Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
File:                     49O0eIJzzkWSmwmYOr9ktdRNHwg.mft (raw, json)
Hash identifier:          QpXW/In3sSn26dXLiTfDC4HMpw/scYnU6ebE7TMFzV4=
Subject key identifier:   FF:74:DC:D1:6F:E2:76:B0:54:C8:9B:C3:80:1B:77:F1:E0:A1:F8:E4
Authority key identifier: E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08
Certificate issuer:       /CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08
Certificate serial:       11D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
Manifest number:          11BF
Signing time:             Thu 16 Apr 2026 17:07:42 +0000
Manifest this update:     Thu 16 Apr 2026 17:07:41 +0000
Manifest next update:     Thu 23 Apr 2026 17:07:41 +0000
Files and hashes:         1: 49O0eIJzzkWSmwmYOr9ktdRNHwg.crl (hash: spjihiAsMqysyhja75zZtDeG/+3JH86VOAPG/cGZnuQ=)
                          2: 97F937E440BC11EAA2B89432C4F9AE02.roa (hash: dJ40ZvkvEtXP02NZp3lyJfj9qvrbjW3gvJFMNBqnO1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl
                          rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4569 (0x11d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF634, serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08
        Validity
            Not Before: Apr 16 17:07:41 2026 GMT
            Not After : Apr 23 17:07:41 2026 GMT
        Subject: CN=69e1175d-ad48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:72:d6:fe:6f:fd:13:a3:67:35:01:a1:ed:92:
                    73:bf:be:ec:e4:2e:f8:0f:9b:24:33:3f:10:ab:1a:
                    23:df:d9:43:38:3a:92:8a:59:85:fa:d9:5c:b9:13:
                    28:ce:96:ff:f0:d4:35:78:42:94:cf:a9:69:4b:2d:
                    54:71:fd:61:28:3d:52:f2:42:29:fc:d5:44:4e:05:
                    c5:b0:51:18:1c:06:f9:43:81:2d:25:01:54:14:b6:
                    f2:d6:cf:b7:3c:52:80:5f:45:d6:63:e3:ae:d5:ea:
                    71:07:35:4d:96:bb:0f:f0:87:ba:75:0f:e5:4d:c6:
                    9e:81:c0:59:12:84:7f:00:07:28:4d:87:bd:a0:07:
                    a8:f7:91:f7:ab:11:cb:b7:a7:eb:fa:64:52:fb:bb:
                    43:a6:a5:45:64:10:e5:9a:da:de:68:8d:6e:63:46:
                    54:97:9f:48:a1:2d:52:e5:f3:e1:fd:56:dd:ad:c3:
                    74:a2:9f:ea:8b:59:9d:7b:cc:2d:02:3c:47:c7:df:
                    a4:89:3c:b7:c4:bc:2c:ba:47:a3:6e:be:58:92:3e:
                    1f:e4:76:98:cd:08:2e:d5:a2:78:0c:2b:f0:37:c0:
                    b4:d6:79:27:47:b9:bb:d5:be:0c:3c:48:97:77:e4:
                    12:3e:d8:90:76:61:7b:5c:5e:dc:e6:5f:7a:aa:67:
                    e1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:74:DC:D1:6F:E2:76:B0:54:C8:9B:C3:80:1B:77:F1:E0:A1:F8:E4
            X509v3 Authority Key Identifier:
                keyid:E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:9b:b9:34:f4:20:5e:65:90:ad:5e:26:22:50:19:47:c7:46:
         3f:d4:32:f3:74:28:1c:44:4b:46:95:57:b1:92:05:13:88:f5:
         90:68:5a:c4:e5:28:07:5f:7d:98:8e:1a:8d:32:bd:b1:e8:cb:
         96:19:2a:ab:eb:ff:53:28:81:fd:29:6f:bd:fb:1f:4a:cf:ad:
         51:ce:5e:62:d7:23:73:dd:03:0f:96:16:8a:8c:83:04:7d:4d:
         91:51:a5:73:69:ed:36:b6:f9:31:14:a2:1e:84:81:6d:22:80:
         b1:b6:64:e0:87:b6:a0:62:1f:be:b4:4b:3c:53:52:6c:23:7d:
         cf:73:70:ff:a8:9b:25:17:03:44:b3:cf:d4:ec:aa:cb:7a:e3:
         43:d9:2b:ef:00:69:54:46:28:54:db:58:65:6e:7b:9c:51:2e:
         75:a4:5c:55:dd:0b:d7:0e:de:28:e2:b8:0e:9c:f9:14:00:51:
         bd:58:56:a0:e7:0b:17:b5:bc:17:86:e9:5f:8e:58:7e:19:c2:
         33:7d:25:58:be:6c:39:c4:a7:28:ca:bf:e7:4e:83:a6:44:f4:
         4c:84:17:e5:11:0b:46:48:db:a6:f0:e0:45:e6:bc:93:f6:53:
         83:4e:5d:c2:4f:ce:6b:e6:5e:20:e6:0c:6e:5c:2a:5d:ac:33:
         1b:eb:a8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:52:55 2026 by rpki-client