Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
File:                     oC73fAXKEwwiKYXNdK6TjaeaT78.mft (raw, json)
Hash identifier:          sXr27QOwfuRfA+AsXrC5tgAogq2O22YtAZ7n61wgS/0=
Subject key identifier:   35:5B:22:F9:3D:15:31:D4:F3:69:6E:E9:3C:29:62:FA:61:A1:BE:0D
Authority key identifier: A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF
Certificate issuer:       /CN=A91398E5/serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF
Certificate serial:       09E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
Manifest number:          2193
Signing time:             Sat 04 Apr 2026 16:28:16 +0000
Manifest this update:     Sat 04 Apr 2026 16:28:16 +0000
Manifest next update:     Sat 11 Apr 2026 16:28:16 +0000
Files and hashes:         1: oC73fAXKEwwiKYXNdK6TjaeaT78.crl (hash: Meu3Dn5vomTj/6vFnkhruGlWX501IlCK+7Lt9FGPUOg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl
                          rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2529 (0x9e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91398E5, serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF
        Validity
            Not Before: Apr  4 16:28:16 2026 GMT
            Not After : Apr 11 16:28:16 2026 GMT
        Subject: CN=69d13c20-e025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d4:f0:6b:99:e3:46:ef:65:23:9d:ea:67:0e:
                    7e:41:36:bc:f2:b3:d4:c7:79:dc:92:03:19:60:4b:
                    83:4f:58:5e:7b:0a:cd:62:59:51:17:ea:5f:ba:27:
                    7b:65:bc:aa:d9:0d:0b:be:e1:92:a5:c2:0f:35:a1:
                    c6:49:11:40:d3:26:91:3b:ec:c9:f2:f4:cb:3e:87:
                    ee:95:bc:1e:17:e0:f4:98:06:1c:51:fb:30:84:ba:
                    79:36:5c:1c:5e:11:66:8b:ae:ba:f1:fe:99:c4:a2:
                    e4:6d:0f:cf:d9:67:dd:06:80:f1:2a:f2:55:44:dc:
                    cb:7a:56:2d:e8:83:76:34:09:1a:a4:3a:24:77:05:
                    ae:11:ac:1b:d5:7c:ac:6b:35:c3:4f:56:80:6f:dc:
                    3d:a3:ed:2c:9d:d0:c5:56:29:08:87:9f:a0:80:e4:
                    06:d9:c6:dd:b9:00:c7:26:a0:8d:64:41:13:b0:36:
                    b5:18:81:7e:e9:3b:d7:17:5d:ec:c0:17:75:95:fe:
                    24:c7:0d:f5:40:83:7e:39:4c:02:57:e7:7a:75:27:
                    20:fd:71:f8:68:57:bc:e6:7f:92:d1:ed:c5:4d:a1:
                    84:35:3b:67:f4:35:90:20:bf:ce:0e:4a:2a:9a:e2:
                    49:88:93:29:6a:61:54:15:7b:d8:36:37:f6:38:97:
                    8e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5B:22:F9:3D:15:31:D4:F3:69:6E:E9:3C:29:62:FA:61:A1:BE:0D
            X509v3 Authority Key Identifier:
                keyid:A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:80:d8:6d:de:90:52:b7:5f:36:eb:85:d7:99:e8:e6:11:23:
         0b:35:bc:90:d4:3a:2f:3b:20:3b:ed:d5:ca:0f:60:e5:d5:00:
         fb:d9:3c:09:b2:44:af:45:38:bf:d8:10:25:2a:9f:5a:ac:1f:
         6e:59:03:b7:3e:6f:e9:10:87:9c:80:45:38:9a:e2:82:29:38:
         35:cd:a9:d3:ac:34:20:c0:05:5a:a3:65:f5:55:13:eb:60:fe:
         cd:9f:59:7f:b6:36:fe:70:d1:07:27:2e:9e:9b:b7:72:ef:5c:
         a4:0e:45:8f:ff:9b:9d:69:46:68:5b:0a:c0:1b:cb:ca:41:43:
         8e:49:9d:3d:7c:5e:3e:a3:ec:f5:e6:c8:00:4e:e4:a4:16:b0:
         7e:8d:48:49:77:ec:8e:d9:af:a3:b9:48:66:ee:03:45:9d:ae:
         0e:72:e1:86:34:3f:09:2f:22:dd:8e:27:7e:64:44:53:27:ee:
         01:c7:a7:6b:05:77:c4:b7:1d:56:41:f4:1c:80:f3:b6:5b:00:
         dc:f3:a1:e2:ea:6f:b2:84:c6:6c:cb:89:92:da:fa:b7:d2:62:
         6a:f0:f7:73:ea:43:ab:14:26:6f:4c:5d:a5:10:ce:22:78:f3:
         da:dc:6f:84:0a:a5:66:b0:5a:0d:4a:26:a8:59:22:bd:1f:b1:
         de:b4:61:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:48 2026 by rpki-client