Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.mft
File:                     0RpQ1ePqDchJb47JVhvb5mrHnUw.mft (raw, json)
Hash identifier:          Jf1tcCjSpm+qahgVW1bqmJzWtszAQav/UAP3Xma9Cro=
Subject key identifier:   47:31:B2:C9:C0:5C:61:D4:37:FE:BD:91:79:E8:A0:A7:59:A2:5E:04
Authority key identifier: D1:1A:50:D5:E3:EA:0D:C8:49:6F:8E:C9:56:1B:DB:E6:6A:C7:9D:4C
Certificate issuer:       /CN=A91FE67F/serialNumber=D11A50D5E3EA0DC8496F8EC9561BDBE66AC79D4C
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0RpQ1ePqDchJb47JVhvb5mrHnUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.mft
Manifest number:          04
Signing time:             Sun 05 Apr 2026 08:33:07 +0000
Manifest this update:     Sun 05 Apr 2026 08:33:07 +0000
Manifest next update:     Sun 12 Apr 2026 08:33:07 +0000
Files and hashes:         1: 0RpQ1ePqDchJb47JVhvb5mrHnUw.crl (hash: oDUSlJrtwcDzcj845Fm27ahbIiZxCMkrg/74y02qBVw=)
                          2: 7D1805702E4211F18DDF32E693833773.roa (hash: eAvktFFlPMI5ncO/3br/ixgJ8aaCullrYEFRoA4e5b0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.crl
                          rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0RpQ1ePqDchJb47JVhvb5mrHnUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE67F, serialNumber=D11A50D5E3EA0DC8496F8EC9561BDBE66AC79D4C
        Validity
            Not Before: Apr  5 08:33:07 2026 GMT
            Not After : Apr 12 08:33:07 2026 GMT
        Subject: CN=69d21e43-4d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1f:13:26:7a:8e:1a:eb:d1:45:26:ea:b2:bf:
                    ae:83:ea:0e:83:7c:97:00:89:27:fd:da:b5:7d:b0:
                    d1:10:88:6a:fd:9b:9a:f2:37:bd:6e:30:10:66:26:
                    2e:c4:06:16:e5:e3:11:f6:17:c8:23:ab:08:60:81:
                    a4:58:ee:2d:c2:c9:d1:1f:29:fc:1b:cd:9b:e6:34:
                    41:bf:9b:9a:4a:01:1a:96:c5:2c:d1:ed:bf:36:8f:
                    98:4c:8f:24:7c:ee:60:15:31:eb:50:a5:27:15:cb:
                    f5:c7:72:02:63:67:9d:b4:8b:a8:f4:fb:46:57:66:
                    dc:89:4e:ee:58:de:48:29:ce:cf:be:42:a7:38:14:
                    98:84:40:3d:5a:90:69:f8:0d:47:b8:70:63:a4:ab:
                    af:79:31:bd:0a:58:74:be:6a:44:84:41:a4:bd:af:
                    fb:e3:76:b9:d9:61:ea:0f:0d:b0:06:ad:e4:c1:6d:
                    8c:52:ce:00:e7:9f:30:ab:af:db:dc:52:79:08:b4:
                    d1:b5:a0:a0:e8:af:55:8b:94:32:17:89:df:f1:5a:
                    b8:c8:72:43:b7:08:13:00:d9:12:46:28:d8:64:e4:
                    cf:d9:c9:1d:e0:4c:d3:e9:ff:39:0c:d0:1c:ad:41:
                    89:92:c0:09:41:6a:85:5b:ff:1b:05:21:f1:a0:43:
                    b1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:31:B2:C9:C0:5C:61:D4:37:FE:BD:91:79:E8:A0:A7:59:A2:5E:04
            X509v3 Authority Key Identifier:
                keyid:D1:1A:50:D5:E3:EA:0D:C8:49:6F:8E:C9:56:1B:DB:E6:6A:C7:9D:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0RpQ1ePqDchJb47JVhvb5mrHnUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:3b:7d:94:e9:6f:b4:28:2e:86:56:87:00:8f:b7:48:50:04:
         ff:6b:b4:65:92:cb:5a:fe:9a:53:70:ec:85:64:aa:3c:85:1f:
         11:70:ab:80:76:64:46:1a:fd:13:ac:9f:79:c9:76:5a:79:96:
         25:db:28:a3:be:1b:e7:d3:19:0d:cd:7f:05:8c:6a:72:b3:20:
         03:77:cf:78:79:d3:db:b1:fb:f6:72:d8:48:cc:30:fa:32:3b:
         24:a2:eb:b2:46:de:6e:c0:8a:ee:43:fa:bb:66:a2:9f:93:de:
         02:75:3d:44:e3:d5:06:ee:5c:41:1c:a6:bd:63:02:af:e4:16:
         4c:09:5a:ff:a3:77:12:18:ba:1a:76:db:df:f1:f7:26:58:c9:
         c1:bd:44:cb:13:10:29:1b:83:ba:10:0e:84:bb:3c:ca:32:29:
         e7:ca:4b:51:e8:22:71:47:ab:76:97:7b:fe:b0:1f:60:32:3a:
         fe:56:06:a0:74:dc:69:c2:64:c2:d6:b2:59:19:da:6f:c1:e5:
         d6:c8:c0:39:c2:b5:fc:51:bd:9d:93:82:ae:ad:9e:77:36:cd:
         16:55:18:03:f9:2d:8c:31:b6:d8:73:a3:77:4f:8a:82:20:11:
         2c:06:07:39:a9:20:2f:24:ef:68:17:ef:77:83:31:5e:ff:df:
         ac:52:de:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:37:27 2026 by rpki-client