Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
File:                     mgI7gKvPTmeX04jA3oFgoW6xXf4.mft (raw, json)
Hash identifier:          BFiEo413dj4DO62iGJcx+dAiOLiGSxJrwQb0TuQH9Po=
Subject key identifier:   4E:98:19:12:B9:DC:2C:40:F3:C2:FB:26:BE:C1:0A:31:73:E5:EF:71
Authority key identifier: 9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE
Certificate issuer:       /CN=A91EF6EF/serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
Manifest number:          95
Signing time:             Sun 05 Apr 2026 06:51:52 +0000
Manifest this update:     Sun 05 Apr 2026 06:51:51 +0000
Manifest next update:     Sun 12 Apr 2026 06:51:51 +0000
Files and hashes:         1: mgI7gKvPTmeX04jA3oFgoW6xXf4.crl (hash: f14s+H3M5TuHVbVKFhY0YMoBwH4s42/AF03LwyvEXcI=)
                          2: 3C15F928579311F0B296C030C4F9AE02.roa (hash: BNr56w4gucIUPsbq13wgpUL195UkxJVM3QKa9wUEfME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl
                          rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF6EF, serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE
        Validity
            Not Before: Apr  5 06:51:51 2026 GMT
            Not After : Apr 12 06:51:51 2026 GMT
        Subject: CN=69d20688-1bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0b:92:ad:9d:95:d9:4c:7a:e7:27:63:f7:2e:
                    14:67:60:71:b5:22:f4:b2:03:45:27:72:8d:c9:2b:
                    42:64:de:7d:ad:1a:c6:8f:24:a9:04:e4:7d:4d:d5:
                    58:28:b6:c7:c3:f9:64:d1:df:10:50:1b:2b:c4:0e:
                    8e:00:fb:98:d3:43:b5:21:9b:db:20:d1:ba:62:29:
                    7f:79:51:af:51:f1:6d:52:be:45:9f:b9:1a:a9:6f:
                    32:4d:29:10:cc:1f:f4:a9:35:44:37:bf:79:c1:01:
                    1a:51:76:4e:74:93:49:80:dc:f6:73:b0:4f:71:0b:
                    b4:d5:5c:01:18:1c:ed:9e:35:09:97:c3:ee:bc:35:
                    98:e1:7f:9f:b0:c6:76:00:e0:ee:15:3a:9d:20:2f:
                    a8:74:04:b8:f2:ce:e4:3a:50:7b:33:1e:6a:b1:8e:
                    8e:20:87:d9:b5:1b:ba:79:0c:b9:a4:3b:40:9b:61:
                    52:34:8b:ac:f0:60:87:39:74:ee:28:b4:29:48:b8:
                    86:f8:3a:03:5a:e4:ec:f0:8f:a6:97:f2:22:37:6f:
                    58:9d:c9:b5:8d:65:fb:fc:c3:b6:c5:47:7b:61:4f:
                    22:56:95:f1:90:26:e5:19:64:1c:93:f7:c9:f9:59:
                    fd:79:81:45:00:01:1b:b3:4c:0a:ce:cc:22:96:eb:
                    26:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:98:19:12:B9:DC:2C:40:F3:C2:FB:26:BE:C1:0A:31:73:E5:EF:71
            X509v3 Authority Key Identifier:
                keyid:9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:f1:3e:ea:d0:dd:80:4b:44:0e:3d:38:20:fe:48:f2:cc:aa:
         2d:ec:1b:e0:8f:c7:92:93:9e:57:9b:94:1f:57:fa:cd:f8:2f:
         59:79:4a:57:7f:f2:ac:4e:55:5a:07:d8:8d:de:e5:29:d6:86:
         3c:49:5f:33:ff:7c:5d:a7:b2:21:e0:20:1d:ed:82:b9:d9:86:
         8c:db:e2:06:70:7a:1d:89:6b:f7:fd:50:9f:91:0e:e8:97:04:
         1c:0d:b5:7f:9f:44:cc:14:ad:b0:79:55:3e:5f:e5:d1:de:2b:
         5c:69:28:0a:37:3a:3f:02:13:55:9e:26:5a:aa:1b:73:be:0b:
         09:b1:44:c3:97:46:26:3b:2d:e7:1e:e9:f4:10:fa:c2:37:cd:
         43:41:4d:ed:03:27:dd:5a:1b:60:b6:eb:e7:ae:2e:9e:ee:25:
         92:8c:c2:f6:9e:35:d1:84:ad:cf:21:89:f5:9b:7e:d0:4a:7f:
         b4:b8:1d:ad:1d:5f:a6:f2:ba:de:c5:b7:1f:bf:5a:a3:0b:c6:
         f7:f0:02:d1:c6:c0:ef:b9:64:a2:82:05:2c:84:75:5a:c8:1f:
         a5:60:77:4d:46:80:d1:82:74:b0:27:b1:ea:68:a6:2b:ae:db:
         55:23:51:de:22:26:fa:34:20:26:b6:7e:81:ab:eb:a8:50:25:
         ee:c5:ae:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:44:10 2026 by rpki-client