Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
File:                     nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json)
Hash identifier:          /gt0PoBEXnmqh1AOPBK6mptyQVjg77cnsLikWe4QPvQ=
Subject key identifier:   6E:D1:EF:D1:A9:36:4F:62:C0:FB:BD:80:79:F7:7E:A4:37:55:1A:DE
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Certificate issuer:       /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial:       05BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
Manifest number:          058C
Signing time:             Sun 26 Apr 2026 23:19:39 +0000
Manifest this update:     Sun 26 Apr 2026 23:19:38 +0000
Manifest next update:     Sun 03 May 2026 23:19:38 +0000
Files and hashes:         1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: lCpjXn0g02S6quo3JD8jz0qfNkfjo5XKVFRkByQV+7g=)
                          2: 9E3C65828CA011F0B1F47C12C4F9AE02.roa (hash: Q6qYKHjV9NmhmzxqH8ayk30H8rtTg6j37bugDkJvn/Q=)
                          3: FBBECF1A694111F08D368069C4F9AE02.roa (hash: HO1DGtNQx+OH3SloGIt02Rz1EoCoy8/3rF9m0kcImEQ=)
                          4: 9EABFF288CA011F0B1F47C12C4F9AE02.roa (hash: xb+uRHoHsQjZ3bcCgpJzZNIAPd4nFn7kpkaspAVlz/c=)
                          5: 53B4619407CB11F19B0357131B3D8C67.roa (hash: FE2rPrjsmUgohHBi/GpAcZVW0Hos/Z/JQQ5dDQAETOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
                          rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 23:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1466 (0x5ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
        Validity
            Not Before: Apr 26 23:19:38 2026 GMT
            Not After : May  3 23:19:38 2026 GMT
        Subject: CN=69ee9d8b-0ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2d:ee:02:37:d6:95:70:c1:cf:f7:88:99:93:
                    a1:4c:03:49:43:e9:e8:c1:ed:3d:82:cb:a3:b6:3d:
                    c2:fd:a4:34:a6:af:20:13:7b:81:d6:52:62:84:aa:
                    b8:d0:f7:c0:2d:00:59:9a:87:99:30:43:5c:97:47:
                    82:df:51:52:c6:33:8b:23:9b:a0:9f:7c:9b:9e:ea:
                    76:56:cc:19:f1:9f:b9:7d:3d:e6:e6:60:68:db:7a:
                    b0:11:2b:92:9d:d1:84:80:4c:65:2d:42:d2:ff:d6:
                    c7:77:ed:c3:0e:3b:50:5e:d3:84:e1:05:63:7e:a1:
                    90:a3:cb:1b:7f:1c:b9:85:06:af:7a:b2:10:22:42:
                    78:db:3c:74:8d:1c:a6:aa:36:b7:c9:28:dc:ca:99:
                    52:9f:a9:b9:9d:29:00:4e:28:db:c3:00:af:ae:d0:
                    64:59:ed:1d:ba:8e:f3:67:73:04:11:3a:90:7e:c5:
                    40:0d:2d:0f:31:9d:c9:e2:8d:8d:b3:20:77:eb:47:
                    c5:e6:3f:c1:e3:bc:fd:96:65:53:ff:e7:c9:b4:7f:
                    c1:c1:d5:c0:54:c7:57:98:e5:62:84:d1:f6:e2:1f:
                    bc:45:12:31:24:bf:42:bf:8a:f0:99:ec:93:be:16:
                    0c:a1:de:23:77:60:08:9c:3e:f3:31:57:02:53:7c:
                    69:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D1:EF:D1:A9:36:4F:62:C0:FB:BD:80:79:F7:7E:A4:37:55:1A:DE
            X509v3 Authority Key Identifier:
                keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:9d:d0:57:64:d9:e6:63:dc:bc:ad:9b:81:57:3d:3c:41:2e:
         5d:82:03:c7:aa:56:27:ab:1e:75:0d:2c:79:c9:77:20:db:35:
         6b:99:a2:8a:21:24:b2:d4:94:cc:54:2e:e0:2c:c3:c8:98:2a:
         fe:dc:cd:31:a1:44:f8:e3:ed:de:ff:b7:6b:40:aa:4f:38:1e:
         35:99:e3:ee:f2:fe:1b:c9:cc:11:80:9c:27:e7:60:59:21:e1:
         00:7c:d5:51:a4:88:db:db:71:40:86:6a:71:ee:d9:f4:a5:84:
         8b:1e:48:19:55:58:f1:26:f4:9f:ef:cf:57:91:31:1c:6f:91:
         fd:5b:e9:94:9a:d9:76:e9:ab:b1:bf:ad:ab:a4:86:99:e1:f3:
         f1:f8:fd:ca:c6:8b:39:e3:3b:b5:9a:83:1d:79:a6:5e:c5:3c:
         27:3a:18:2e:10:23:8f:08:18:cc:32:27:ea:c8:87:e2:cc:86:
         94:f1:0d:68:cd:3d:e6:b5:bc:98:c4:4e:b8:29:aa:d9:cf:d7:
         db:c3:88:b6:54:c3:bc:94:ab:cb:bb:8c:f5:d2:8b:5a:df:51:
         58:94:db:bf:a1:a6:1e:94:02:7f:10:b0:f0:64:ad:df:2c:7c:
         77:fb:d3:4d:53:ef:43:9e:34:b2:a5:66:2c:9b:c3:12:d5:5d:
         f1:86:ff:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:27:22 2026 by rpki-client