Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
File:                     b35Y0Iljiffn_k6HlapVXVxVUYg.mft (raw, json)
Hash identifier:          0wYofKeqt6lksNvPK9U2EVjZrrCotVwb+1qiBL0Lg4Q=
Subject key identifier:   33:7B:79:1D:98:70:3B:6F:8F:C8:77:DC:42:72:1D:CE:80:84:A2:2E
Authority key identifier: 6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88
Certificate issuer:       /CN=A91706E4/serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188
Certificate serial:       010A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
Manifest number:          0106
Signing time:             Sun 05 Apr 2026 05:30:49 +0000
Manifest this update:     Sun 05 Apr 2026 05:30:49 +0000
Manifest next update:     Sun 12 Apr 2026 05:30:49 +0000
Files and hashes:         1: b35Y0Iljiffn_k6HlapVXVxVUYg.crl (hash: jf1KeD4coPxswBFb5iEGdcmWMzPGmFaTGZwPeNkLvq8=)
                          2: 31E9AEC6E30411EFBC0C3B2CC4F9AE02.roa (hash: uV8rFDqMxRMdCRvkDEsV2MUMii9vsIlS/hRAm+P4Yu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl
                          rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91706E4, serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188
        Validity
            Not Before: Apr  5 05:30:49 2026 GMT
            Not After : Apr 12 05:30:49 2026 GMT
        Subject: CN=69d1f389-50df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:62:83:c0:80:07:de:e7:6c:39:7b:1a:87:f0:
                    0d:76:68:45:b2:e0:c9:bd:fc:b7:6e:1c:ba:27:6c:
                    70:1b:7a:f2:c0:10:9d:cf:5a:c8:de:a8:ba:00:64:
                    5a:be:b0:86:5e:f6:d5:89:0b:88:aa:9e:3e:32:17:
                    3e:24:f8:25:39:07:61:c5:d2:4b:b9:07:67:4a:da:
                    f0:30:04:a3:99:c3:1d:a8:c7:7f:6f:97:f0:e0:fe:
                    37:90:74:0c:54:d2:5d:97:26:28:bc:53:4a:ab:b9:
                    15:01:de:10:2c:b5:7f:1a:54:78:8d:df:b3:96:a4:
                    0d:2d:d0:c7:5d:81:6d:c6:0a:8e:98:b2:c3:23:fd:
                    96:52:1c:84:78:05:3b:bb:c5:d6:43:56:9d:7d:48:
                    14:cc:d3:85:7a:91:60:c3:ab:5a:68:36:ae:80:23:
                    8d:7e:8a:99:f6:d8:c3:7f:57:90:a0:2a:e2:3f:d0:
                    a3:de:58:99:6a:f7:1b:11:1d:8a:aa:9c:6f:b5:b2:
                    7e:ba:29:af:58:05:4f:86:f0:ba:70:e9:26:d7:1d:
                    64:eb:4f:38:94:b7:2f:cc:7d:ea:bb:e3:75:dd:0e:
                    63:13:5f:ad:e8:07:c2:77:b0:60:79:f5:dc:60:6d:
                    51:b6:14:01:5e:01:67:84:95:28:0c:9d:2d:4d:94:
                    e6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7B:79:1D:98:70:3B:6F:8F:C8:77:DC:42:72:1D:CE:80:84:A2:2E
            X509v3 Authority Key Identifier:
                keyid:6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:fe:7b:a0:d6:4b:bf:c0:de:a1:36:bd:21:d3:e3:87:51:be:
         7f:b3:c5:34:36:85:f8:23:ae:ad:a7:e1:b5:44:6e:8c:e0:57:
         19:fa:73:7b:6b:37:7c:c6:94:a6:72:dc:49:18:b2:29:84:54:
         69:6c:79:7b:95:48:7d:aa:cd:60:9a:42:d0:58:4e:75:f1:5d:
         85:bd:aa:98:25:15:5f:fe:44:ae:33:05:57:62:9f:a9:0e:9e:
         b9:db:e6:88:29:15:c4:2e:27:54:fc:18:33:08:fd:f6:9d:6a:
         e2:12:30:e0:81:04:30:1b:02:e3:7d:da:4e:7a:fd:18:3a:7f:
         02:3e:f4:c7:16:ef:52:f9:f9:fa:00:1f:e9:d6:60:3c:2f:fa:
         fa:b5:27:ec:1a:7d:bb:5a:31:21:4e:8e:47:80:d9:c1:8d:a9:
         55:66:4c:8c:0b:f9:ce:75:65:5a:9f:24:4b:4f:33:e3:9d:51:
         67:f1:5a:2a:f4:84:6f:df:7e:06:e6:7c:fa:d3:e7:21:86:1b:
         98:b5:fe:2e:1b:52:5c:9b:84:36:cb:0d:f3:82:d7:9d:4c:1d:
         08:f5:f6:43:d6:24:48:d4:4d:cc:2c:58:e6:82:80:ea:14:86:
         3f:ad:b8:97:fc:dc:56:e9:c8:e5:d9:eb:58:09:92:46:85:81:
         8a:b5:e1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:09:52 2026 by rpki-client