59:0b:1a:93:6e:16:f3:81:9b:57:90:e4:d1:
                    e7:57:f1:7e:82:b6:5b:05:8f:bd:a6:dc:e7:35:d8:
                    99:7f:12:47:12:eb:51:92:28:a5:48:b4:09:90:2c:
                    3d:be:0d:e8:81:37:b1:9e:8f:bc:65:23:1b:1b:01:
                    a5:71:5a:cc:25:66:f2:26:a0:54:ec:e4:ec:d3:12:
                    2d:8c:c2:9a:ae:9c:21:93:bb:d6:10:0b:a8:2c:a9:
                    6c:3e:8b:08:00:6c:70:9a:3a:c8:4f:a0:5c:73:9c:
                    ab:ef:5e:13:a9:26:d4:a8:8c:20:58:b7:14:05:ed:
                    0f:6e:76:50:b6:a2:2a:09:5e:e5:a5:08:57:b8:80:
                    ef:12:35:1d:4b:38:1d:8c:eb:b1:e6:c2:63:6c:e9:
                    c0:a7:c4:a8:ca:31:94:17:c0:bb:7f:0f:0b:9b:e4:
                    39:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C5:24:C0:38:5C:EE:93:0E:24:7C:E8:11:21:96:C3:0F:E7:0A:0D
            X509v3 Authority Key Identifier:
                keyid:A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:63:6c:30:92:6e:dd:a8:06:56:db:c8:45:66:05:f9:ad:4c:
         88:39:80:e9:dd:86:93:71:44:27:d9:59:f5:6e:9d:ed:fb:b5:
         74:8a:78:37:ce:47:9e:39:85:ca:53:aa:82:29:30:94:43:7b:
         ca:a8:ab:f0:0e:e3:05:9c:f6:64:b5:46:fb:41:0f:0c:16:b4:
         9c:6e:2b:8d:f1:fd:0b:90:59:19:08:61:b1:8b:97:1b:e8:bf:
         3f:8b:e3:43:65:58:3f:fa:8e:95:73:02:95:62:78:d2:cd:19:
         7d:ab:86:c9:3d:44:4e:15:d8:95:f7:b5:54:21:f1:a6:a2:27:
         43:be:5e:18:ae:50:a6:96:c5:9b:d9:71:10:82:79:af:df:51:
         d6:31:03:63:da:8d:96:c7:fa:3e:1c:75:5f:d0:97:86:03:d8:
         bc:d1:56:aa:f2:00:46:7d:7b:d5:3b:96:79:21:28:14:af:a6:
         e5:2e:d7:7b:03:bc:d3:cc:94:42:c1:9c:1f:a4:34:5a:c0:28:
         92:0c:46:f7:b1:bb:43:18:16:2f:00:e2:02:08:9f:64:4e:a3:
         e1:5d:1f:7c:c4:35:f6:40:ee:ef:17:95:9f:e3:09:a9:39:c3:
         b6:a1:3e:8c:5f:b7:00:15:4d:5e:5b:eb:da:da:3a:49:dc:19:
         93:45:77:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:38:41 2026 by rpki-client