Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
File:                     4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json)
Hash identifier:          qiVxURGFM4OWAPTgv9vEWqcUUgdX7LUOSSsqI5KNOSo=
Subject key identifier:   24:2E:94:A0:31:EF:C6:FA:12:64:CE:80:A4:96:83:79:71:0B:58:35
Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
Certificate issuer:       /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Certificate serial:       020A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
Manifest number:          01FA
Signing time:             Sun 05 Apr 2026 02:44:52 +0000
Manifest this update:     Sun 05 Apr 2026 02:44:51 +0000
Manifest next update:     Sun 12 Apr 2026 02:44:51 +0000
Files and hashes:         1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: nNAH+7C4sO4tYJSHfISNj8AlgtOrkQZzE6O4/vZVe1k=)
                          2: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: PMCoxJN0Mw3UihPrQUCzoPvyQ9Kv2AExrUeTP8CdAPA=)
                          3: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: iIoPhVJj7Ein/zE76pSKLmE+AYXPB7k8gN5o8EtAAc8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl
                          rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:44:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522 (0x20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
        Validity
            Not Before: Apr  5 02:44:51 2026 GMT
            Not After : Apr 12 02:44:51 2026 GMT
        Subject: CN=69d1cca4-a9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:61:58:bd:f0:8c:6e:a1:12:61:3b:ff:7c:
                    55:1f:ca:ba:3b:95:99:70:40:2a:58:67:1f:68:c9:
                    e3:c6:28:09:26:7c:40:9d:d2:c3:21:0a:db:d6:ff:
                    9f:06:e2:ff:85:b6:6d:02:c4:b9:b2:9e:97:e1:19:
                    7d:45:f0:1e:ca:d8:a5:39:e7:77:b7:4a:99:f1:89:
                    1b:15:4f:2f:43:83:f0:ea:04:c3:2f:47:ca:ee:99:
                    52:08:46:dd:bb:07:0e:79:68:2b:bb:28:ad:9d:cd:
                    0e:32:23:25:cb:e7:24:0e:9a:b2:b6:52:12:36:30:
                    31:16:9f:89:9f:ce:fd:18:04:7a:ef:89:4d:06:a5:
                    7a:2c:ce:3b:4a:0a:f2:11:d5:26:d7:93:d8:34:c7:
                    b8:2f:63:fc:81:03:80:57:ef:b6:9a:bf:dc:ab:59:
                    9e:cc:36:56:2a:4c:2c:51:5c:2d:70:fe:75:a5:b7:
                    e8:42:3c:bf:08:4c:11:4e:ca:0a:b2:23:20:10:1f:
                    59:1b:3c:35:c6:aa:7e:26:b6:8e:7f:e2:c4:ba:da:
                    1f:5c:33:e5:b0:da:15:44:98:5b:29:dc:e9:ed:6d:
                    eb:fc:00:2e:df:7d:aa:bd:1a:cc:bd:0a:1a:33:65:
                    9b:25:b3:c6:c9:b5:5e:53:43:89:83:d6:8d:29:7c:
                    af:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2E:94:A0:31:EF:C6:FA:12:64:CE:80:A4:96:83:79:71:0B:58:35
            X509v3 Authority Key Identifier:
                keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9a:a0:23:28:47:ff:8e:f3:16:6f:89:62:b8:62:94:e6:d3:
         3f:53:58:f6:73:2c:24:ff:82:40:9b:21:d4:26:c9:c8:1c:9b:
         ed:0d:ac:80:c6:68:28:ce:e7:e9:05:19:f0:00:0d:5f:0c:d6:
         4f:c2:a8:f2:8d:15:08:1d:b8:71:5a:c1:b8:93:79:76:3a:68:
         fa:73:21:29:4e:31:e6:ff:7b:1e:47:28:3d:cc:bb:18:98:48:
         bc:bf:6d:3a:37:23:2b:9e:56:b2:b9:c9:a4:30:7d:25:21:88:
         24:34:d8:49:3d:21:45:f4:09:60:55:9c:64:09:12:92:a7:76:
         34:ab:3a:0d:df:39:80:17:3b:66:39:41:64:eb:80:d6:c8:25:
         1f:3e:2c:08:a6:5e:db:09:d1:42:b9:00:c2:81:d1:84:1f:3c:
         cd:d2:5a:f4:3d:6f:74:3e:c6:be:44:4d:dd:ac:73:ff:b3:07:
         10:88:cc:e4:29:f7:e1:95:23:1f:7e:76:ea:8f:99:bd:34:72:
         df:9f:49:88:37:e2:fb:61:63:68:d0:2e:9f:40:bd:61:73:c3:
         21:2c:d0:95:69:88:1f:eb:b6:43:25:22:5d:a0:b2:95:c1:f2:
         32:f6:cc:da:44:c9:e1:2f:b2:71:52:78:0b:cc:b7:87:df:5f:
         18:9f:12:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:14 2026 by rpki-client