Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
File:                     x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft (raw, json)
Hash identifier:          1luOP+H7FFyDjE1YsdOJYPANpONe3EdC7dszB9N8Yzo=
Subject key identifier:   95:9B:F6:AB:2A:E2:F6:11:A1:3C:E9:47:4D:13:3E:D9:A9:3B:22:E8
Authority key identifier: C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8
Certificate issuer:       /CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8
Certificate serial:       05D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
Manifest number:          05CF
Signing time:             Sat 04 Apr 2026 22:48:31 +0000
Manifest this update:     Sat 04 Apr 2026 22:48:31 +0000
Manifest next update:     Sat 11 Apr 2026 22:48:31 +0000
Files and hashes:         1: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl (hash: NRBOs9edtNiKaxe8PQfv6YMP9hndHSsxUJntsWLqBg4=)
                          2: BFA10A96FA8911EB8122C53FC4F9AE02.roa (hash: UgEEJTWIM54CHKob5V3mW5gsYSR/YNMzJ4dhTAYf1UI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl
                          rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1494 (0x5d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91222FA, serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8
        Validity
            Not Before: Apr  4 22:48:31 2026 GMT
            Not After : Apr 11 22:48:31 2026 GMT
        Subject: CN=69d1953f-a77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e8:a4:60:e8:25:a7:e3:9d:8f:ab:90:ec:cb:
                    4d:bf:c9:2a:2e:d8:15:92:14:a3:ff:48:d3:5e:e4:
                    e5:a4:64:74:96:49:55:43:5f:a6:dd:29:6a:5c:ff:
                    70:50:f5:23:cf:7e:41:1d:77:8e:dc:03:16:09:7d:
                    f3:d2:73:36:ce:8a:c1:1b:f6:6a:dc:2e:89:2d:7e:
                    f8:dc:50:99:00:ea:0f:69:3b:d2:34:e9:4d:f4:f6:
                    2c:d9:d4:42:62:45:0e:5d:76:33:8f:44:6e:c9:75:
                    92:46:63:47:c2:ff:fc:05:a6:c8:2f:32:06:57:60:
                    ab:0d:7e:b6:1c:db:11:26:e3:58:53:42:1b:e5:1a:
                    31:1e:9a:ad:db:35:6e:a9:36:13:c8:c9:1e:a0:24:
                    f3:a8:be:90:70:ae:dc:9b:32:5a:4e:4f:79:80:60:
                    70:11:4a:be:2a:ed:f1:a6:40:88:6f:30:04:49:f5:
                    6f:ca:1c:d7:44:b0:88:79:08:32:11:41:65:26:0f:
                    92:79:5c:c3:b6:e3:e4:3d:df:a8:17:87:3b:9f:bd:
                    1c:f0:6e:fd:9a:59:9b:41:ee:fa:96:94:a9:b8:35:
                    3e:2e:26:4f:7b:e4:ec:44:cb:1c:37:36:57:0b:c2:
                    32:83:d4:ed:7c:bc:47:63:5a:b7:b9:3e:30:3f:9f:
                    11:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9B:F6:AB:2A:E2:F6:11:A1:3C:E9:47:4D:13:3E:D9:A9:3B:22:E8
            X509v3 Authority Key Identifier:
                keyid:C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:7c:9c:1c:fd:ff:1a:d4:2c:25:7b:28:eb:bf:12:1d:4a:73:
         54:82:d2:cf:6a:1e:8c:0c:b9:6a:6d:12:69:a6:f4:84:73:d6:
         61:04:d2:48:8c:ab:58:a9:92:5a:ec:ae:81:20:37:b6:b5:bd:
         ca:ab:bd:8d:a6:72:eb:7f:de:27:13:0d:3a:f7:68:ab:91:9d:
         67:ea:53:f8:14:8d:45:9f:9e:05:ce:2b:c1:e6:41:1b:bb:cf:
         b8:54:19:24:f2:2a:f3:c9:d8:a6:33:28:5b:51:4c:20:9a:bb:
         51:66:5f:03:02:c5:5b:0e:da:93:a9:71:54:83:bc:63:14:bf:
         6e:92:06:d4:d9:02:12:ee:17:48:1b:85:54:87:01:ae:91:5d:
         11:f1:80:e8:39:c5:7f:96:74:d4:bb:78:4b:14:7f:6f:30:4c:
         be:65:31:b3:24:c5:3c:f7:9b:5a:3e:2a:d8:fd:4a:6b:1a:8a:
         31:0b:9c:44:ad:b6:3d:af:ab:b6:1a:a9:56:e7:e5:32:42:83:
         57:9c:29:30:13:f5:9d:e0:8c:d9:18:15:d1:cb:f5:81:90:e8:
         64:93:1a:ea:52:c5:d5:76:f0:e1:1a:94:56:cb:de:49:3d:81:
         0e:21:0f:db:b4:3a:c8:cb:11:fb:0c:13:da:81:ef:3a:76:32:
         bd:4b:4b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:57 2026 by rpki-client