Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
File:                     AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft (raw, json)
Hash identifier:          Slk/q5+3V9wZmyyPQZcdfWHm/Hp/v7g2mnNfvTVokLA=
Subject key identifier:   F2:02:22:44:89:AB:F1:94:6F:8C:A8:6A:B2:0B:B4:74:55:83:06:41
Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7
Certificate issuer:       /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
Certificate serial:       07E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
Manifest number:          07C5
Signing time:             Sat 04 Apr 2026 21:14:12 +0000
Manifest this update:     Sat 04 Apr 2026 21:14:11 +0000
Manifest next update:     Sat 11 Apr 2026 21:14:11 +0000
Files and hashes:         1: AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl (hash: 1S3XK0n5XH5OcrECMYSDHwI3xUJl0EAQdPJjVN3wRFk=)
                          2: EEE4C606B5D411ECA20B840AC4F9AE02.roa (hash: EIHT9tw+jJfDxYwJoN6Zou+1GSdOeWVDmrSdgdYC9zo=)
                          3: 910A49AAB5CC11ECAE337E78C4F9AE02.roa (hash: AQsEjkfXYE8iJW37NiBShvRrsZAk/FjyC4xd+5A2hgs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl
                          rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2022 (0x7e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA1A6, serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
        Validity
            Not Before: Apr  4 21:14:11 2026 GMT
            Not After : Apr 11 21:14:11 2026 GMT
        Subject: CN=69d17f24-8b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:d4:24:20:01:27:f0:97:e8:5d:53:0a:29:
                    9d:56:d0:c3:44:c2:a9:cc:ec:5f:ee:92:e8:3c:5f:
                    73:74:fd:35:82:38:62:9f:38:9a:e0:c6:c6:35:9c:
                    77:20:9f:72:dc:3c:fc:d8:88:43:c1:0a:32:0a:6d:
                    7e:8e:a0:8a:79:dd:16:ee:9f:ef:bf:70:5d:3f:cc:
                    2a:d8:68:4a:91:04:4c:12:6c:7d:1e:c9:95:2b:9a:
                    06:d8:b6:7e:92:fc:de:f8:53:f5:85:e3:47:89:ec:
                    77:8d:4e:1e:31:9f:4c:a5:f6:88:4a:d8:58:c9:36:
                    5b:51:ec:88:1f:2b:7d:d6:14:39:34:e6:88:8f:40:
                    e2:14:e5:92:84:1b:4b:ae:b3:cc:9a:22:72:87:32:
                    49:f5:ac:49:d7:96:cc:c2:6f:e9:1b:63:92:5f:66:
                    11:c9:34:82:cc:4e:84:12:04:2c:c8:78:b6:d2:d2:
                    e4:68:bf:35:e6:03:04:5c:bf:9d:fa:dd:80:90:e5:
                    26:18:19:6c:32:30:85:62:62:57:25:68:37:a2:9a:
                    45:ae:02:39:00:37:2b:b5:8e:c2:45:d3:25:d8:84:
                    0f:72:cf:2b:57:49:7d:3f:3a:27:1c:ba:43:0e:00:
                    3f:43:ef:7c:8e:18:da:b0:aa:c3:ce:1c:6e:20:d8:
                    e9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:02:22:44:89:AB:F1:94:6F:8C:A8:6A:B2:0B:B4:74:55:83:06:41
            X509v3 Authority Key Identifier:
                keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:bb:23:ce:62:e9:86:1c:8a:ee:31:69:cf:24:21:ec:f0:db:
         51:d8:01:e4:4e:95:0e:a9:d2:5b:aa:4c:c0:c5:00:c2:40:cb:
         a6:eb:e9:39:3b:f7:9f:86:e9:54:b2:fa:59:df:3a:5c:1c:0f:
         7c:51:0d:64:6a:f3:47:22:86:1d:e5:64:6d:a1:e9:37:b3:de:
         6c:08:8f:6c:56:18:39:e2:2e:4c:12:16:2e:d1:dc:de:0a:93:
         cb:52:c7:37:29:6b:9d:fa:a9:8e:32:b1:2e:26:50:21:13:8f:
         a6:49:28:07:1c:da:e7:58:b7:1b:ef:f6:0d:33:59:8a:29:06:
         b4:3d:0f:36:8c:21:41:03:e7:c7:7a:b4:7f:df:08:18:78:f6:
         e9:75:a8:c4:3b:ff:dc:fe:2f:3b:81:39:28:72:2c:14:fe:38:
         ce:6f:af:8e:c8:41:36:a3:3c:2c:3e:29:f9:51:27:6b:4c:cf:
         34:d9:08:48:c0:8b:d4:34:2e:c0:eb:1a:fd:2e:e0:4d:79:97:
         bf:40:5d:ec:8b:e2:b1:9c:73:51:4a:36:3f:4a:75:72:0a:2c:
         00:28:02:9a:05:3a:61:b1:3c:a4:2b:b9:6e:53:9e:76:3a:68:
         b8:2f:e5:91:2d:9f:16:b4:35:0e:4a:ab:f1:10:90:78:3b:ed:
         f6:41:74:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:00:09 2026 by rpki-client