Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
File:                     3K6HG3xct5vH7PZ5s7LTyVan2eM.mft (raw, json)
Hash identifier:          9efF+iec3k/kxE6gdxi73xpyYJl2br0ARt2K2IM/jBA=
Subject key identifier:   B6:B7:7E:6D:79:7D:C4:D0:C9:F9:E4:19:A1:65:AF:FA:A8:72:41:70
Authority key identifier: DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3
Certificate issuer:       /CN=A91604AC/serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
Certificate serial:       072B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
Manifest number:          071D
Signing time:             Mon 20 Apr 2026 21:53:17 +0000
Manifest this update:     Mon 20 Apr 2026 21:53:16 +0000
Manifest next update:     Mon 27 Apr 2026 21:53:16 +0000
Files and hashes:         1: 3K6HG3xct5vH7PZ5s7LTyVan2eM.crl (hash: S/cj6KXL7urhc8EFkjstfmv3WXhm35BARzd3vWIyYSE=)
                          2: 0081F3D6F22111EE8EEC070EC4F9AE02.roa (hash: gt5MzzOyMRjHAQJ1OB2Ov2agdEJbjl0iI4HuG5lS+Fs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl
                          rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 21:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1835 (0x72b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91604AC, serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
        Validity
            Not Before: Apr 20 21:53:16 2026 GMT
            Not After : Apr 27 21:53:16 2026 GMT
        Subject: CN=69e6a04c-5ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e5:70:eb:20:44:a8:41:73:9b:73:68:ab:5a:
                    02:44:1f:f1:56:04:70:bd:4b:c4:23:12:64:fa:77:
                    fe:88:63:58:16:94:5e:ad:c0:df:52:90:00:97:8c:
                    63:b4:f4:85:0c:fd:d9:c4:5f:7b:06:f0:76:fe:25:
                    0e:48:a4:bc:73:6d:40:39:23:c0:48:96:4a:6e:b7:
                    dc:b0:3f:51:6e:c5:29:f6:37:23:4e:b1:ea:3d:35:
                    dc:a6:17:f1:ae:99:22:cb:6b:65:bb:95:79:56:77:
                    bb:ac:35:72:56:41:f7:93:4c:f4:b5:5a:cb:26:5a:
                    1d:e1:ab:66:ec:21:b2:9e:99:bc:8f:72:2a:32:47:
                    a7:7e:f0:17:1a:09:d3:12:47:5a:de:ff:25:ea:32:
                    98:ea:a3:c8:55:e5:a7:a6:e9:83:8b:54:8b:3e:40:
                    5d:b5:83:ee:c4:dd:e8:5f:64:30:20:45:6f:3d:53:
                    99:10:36:66:37:4d:41:d5:0c:34:a2:a1:81:25:67:
                    78:f5:a8:e9:e5:b9:2e:ee:d4:26:73:26:63:17:2c:
                    63:8c:80:ec:75:ee:5d:04:8e:69:c3:4e:fa:93:2e:
                    dc:4a:d7:cf:84:27:89:e1:80:1d:41:08:66:a0:1a:
                    9f:fb:cc:26:a8:5f:5a:5e:96:2b:d4:ac:c3:c7:e1:
                    9f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B7:7E:6D:79:7D:C4:D0:C9:F9:E4:19:A1:65:AF:FA:A8:72:41:70
            X509v3 Authority Key Identifier:
                keyid:DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:19:2d:7d:08:7b:1f:87:cc:d9:db:a1:5c:13:2e:28:23:fe:
         4e:74:87:6f:b8:b1:9d:dc:30:75:79:5a:1b:c9:fd:ee:b2:ef:
         c2:5f:53:cd:8e:a1:99:84:b6:f7:40:dc:ae:9b:7f:6a:0e:c2:
         d3:a1:f5:d4:5a:b4:80:fe:d4:d9:db:8e:06:e6:93:d6:22:d1:
         da:80:a6:46:a2:0c:2d:54:3d:b4:38:4d:3a:24:8e:4f:9f:e6:
         4f:5b:28:4c:e2:1a:34:e7:0a:59:40:9b:0a:33:56:41:fb:9d:
         5c:c5:05:57:3b:c4:aa:01:f9:bd:29:7b:77:4b:10:7f:d6:e0:
         74:25:e2:09:1c:ff:b3:53:76:33:fb:44:ea:21:43:c5:fb:fc:
         15:4a:7b:12:a5:69:a2:58:b6:bc:46:6f:dd:07:1d:9e:f4:7b:
         8b:cd:5a:0d:ba:74:9a:14:0e:22:df:10:18:49:de:3e:00:13:
         fb:2a:a4:60:cd:f1:28:58:87:aa:5b:69:ca:13:ed:03:e5:d2:
         bb:6b:d5:33:ea:bb:fd:5a:12:6d:3f:e2:27:a6:e1:95:9e:9b:
         6a:92:52:d8:ed:c3:ad:a1:47:33:58:12:d1:dc:17:ff:2b:16:
         25:4e:7e:61:cb:3a:c6:c0:c5:5a:f4:79:ec:fe:d2:58:61:2f:
         89:e4:35:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:27:41 2026 by rpki-client