Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
File:                     n4mmBPRc629oBPtTTq3CQWa9Dyk.mft (raw, json)
Hash identifier:          J3UfZ3GGWdfh0Q9kAT9lv1hVYJrWyY+jGZQ3C8Oel8Q=
Subject key identifier:   95:38:D7:30:53:E2:2A:EE:6C:40:91:A0:FF:EA:08:48:36:E0:4A:A6
Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
Certificate issuer:       /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Certificate serial:       E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
Manifest number:          D1
Signing time:             Sun 05 Apr 2026 06:09:57 +0000
Manifest this update:     Sun 05 Apr 2026 06:09:56 +0000
Manifest next update:     Sun 12 Apr 2026 06:09:56 +0000
Files and hashes:         1: n4mmBPRc629oBPtTTq3CQWa9Dyk.crl (hash: IAJbfEwGlhkDEbtLgXuJqLgFDZKbMVj10bCdKs3nZ8c=)
                          2: 27B19A58F99911EFB6B7F427C4F9AE02.roa (hash: A9CzU8MDj6rLJSlF21HcobLlJ5jlCrKiSpiRirq4aHI=)
                          3: 88E11172F99A11EFA825D961C4F9AE02.roa (hash: bi6yZUP9Smkax+xVdkGT/x3hFrhWjvPzPQn2lGZjFLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
                          rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
        Validity
            Not Before: Apr  5 06:09:56 2026 GMT
            Not After : Apr 12 06:09:56 2026 GMT
        Subject: CN=69d1fcb5-1650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:20:c8:a4:aa:3d:5f:02:21:2c:8b:37:f7:18:
                    f4:72:54:61:3a:b3:9d:75:c7:92:9a:06:e8:16:bb:
                    d3:cc:01:71:06:3a:14:40:43:02:30:ff:63:05:82:
                    ad:7b:3e:41:0c:cf:33:42:fa:23:23:5d:b7:01:a3:
                    fe:0a:ed:76:9c:cb:55:21:02:f5:8b:a6:05:0c:b6:
                    92:ef:b7:45:05:8b:8a:c8:a0:b0:2e:52:df:26:8d:
                    04:34:2e:7b:ad:0c:68:0d:97:56:5e:1d:f6:cd:68:
                    33:8c:92:94:eb:42:49:d6:21:d1:97:37:3f:32:2c:
                    7d:fa:b7:9b:42:74:24:bb:fd:46:f2:63:42:7c:8a:
                    b7:b0:d0:a2:64:51:af:31:28:97:ed:1b:4c:b3:69:
                    dc:a4:be:28:cb:f0:f2:f2:71:19:28:2c:14:ab:cb:
                    a7:d3:fb:fe:29:99:94:22:77:1f:37:b2:ef:66:c9:
                    48:c2:63:46:73:82:9f:2c:ca:d2:0c:a5:c0:29:04:
                    c6:08:c3:3e:0a:81:53:44:2a:84:8c:ac:54:c1:bf:
                    5b:f2:0a:27:77:43:9c:5e:29:75:c9:87:ca:84:03:
                    60:43:de:f2:d8:9f:40:75:04:13:87:4b:3e:42:ac:
                    cc:0e:cc:27:83:21:b1:68:36:ab:71:1e:7c:11:8e:
                    62:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:38:D7:30:53:E2:2A:EE:6C:40:91:A0:FF:EA:08:48:36:E0:4A:A6
            X509v3 Authority Key Identifier:
                keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7e:dd:e3:eb:65:7f:d3:b1:3f:3b:dc:49:22:d0:2c:82:08:
         c0:b1:27:46:98:d2:4d:d7:bb:1a:e3:27:5e:dd:47:1a:cb:92:
         d5:b6:d2:b4:a6:2a:f0:21:bc:a6:a1:98:1c:40:8b:85:7e:46:
         38:62:73:6d:7f:ab:bb:df:80:51:0d:4e:25:e3:93:3b:20:00:
         53:8c:d7:e6:ed:8a:0a:a9:5d:41:c4:34:4e:44:7d:0a:f1:e2:
         36:05:da:b6:da:40:7c:8a:d9:26:c2:28:d6:c8:78:49:19:ae:
         3c:dd:1f:a3:74:f1:bb:22:9a:e1:7c:3e:33:55:a3:75:73:82:
         ef:44:3e:30:48:d8:a1:bb:da:0a:cb:a6:b8:ab:0b:4a:68:3d:
         a0:5f:29:f0:c6:07:87:7d:ff:1d:84:d9:00:b3:6d:e4:47:e9:
         13:d1:c7:ff:80:15:1a:2e:e9:5c:0b:67:83:69:4e:f3:43:56:
         74:e7:c2:90:da:8f:7a:ac:6b:30:83:eb:6b:34:dd:5c:fd:62:
         88:50:ca:5d:3b:ac:5a:f7:e0:bf:3b:4c:43:06:0c:e9:4f:73:
         f1:db:0f:73:a4:69:02:86:67:38:85:2d:15:1a:2c:85:a4:ab:
         55:54:3c:b4:25:7a:31:2e:23:4d:3f:33:c6:a6:b3:52:7c:eb:
         13:b7:d7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:47:29 2026 by rpki-client