Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
File:                     0Eyx4nFXho90821weRXZ1_CXyQg.mft (raw, json)
Hash identifier:          fkFAfEPTuBhSw+ZctJdNk2zeNeRs0t6cdlayFi2JkQA=
Subject key identifier:   B7:BB:D4:52:F1:3C:62:05:66:7B:E6:8D:98:7E:B8:5D:80:80:34:2A
Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08
Certificate issuer:       /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
Certificate serial:       0272
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
Manifest number:          0267
Signing time:             Sun 05 Apr 2026 01:46:14 +0000
Manifest this update:     Sun 05 Apr 2026 01:46:14 +0000
Manifest next update:     Sun 12 Apr 2026 01:46:14 +0000
Files and hashes:         1: 0Eyx4nFXho90821weRXZ1_CXyQg.crl (hash: 7UD7hxPW4NcWnEIBbgZFRCkRKEOIfSnYvyNAyuuHwJw=)
                          2: 994AC0903E1E11EFB5BBDD3BC4F9AE02.roa (hash: kbZVkD6jRKFqNBUgIZMNtq7Y+KDfzPzcA1djWWgpFT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl
                          rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 626 (0x272)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5AA8, serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
        Validity
            Not Before: Apr  5 01:46:14 2026 GMT
            Not After : Apr 12 01:46:14 2026 GMT
        Subject: CN=69d1bee6-decd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:94:bc:1f:75:a2:43:9a:88:2a:68:41:8d:
                    f2:26:61:d0:03:44:21:0a:12:80:d7:a6:ea:40:7d:
                    a3:a1:78:c5:ea:df:74:13:67:5e:36:19:41:d3:25:
                    99:47:c4:23:d3:f3:06:d1:16:70:e6:9b:25:a8:4a:
                    46:99:48:81:1b:a6:96:68:ec:17:af:a7:1b:e7:4b:
                    0e:5f:ce:cb:f0:14:d4:53:26:9d:bd:e3:7c:69:ed:
                    5f:c4:bb:39:6a:58:8e:d9:b0:39:42:42:e8:b1:d1:
                    6a:7b:bc:43:99:8f:12:37:e4:20:10:54:ed:64:04:
                    95:a3:e4:2e:f9:e5:0b:61:e1:65:db:87:7b:99:70:
                    2b:cb:42:db:3d:a8:cf:89:57:5b:03:93:9f:9c:6e:
                    81:f0:64:83:62:45:dd:2a:57:b6:27:11:96:7d:6d:
                    40:3b:be:87:48:4f:e3:84:ce:15:d9:f2:e7:25:66:
                    f4:2d:54:bb:f5:00:3f:b5:ff:02:23:94:1d:88:1b:
                    56:cf:8a:76:4b:8a:0f:1a:a8:a7:2d:d2:64:02:00:
                    62:96:72:d6:fb:d5:7c:1a:31:4b:9e:84:d1:c1:98:
                    5c:fc:50:84:6e:ec:e4:a7:02:4f:c9:13:ce:5e:4e:
                    be:f6:95:e6:f5:49:23:a9:74:af:b4:1b:d4:6a:5b:
                    97:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BB:D4:52:F1:3C:62:05:66:7B:E6:8D:98:7E:B8:5D:80:80:34:2A
            X509v3 Authority Key Identifier:
                keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:94:15:85:0b:e2:18:a7:93:ff:26:71:d8:c5:31:c6:54:ef:
         7d:d0:17:bc:10:04:e7:e6:38:b1:e1:36:c3:20:5f:b3:01:c3:
         9a:00:1c:57:fb:1d:97:f8:59:45:78:b4:ae:1c:24:26:2d:33:
         1e:12:2b:82:cd:31:9a:33:9c:51:5b:09:43:f2:16:5c:64:3a:
         a0:52:6e:b9:e6:ba:e8:0d:0d:93:a2:2b:d4:7e:e5:ac:dd:88:
         55:f2:a5:c7:f9:48:02:2e:6b:f3:97:b3:32:2a:ad:a7:df:e9:
         79:e8:68:35:ef:ad:eb:39:52:68:d4:65:4e:d0:aa:ff:ca:f3:
         3d:cb:82:b0:91:d5:d9:e3:89:7e:31:ef:b8:7e:77:59:c7:d2:
         ed:63:a6:61:94:71:f3:77:d8:04:58:29:88:33:0f:b1:ca:93:
         5b:18:a0:e5:bf:e1:f9:9b:14:63:16:94:fa:f2:19:ff:fe:11:
         58:e4:65:12:6c:2f:28:a3:9d:a1:9d:0c:53:f7:8c:75:df:32:
         3f:31:30:ad:ed:d6:d6:59:19:19:01:7c:47:3b:41:e3:ec:3b:
         42:d4:7e:79:67:08:89:11:ef:d5:8e:b3:b1:c4:9e:89:4a:d1:
         ad:89:3d:a4:c4:91:cd:f8:ab:b8:43:9e:6e:f1:e1:16:26:c9:
         e5:e6:1e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:20 2026 by rpki-client