Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
File:                     S0fJxk08IyF6Fd2rh0fDncMBhPI.mft (raw, json)
Hash identifier:          pqknyHT7Gll1ISrlb1BTrn1t1RmhI2189cY0rZaTzk4=
Subject key identifier:   B0:FB:5E:59:E6:F5:69:45:48:9C:D1:77:E4:91:EF:AF:08:83:00:8A
Authority key identifier: 4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2
Certificate issuer:       /CN=A91B31CE/serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
Certificate serial:       072F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
Manifest number:          0724
Signing time:             Mon 06 Apr 2026 21:39:28 +0000
Manifest this update:     Mon 06 Apr 2026 21:39:28 +0000
Manifest next update:     Mon 13 Apr 2026 21:39:28 +0000
Files and hashes:         1: S0fJxk08IyF6Fd2rh0fDncMBhPI.crl (hash: Ybe7wxDkFLoQyOTad0GOinqdzaAuXLucvDOIzDjM0VU=)
                          2: AA51390A822B11EE8B95E475C4F9AE02.roa (hash: AnaATHT/63NFgMgZ3Y5aYEgFRK7pXkT3QAJXtGEghZM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl
                          rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 21:39:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1839 (0x72f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B31CE, serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
        Validity
            Not Before: Apr  6 21:39:28 2026 GMT
            Not After : Apr 13 21:39:28 2026 GMT
        Subject: CN=69d42810-f073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:00:23:81:bb:82:86:79:0b:6f:55:5c:d7:a3:
                    05:e2:91:71:6f:52:15:b5:28:54:4c:01:31:18:c3:
                    18:0f:3f:1a:3a:29:e7:cd:e0:7b:b3:82:6e:88:ed:
                    b9:b0:d7:ea:9c:24:5a:5e:7e:be:3e:e8:33:44:fe:
                    82:1d:af:db:6f:2c:0c:7d:79:af:73:d1:d5:0a:a4:
                    a8:60:cc:0c:aa:0e:52:6e:af:ed:62:36:41:40:8a:
                    08:64:33:87:d6:c7:fa:67:bc:31:4c:5e:0b:83:d3:
                    db:b7:36:ea:64:a1:49:51:3b:b3:a2:33:15:ed:48:
                    0c:a3:72:81:16:84:38:5a:39:1b:5e:0c:0b:1d:b8:
                    88:8c:5d:03:3e:e0:c6:9b:c7:57:ec:7e:88:81:77:
                    8e:5f:59:e4:bc:4e:9b:18:21:3c:26:5b:4e:be:42:
                    15:ba:2f:b6:84:42:94:67:6e:17:2c:e3:2e:84:67:
                    69:e9:e9:05:64:d2:2b:ac:de:c5:af:f4:ce:47:c1:
                    d8:cb:ef:d0:90:4e:a6:ee:ac:64:81:a9:02:9b:6a:
                    c7:0a:cb:85:6f:66:f9:84:a4:19:3d:67:30:a2:7b:
                    a2:94:63:23:7d:a7:eb:54:49:72:61:7b:60:3c:bd:
                    63:74:63:77:b3:09:12:83:d1:12:ce:ed:5a:6a:00:
                    7b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FB:5E:59:E6:F5:69:45:48:9C:D1:77:E4:91:EF:AF:08:83:00:8A
            X509v3 Authority Key Identifier:
                keyid:4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:0a:0d:1b:de:60:99:5d:e7:6a:4e:fa:b3:c5:d4:25:8a:da:
         97:ca:4e:64:b7:72:bf:10:0c:82:17:57:11:55:ee:39:20:6e:
         e2:f6:99:cf:62:82:b4:80:21:af:0b:dd:32:f6:3e:17:5a:a2:
         22:61:ba:e7:f2:63:3c:59:7d:e0:f0:5c:99:5b:82:09:aa:e6:
         0c:86:f7:47:72:a5:5f:8a:7e:16:59:0a:07:4e:c7:40:a6:17:
         14:79:87:e1:83:15:31:d7:a0:37:98:fc:c2:94:03:ff:f6:0d:
         36:bd:d6:f6:2a:d3:66:c4:d7:d5:a5:61:79:82:21:04:93:34:
         ba:e3:e3:88:f8:91:01:4d:a5:ad:c4:60:da:4a:b1:3c:fe:34:
         69:2d:1c:14:c0:70:d6:09:7b:54:86:3f:af:a6:a4:7f:8b:84:
         34:20:77:7d:3c:72:7a:40:3b:de:c1:62:9e:2b:32:43:e5:09:
         9b:ec:5e:c9:dc:57:56:8f:9d:76:5f:9b:98:2e:c1:a9:07:d4:
         27:29:91:2b:00:c8:fc:4a:c5:f8:59:6e:20:88:e3:69:e8:c4:
         a8:7d:18:09:6c:95:1e:d4:d6:91:eb:fa:16:95:c7:c6:dd:fb:
         60:ba:8a:de:61:6d:ea:f5:f9:dc:4a:97:7f:a0:5c:48:b7:5f:
         d0:73:79:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:06:44 2026 by rpki-client