Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft
File:                     RSWIQffwT7Odkdo-P6u1KehSj0k.mft (raw, json)
Hash identifier:          BrN/MWEr6kvYCGiYHrce8FdDjllbvfq2GTbEzrzEI8c=
Subject key identifier:   8B:26:8C:37:73:85:0D:A9:2C:C9:A5:CD:C2:9D:34:5B:48:06:23:49
Authority key identifier: 45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49
Certificate issuer:       /CN=A91317E5/serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49
Certificate serial:       06C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft
Manifest number:          06BC
Signing time:             Sat 04 Apr 2026 22:09:14 +0000
Manifest this update:     Sat 04 Apr 2026 22:09:14 +0000
Manifest next update:     Sat 11 Apr 2026 22:09:14 +0000
Files and hashes:         1: RSWIQffwT7Odkdo-P6u1KehSj0k.crl (hash: vbUuWcNfg18AU0Nif35X8+TNQ74qAIPLs8/O6wWIIWU=)
                          2: 53E7583E3D0511EF99169B21C4F9AE02.roa (hash: B5b4pHn3Q7lWdfVk+2VqlqlxqURQjUTmZj9KZGH2lHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl
                          rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1735 (0x6c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91317E5, serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49
        Validity
            Not Before: Apr  4 22:09:14 2026 GMT
            Not After : Apr 11 22:09:14 2026 GMT
        Subject: CN=69d18c0a-c637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:f9:3f:5b:ef:83:03:ab:9a:5a:b0:e1:f4:
                    15:a9:af:2d:41:7d:ca:00:ce:f4:74:83:32:c8:56:
                    62:f0:36:98:c5:ca:48:8b:32:e7:39:09:46:b2:cd:
                    c3:fa:3c:62:2a:6d:77:9d:50:4d:5c:b8:64:38:0c:
                    75:c1:71:f8:79:3a:a8:41:b2:8a:ac:8f:a1:9d:8f:
                    c8:4e:a3:ea:08:07:4f:11:81:7b:51:18:b5:73:ef:
                    04:72:20:ed:f0:e8:ff:84:1b:60:82:d8:50:bf:3a:
                    d2:3b:7e:00:6f:b8:ff:87:8c:64:01:95:2d:e7:a4:
                    e8:d1:de:9e:f4:43:ef:73:db:ba:59:e0:58:0a:49:
                    20:fc:ad:ee:6f:6d:8d:d2:5e:ff:58:82:36:4e:17:
                    72:98:f7:fa:9c:a7:ef:8d:76:c1:7b:57:53:35:83:
                    9f:88:1d:5f:48:ee:67:bd:85:3c:0f:66:46:54:3d:
                    bd:f2:21:d2:e6:85:5d:1b:a5:6c:39:b6:70:17:2f:
                    16:6a:0e:3c:b4:df:85:33:58:74:d7:2c:f8:fb:b6:
                    6d:87:17:05:f0:52:11:48:2a:b6:2c:05:82:8a:14:
                    a5:63:72:fe:d8:b1:41:8e:d7:73:ad:05:d8:b7:5a:
                    7d:1d:8d:56:14:7a:c5:a1:a8:86:ee:c9:49:f8:ea:
                    0f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:26:8C:37:73:85:0D:A9:2C:C9:A5:CD:C2:9D:34:5B:48:06:23:49
            X509v3 Authority Key Identifier:
                keyid:45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:eb:6e:26:3a:ac:9c:31:5a:40:f6:1f:3a:a9:fe:19:f5:9a:
         45:02:d3:e2:a2:c7:18:ac:21:e3:73:7a:91:9b:ed:c4:9e:ad:
         0d:24:b4:7e:f7:28:25:1b:e9:05:dd:e6:d8:ee:72:92:d5:b1:
         d9:73:8f:dc:19:31:21:5f:a0:9f:69:30:5c:7b:b9:6f:dd:9f:
         14:2b:c8:da:64:71:24:84:6d:ea:9e:16:74:a5:d4:00:0d:ba:
         51:26:e6:a1:e7:7a:a0:0b:ae:0f:3a:75:20:5b:a4:25:8c:bb:
         c9:45:d7:3a:52:b0:e3:98:d7:b9:4d:f6:64:00:06:fe:08:87:
         5b:63:90:b2:6c:3e:e0:50:57:3b:7a:31:a5:49:70:c2:1e:bf:
         b4:36:c0:b8:b9:1d:cd:60:84:1e:f2:01:b6:f6:df:92:32:e9:
         a2:b0:7f:78:3a:09:5f:49:e1:45:69:38:39:17:99:00:ab:31:
         41:ba:91:b8:ca:7c:81:d0:24:b9:61:db:10:f5:2f:cb:0a:91:
         16:32:c4:5b:96:01:03:3c:20:e2:a1:46:31:ab:ad:09:77:bd:
         85:a3:7f:ce:9d:b6:d6:03:f2:59:39:0a:52:81:76:65:ed:ca:
         c6:0e:7a:2d:1c:96:5a:8d:b6:c6:d8:98:c4:e3:8d:f9:15:36:
         f1:84:2d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:19:28 2026 by rpki-client