Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft
File:                     nr2hI9nugwlDBaEYDCoIBX_lQGo.mft (raw, json)
Hash identifier:          cOR/ParQUzMNs1CLiQ6PaVq2Eudqt0cuEq+Cp04DV3w=
Subject key identifier:   2B:6C:EC:6E:7A:8E:1C:0F:13:1F:24:FB:4C:0A:61:47:D6:0E:F3:9A
Authority key identifier: 9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A
Certificate issuer:       /CN=A91425C3/serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft
Manifest number:          92
Signing time:             Fri 17 Apr 2026 07:16:50 +0000
Manifest this update:     Fri 17 Apr 2026 07:16:50 +0000
Manifest next update:     Fri 24 Apr 2026 07:16:50 +0000
Files and hashes:         1: nr2hI9nugwlDBaEYDCoIBX_lQGo.crl (hash: unDD/pAgdz13AXJLp661ZdZqV4B618r44vgaP7E1VxU=)
                          2: 224FBC52EFCF11F0A018F59D746F56BC.roa (hash: l6zP7eAxKoViI6F3M9uDYfZY33CWARrIielkD1703l4=)
                          3: 8C538C5AEFCF11F0889DE39E746F56BC.roa (hash: eiSYQZ4JbJxsufS9RcJajhzup1MJX6NMX/+qc2RSIq8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl
                          rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91425C3, serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A
        Validity
            Not Before: Apr 17 07:16:50 2026 GMT
            Not After : Apr 24 07:16:50 2026 GMT
        Subject: CN=69e1de62-c3ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b3:27:93:1f:86:83:88:9a:d2:18:0f:b1:4f:
                    69:b6:9c:6c:7d:6c:8d:16:5c:46:7e:33:72:46:07:
                    89:59:1d:39:00:e7:b0:16:0c:08:5a:61:50:2e:d2:
                    da:dd:c5:42:4b:09:6b:9a:3d:b5:6a:30:e9:0a:0a:
                    a5:54:ff:23:d6:1e:96:66:01:66:a9:2b:50:50:3d:
                    a8:8a:42:50:35:fc:ba:b9:b4:c7:4c:78:c0:b4:76:
                    b1:b4:73:8e:5c:99:1c:43:d4:85:10:a7:85:7e:82:
                    4d:c0:a2:0f:59:c6:e5:8d:31:0e:79:c7:47:d3:3f:
                    5e:73:50:6e:be:b9:7a:ed:8f:ec:8f:a6:43:a1:dd:
                    3d:45:85:22:9d:f2:b2:db:7c:06:bb:03:7e:31:1e:
                    e1:7b:6f:31:37:99:58:5a:1e:ba:94:0a:b2:88:70:
                    af:68:dc:65:10:bb:e4:c5:bb:74:f4:f7:cf:ca:c1:
                    06:0c:bf:ec:9a:15:26:93:a1:b7:c4:0a:df:49:f3:
                    0c:2b:d3:44:e8:ca:34:96:72:b2:e1:a0:c7:ef:16:
                    98:15:cd:8c:87:9c:c9:f3:2b:9e:6f:a4:80:d0:b9:
                    c6:15:60:60:aa:42:05:86:da:28:26:7c:d3:6b:be:
                    e4:96:3d:dc:fa:20:9a:16:04:66:31:4b:79:1b:f9:
                    be:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6C:EC:6E:7A:8E:1C:0F:13:1F:24:FB:4C:0A:61:47:D6:0E:F3:9A
            X509v3 Authority Key Identifier:
                keyid:9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5a:1e:d0:88:09:38:45:27:ac:43:a0:1e:65:ea:a9:79:fd:
         50:3b:c1:31:b6:3f:c9:94:9d:43:2c:5a:a0:69:ae:14:63:13:
         32:36:b6:47:44:d0:5a:6c:87:e3:ca:9d:be:ba:e9:9f:f8:3e:
         ed:b9:02:84:ba:78:99:96:c8:d2:07:93:64:36:16:70:56:18:
         34:83:ae:19:6e:81:55:e3:9b:7a:47:4f:31:ff:ed:01:a6:0b:
         b6:5d:c5:98:5d:28:ef:ff:94:ff:68:63:49:d0:63:69:59:6b:
         03:03:68:92:ac:21:67:8a:a8:b7:4e:ba:1b:4e:88:70:0a:98:
         4d:90:56:6e:4f:2e:dc:64:aa:5e:d2:d4:23:8b:b1:25:bc:58:
         bb:0c:84:41:37:98:ef:fb:08:9f:13:c7:ef:9e:f1:6a:58:83:
         f5:4a:07:ef:af:7c:6c:d2:22:be:7f:04:e3:ed:6e:c3:0b:4f:
         23:ce:6d:6a:73:3f:ce:87:c1:e9:ae:2e:ef:f9:1e:6f:8d:c5:
         1c:94:62:27:76:6b:ac:61:57:e1:68:51:d0:0f:1e:e8:01:11:
         8c:e3:aa:8d:54:dd:99:55:03:e1:32:ba:7a:99:32:98:73:d7:
         6a:b0:b5:c8:73:27:cc:d6:dd:10:c6:30:bc:fb:bb:5c:95:4a:
         b9:db:ef:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:05:50 2026 by rpki-client