Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
File:                     _10TK8Zqqiu89lw-X-iaDDcdizo.mft (raw, json)
Hash identifier:          zDr++n0u4dWxk1CrGl65kEBU+LDL3+2I6GJcYKY/40U=
Subject key identifier:   DD:ED:3C:58:05:E6:3D:54:D9:78:C8:8A:1E:E0:18:D6:32:8E:76:59
Authority key identifier: FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A
Certificate issuer:       /CN=A91C1FA7/serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A
Certificate serial:       028C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
Manifest number:          0284
Signing time:             Sun 05 Apr 2026 01:23:24 +0000
Manifest this update:     Sun 05 Apr 2026 01:23:24 +0000
Manifest next update:     Sun 12 Apr 2026 01:23:24 +0000
Files and hashes:         1: _10TK8Zqqiu89lw-X-iaDDcdizo.crl (hash: zyV2h9d9633AvhBcLeiQW2BU6aHSTigDSvYxPkseUNE=)
                          2: 064042F259F511EDB22E3F2BC4F9AE02.roa (hash: 0SaUic0cFmBX4GJg5caQlZtmFukZYlTwm6y1EfuxlnQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl
                          rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 652 (0x28c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1FA7, serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A
        Validity
            Not Before: Apr  5 01:23:24 2026 GMT
            Not After : Apr 12 01:23:24 2026 GMT
        Subject: CN=69d1b98c-f752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4a:3c:c7:d5:21:82:0b:93:58:e3:65:4c:5a:
                    89:14:b2:8a:f2:5c:85:88:1c:9b:3c:97:81:0a:1b:
                    eb:49:0e:66:17:75:ce:34:eb:e5:d7:2b:a0:6f:17:
                    e3:34:1d:66:e8:ac:69:c8:6e:f2:45:a4:79:12:2f:
                    65:bf:46:d7:e4:a7:e3:5d:59:7a:1e:d1:b3:09:33:
                    18:63:a3:f4:ee:cb:cf:08:f1:e2:cf:89:78:42:a5:
                    ed:01:58:af:ba:51:83:17:d1:89:d3:cd:6f:cd:8e:
                    79:f5:e5:b9:fb:a8:09:37:5d:6f:1e:05:b0:8a:fc:
                    5f:20:3b:6d:36:1f:86:3f:35:44:36:ac:9b:0c:70:
                    8b:8b:9a:96:c1:35:bb:a9:3a:6c:5e:4d:24:68:6f:
                    79:d5:0f:7d:eb:5c:e7:3a:37:ab:38:91:d2:80:f1:
                    ce:80:7a:e1:a9:cc:80:64:af:64:c5:3a:45:4f:44:
                    94:da:e7:10:88:d3:dd:46:51:d8:b9:d7:ad:49:19:
                    0f:46:8b:ba:e7:10:c7:05:ba:d2:0b:76:ea:4d:d1:
                    5a:8e:15:a3:e3:c0:a7:d3:c6:70:d2:63:64:19:cd:
                    17:81:aa:81:02:36:26:51:b1:78:3d:5d:85:a3:cb:
                    79:24:9d:8f:ed:e5:06:07:9d:50:cd:88:1b:e3:bb:
                    0a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:ED:3C:58:05:E6:3D:54:D9:78:C8:8A:1E:E0:18:D6:32:8E:76:59
            X509v3 Authority Key Identifier:
                keyid:FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:6d:90:d5:c9:ba:28:55:b5:fc:a8:19:90:62:82:4c:40:ca:
         72:b0:51:a0:f2:32:ca:41:ba:9e:c7:5a:d5:d5:a8:75:26:3d:
         f1:f6:23:a9:0d:92:60:ec:ae:19:10:7c:f6:f7:d7:30:95:90:
         2b:b6:6d:33:6d:b2:6b:0e:31:c4:da:be:5c:2b:c9:a7:03:81:
         81:7c:59:f4:4c:6f:1c:3e:19:0f:d3:94:be:ee:d9:2b:e6:be:
         69:16:d0:01:43:6f:aa:7e:8a:48:e6:21:10:f6:9e:e7:1b:a5:
         a1:03:8f:39:8a:6f:5e:6d:bc:19:16:35:bb:22:54:a5:2c:11:
         63:40:bd:32:18:09:96:d7:51:d7:40:44:b5:da:4a:96:6d:fd:
         31:7e:a5:0d:36:aa:e9:8e:a4:e4:f2:1e:56:5a:b4:09:5f:2a:
         90:5d:3c:2e:a1:52:8c:8d:b4:2c:f8:77:b3:9e:55:39:fd:9c:
         54:02:e4:62:fe:9b:3d:98:0f:67:a0:64:5b:14:99:a4:86:eb:
         3e:dd:8b:26:82:25:a6:5b:76:a7:66:34:97:9a:ea:c2:41:e4:
         c8:49:2e:8c:16:3f:da:69:e0:da:38:c4:f2:14:21:78:5e:be:
         d9:f0:df:ce:8e:80:30:22:18:a8:49:37:7d:d7:ce:fb:8a:4b:
         ad:ed:26:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:19:22 2026 by rpki-client