Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft
File:                     Di3qFP18_9DQqeo-N0N7keRUsjY.mft (raw, json)
Hash identifier:          gAn8LU4ibUb+aKNTsDGQmJDvlgj9LHuvZTr6fYlSWd0=
Subject key identifier:   F4:D8:7E:69:B6:A1:A8:C8:C0:76:C9:24:7A:F4:4A:57:4D:78:9D:75
Authority key identifier: 0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36
Certificate issuer:       /CN=A91560A3/serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236
Certificate serial:       1226
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft
Manifest number:          121D
Signing time:             Sat 04 Apr 2026 17:01:44 +0000
Manifest this update:     Sat 04 Apr 2026 17:01:44 +0000
Manifest next update:     Sat 11 Apr 2026 17:01:44 +0000
Files and hashes:         1: Di3qFP18_9DQqeo-N0N7keRUsjY.crl (hash: mH3PhIZ8YoGkkh5O1g7rxxpsfkwsCUHMCRfPHsKnJzo=)
                          2: 2245CE0A606811EB80E3D531C4F9AE02.roa (hash: VX0mY2WD7ZljHbXizsuob/HBTfQ0LiFuSS4MaL/xmKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl
                          rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4646 (0x1226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91560A3, serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236
        Validity
            Not Before: Apr  4 17:01:44 2026 GMT
            Not After : Apr 11 17:01:44 2026 GMT
        Subject: CN=69d143f8-693a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:d0:52:c4:f2:be:cc:b4:1b:2d:d3:7b:32:
                    69:f9:28:7f:df:93:6b:b0:6e:29:cc:a7:e8:e4:8e:
                    0e:fd:ca:9f:05:a1:03:30:c9:f2:19:f0:d9:c5:48:
                    f8:24:5e:52:83:56:c9:93:85:4f:2f:21:a0:9c:3e:
                    37:77:4c:e2:f0:67:9f:95:60:88:21:21:7c:56:4a:
                    3c:13:34:b9:14:d7:f5:a5:36:79:5a:6d:69:5c:88:
                    9f:22:bc:7e:6b:5c:d6:15:fe:eb:ad:2c:82:95:f3:
                    05:a7:7b:49:5f:34:8e:5b:cb:ed:0b:23:d7:1e:74:
                    f2:32:fe:2c:c4:b6:4e:1f:5d:6b:2e:be:ed:e1:0b:
                    6f:b0:5d:7e:d0:c4:cd:29:8e:ee:16:6d:1f:3f:9a:
                    09:06:54:ec:a5:3a:82:b6:4c:34:17:93:dc:54:da:
                    7d:42:f9:7e:67:6e:be:72:84:ce:37:08:83:d7:6a:
                    0c:64:a7:de:e7:22:f8:c2:19:84:48:79:d3:62:90:
                    0c:74:1b:47:94:ae:71:e2:c1:68:93:18:07:0f:a8:
                    b7:6c:31:59:7f:19:17:44:95:ed:ce:7b:2c:12:54:
                    a5:f9:6b:0a:b3:69:02:b0:d2:68:de:56:12:b2:c6:
                    b6:48:0b:a4:ed:a1:b5:f6:b0:6d:b6:65:50:70:94:
                    d3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D8:7E:69:B6:A1:A8:C8:C0:76:C9:24:7A:F4:4A:57:4D:78:9D:75
            X509v3 Authority Key Identifier:
                keyid:0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c0:bb:06:ee:0c:9e:67:fc:c3:62:8c:02:26:9f:85:42:d8:
         8b:50:cd:ab:df:5f:cd:5c:37:52:9a:f0:a9:04:b5:74:55:3d:
         bd:d4:a8:9e:aa:9e:1a:76:7f:a9:1d:2d:a1:c8:5e:74:5c:a7:
         cd:46:b4:52:4a:47:84:5a:ac:22:e8:2d:c7:57:90:fe:72:71:
         76:ae:2b:e9:45:a3:65:d9:b0:ab:f8:48:22:6f:1e:1a:c8:6f:
         4a:27:c0:ff:b5:0c:cc:03:89:84:6a:e3:8d:57:34:a0:e2:98:
         13:f9:1a:e0:e2:fa:bb:de:b2:a2:47:05:9c:f6:29:2d:0e:01:
         38:76:db:32:89:fd:0f:5c:c5:46:42:38:29:39:42:df:d3:bd:
         8e:4b:6c:ff:fd:9a:63:b7:9d:b7:f4:43:9f:46:1b:47:c7:bb:
         6d:cc:cd:6c:a7:55:57:68:0c:56:bd:54:db:c3:32:10:07:5b:
         8e:7e:ee:49:09:78:63:ce:e8:00:b5:7d:35:a5:14:19:57:4a:
         27:85:30:7b:16:89:f6:bd:d8:25:7d:1c:90:95:03:1d:3b:44:
         35:ab:6b:ad:87:99:6d:f2:34:86:23:b0:d2:af:65:22:a4:6f:
         2a:b2:a6:11:c2:73:f9:c2:8c:89:2c:ca:17:8d:7b:02:19:bc:
         66:78:28:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:34:43 2026 by rpki-client