Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
File:                     t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft (raw, json)
Hash identifier:          nse5WFI/35HxhHTQA5Lk782GZtsYatkvcEZDHIgAIkM=
Subject key identifier:   7F:61:33:BF:C9:91:64:A9:29:82:19:71:78:76:E6:EE:FC:97:BF:37
Authority key identifier: B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04
Certificate issuer:       /CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504
Certificate serial:       021C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
Manifest number:          0216
Signing time:             Sun 05 Apr 2026 02:27:23 +0000
Manifest this update:     Sun 05 Apr 2026 02:27:23 +0000
Manifest next update:     Sun 12 Apr 2026 02:27:23 +0000
Files and hashes:         1: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl (hash: NhlCkBlG+xwqIn+531H/c6K/l6q+oEIPL9mqitC+2i0=)
                          2: F4260C1C68DC11EE842D825BC4F9AE02.roa (hash: UjPClW0uFtHm8QVkzT1vV63CuJ+wSKL/8pPiNqjGxQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 540 (0x21c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9197, serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504
        Validity
            Not Before: Apr  5 02:27:23 2026 GMT
            Not After : Apr 12 02:27:23 2026 GMT
        Subject: CN=69d1c88b-13ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:19:cf:96:76:55:3a:2e:23:3e:7b:6c:b5:
                    7e:e8:25:84:70:12:94:68:66:59:5d:a6:77:10:34:
                    d6:6b:cb:fd:93:b1:0c:0a:49:d3:c7:3f:48:5d:af:
                    ac:72:e9:d6:57:56:9d:00:cc:a9:23:68:b0:aa:0c:
                    a2:37:05:b5:d0:11:73:fd:7d:bd:dd:87:8e:15:4a:
                    80:cf:2b:d8:36:2f:9c:a3:e8:22:1e:14:dd:8e:c3:
                    43:87:68:37:c5:31:45:00:0d:de:35:72:2e:a3:cd:
                    d1:83:da:86:de:5b:f7:95:20:7b:bf:a2:a6:91:47:
                    5b:35:6b:3f:38:be:b0:c2:40:65:e1:c3:0f:09:3d:
                    23:5a:70:c7:fc:fc:00:fe:04:b8:a1:79:18:d0:68:
                    3f:f1:b6:d0:9f:e9:6c:f1:cf:2d:25:81:ea:9a:ee:
                    8d:5c:04:f0:b8:37:f6:88:b4:ea:17:21:90:13:ee:
                    12:7a:d4:7f:a9:53:85:69:76:fa:85:cb:38:a7:c0:
                    88:00:b3:b5:5d:0a:b7:bb:25:a2:01:15:1b:76:65:
                    48:c4:5c:ca:d7:15:83:64:be:ac:dc:57:b9:b9:7e:
                    f7:ae:54:af:33:30:ab:4d:43:2d:97:c8:ad:61:ed:
                    40:d0:13:ed:7a:60:6c:5f:22:79:87:df:85:f1:c0:
                    e7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:61:33:BF:C9:91:64:A9:29:82:19:71:78:76:E6:EE:FC:97:BF:37
            X509v3 Authority Key Identifier:
                keyid:B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:6e:c6:84:81:88:02:0f:02:94:67:87:7c:c8:24:97:9b:7c:
         a7:7d:ff:1b:b5:79:ae:6b:f5:c3:ff:b1:34:c0:3c:54:2c:64:
         da:3e:e8:b6:bd:48:01:43:fe:0e:f3:cc:46:a8:81:f0:f0:94:
         7a:5d:08:45:4a:a6:15:da:d1:af:15:09:6f:37:e6:11:49:7b:
         21:21:95:16:01:83:43:9f:e7:29:89:58:f7:ad:cf:d6:6e:55:
         f4:76:99:88:fc:b0:85:23:9a:d6:a4:f2:b4:c7:9b:25:33:a8:
         cc:06:39:c5:4a:e9:31:dc:79:00:86:c6:ae:7d:8b:aa:73:54:
         2c:f7:f4:3a:8d:c7:e0:b0:7d:d6:bd:f6:ff:6c:6c:1a:bb:4b:
         68:bc:33:48:e0:1d:1c:15:91:e3:e6:f4:bc:43:93:fe:dc:ef:
         79:2b:40:9f:44:b5:a8:6c:f2:13:bd:2b:d1:bc:1f:0d:e9:c9:
         6b:7e:25:90:17:15:bd:4e:be:58:e7:76:43:9f:56:93:67:ea:
         f8:7a:76:70:03:02:24:8d:93:12:8d:c7:01:f3:10:3a:f1:ac:
         a3:8b:83:98:20:cf:8c:4d:ba:03:b4:90:ff:39:ee:74:e1:58:
         f9:ec:8f:ab:92:53:3d:0b:f0:33:39:7d:8d:af:96:54:7a:3f:
         38:7f:82:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:00:17 2026 by rpki-client