Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
File:                     k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft (raw, json)
Hash identifier:          BlktIQ1p6A4+E8F9yGHbvXpoSILg4YnbKTfvSi0Z1QA=
Subject key identifier:   6A:F6:5C:26:BC:EE:DD:B6:AA:35:6C:6A:76:B3:07:3C:02:24:5D:0D
Authority key identifier: 93:68:EA:49:4F:51:1E:20:C1:D5:F7:3D:D5:39:E3:D8:46:5B:DA:9C
Certificate issuer:       /CN=A91410B7/serialNumber=9368EA494F511E20C1D5F73DD539E3D8465BDA9C
Certificate serial:       0824
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
Manifest number:          081C
Signing time:             Sat 04 Apr 2026 20:50:16 +0000
Manifest this update:     Sat 04 Apr 2026 20:50:15 +0000
Manifest next update:     Sat 11 Apr 2026 20:50:15 +0000
Files and hashes:         1: k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl (hash: PsJ1GjDWNbuRmDeOOsAcwdFknnwp6X0nLdfS7+54iiI=)
                          2: B097C8B013B111EB8864681BC4F9AE02.roa (hash: UFYuBjoB49sRUE7p1YsnbktSNsP8iexgtfxlH9Oq58Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl
                          rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2084 (0x824)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91410B7, serialNumber=9368EA494F511E20C1D5F73DD539E3D8465BDA9C
        Validity
            Not Before: Apr  4 20:50:15 2026 GMT
            Not After : Apr 11 20:50:15 2026 GMT
        Subject: CN=69d17987-3cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e1:da:41:c2:c9:0c:c8:89:69:05:31:ae:6b:
                    a6:12:4d:24:80:ac:94:01:bb:ee:fe:91:36:87:53:
                    83:10:b7:39:21:d2:2a:ee:7f:93:a5:15:4a:b1:f7:
                    e2:2e:db:c3:8f:ab:a2:a4:c1:01:78:f6:1d:a2:f6:
                    7f:c0:98:4a:31:ec:31:3a:b2:42:c0:4f:f1:15:7f:
                    2e:78:1a:8a:ca:c6:46:6e:b4:31:9a:43:f8:83:aa:
                    24:10:34:5a:7b:73:5a:f3:25:ea:0d:e9:26:15:78:
                    80:bb:09:2b:ee:bd:41:24:9e:8a:17:03:24:b6:cd:
                    78:1d:19:4c:60:11:a1:ff:ec:7a:53:2d:36:0c:25:
                    0a:b8:83:4c:9f:f5:a4:f7:8b:3a:a1:52:e3:bd:ed:
                    64:b2:22:be:0f:f3:48:d4:65:7c:a2:82:64:9e:fc:
                    eb:40:19:14:f8:a4:4b:e5:aa:d1:a4:bf:c5:f7:f9:
                    5c:eb:3b:5b:8e:bc:b8:66:41:9e:35:05:31:d7:a0:
                    72:27:e1:c4:db:5f:c7:c1:31:8c:4d:f5:81:ab:8c:
                    7c:11:4c:a9:79:73:11:1c:5b:da:b3:7a:4f:5b:6d:
                    f0:fd:f5:6c:18:96:1b:85:f8:da:44:e0:f0:49:a9:
                    c4:c5:63:ef:9f:9c:8d:ae:46:e9:17:df:c7:4d:f0:
                    2f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F6:5C:26:BC:EE:DD:B6:AA:35:6C:6A:76:B3:07:3C:02:24:5D:0D
            X509v3 Authority Key Identifier:
                keyid:93:68:EA:49:4F:51:1E:20:C1:D5:F7:3D:D5:39:E3:D8:46:5B:DA:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f4:2b:fa:a8:ec:02:68:77:7a:b9:1a:08:62:24:70:83:83:
         72:d0:31:13:db:f7:77:22:9d:17:a2:57:fc:e2:d6:2b:57:b9:
         8c:6c:1b:75:b7:30:33:1b:bd:38:ce:8f:b1:c1:63:19:2e:51:
         19:2d:2f:26:10:a5:19:08:3f:7f:e3:5b:4f:4b:50:3d:a9:df:
         fc:ca:ef:0a:2e:50:f6:75:7b:d7:e4:e0:fa:8a:e6:04:07:9e:
         2f:70:b4:a1:a1:85:ce:72:b6:92:cf:8c:7d:85:28:63:48:a6:
         7d:ec:a7:d3:75:a8:9e:be:11:79:1e:99:1c:2e:21:ff:a5:b0:
         7a:25:96:ee:8d:33:e1:2a:04:1c:42:9e:f2:44:d0:29:ea:e0:
         0e:d2:af:42:89:ec:d8:db:30:5a:c3:20:f1:c3:93:4d:33:be:
         bd:a9:a4:35:03:6a:ae:15:ed:67:c5:de:45:80:7f:04:24:4d:
         38:8f:f5:22:11:de:4e:41:9c:cd:11:38:dc:08:84:5f:e6:95:
         43:a4:53:77:fd:3a:eb:ff:7f:20:7d:81:cd:17:74:f1:ff:68:
         26:88:69:f4:1a:79:b9:24:aa:7f:b4:9c:b6:c9:03:0a:82:4e:
         25:8f:1c:3c:86:c6:39:70:d8:65:f9:32:9f:c8:86:c9:10:28:
         08:e7:c0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:08 2026 by rpki-client