Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
File:                     Sn0mxMvxZwAkXWf79pULcSkYmTk.mft (raw, json)
Hash identifier:          eYzPwjRH+2+h7h/QhD0Q2maT3Y87odc0fyIpA00BFRE=
Subject key identifier:   5C:32:09:4B:A2:35:54:AF:64:A3:37:7E:0C:BB:E6:4B:06:6A:04:72
Authority key identifier: 4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39
Certificate issuer:       /CN=A91839CF/serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
Manifest number:          0103
Signing time:             Sun 05 Apr 2026 05:32:42 +0000
Manifest this update:     Sun 05 Apr 2026 05:32:42 +0000
Manifest next update:     Sun 12 Apr 2026 05:32:42 +0000
Files and hashes:         1: Sn0mxMvxZwAkXWf79pULcSkYmTk.crl (hash: yPczWoq1SyEIn0vpG5Mi9FOJNI0RZc4gZCKM1T29z/g=)
                          2: 305EB30EA98D11EF8C023466C4F9AE02.roa (hash: azt0NOsf2/O8AMbeoL2qikO4x78xhwdxHjV8eUh4zBs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl
                          rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91839CF, serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939
        Validity
            Not Before: Apr  5 05:32:42 2026 GMT
            Not After : Apr 12 05:32:42 2026 GMT
        Subject: CN=69d1f3fa-f61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:b2:bf:c3:0b:a6:d6:d4:30:54:16:ab:8d:
                    87:b8:e0:d5:3c:ac:45:37:4c:fc:07:25:7f:53:3c:
                    27:57:9c:c0:2a:bf:a8:c7:4c:34:2e:18:45:8d:51:
                    0a:bb:07:8c:29:87:86:c9:4c:ca:81:dc:81:bd:7d:
                    5e:f0:bf:96:13:2f:47:20:e6:c2:1c:1b:37:11:2d:
                    e6:cf:15:d0:4d:20:24:29:e6:0c:5a:30:63:83:ca:
                    6c:59:5c:53:b5:3d:b6:71:25:b1:20:f6:1a:02:0f:
                    b4:89:36:d6:81:df:58:c0:9f:23:98:c4:ed:d9:c5:
                    e4:33:58:82:92:99:8e:91:7b:a8:79:65:65:86:21:
                    cd:92:54:d2:57:8f:aa:f6:8d:b7:ab:23:fc:f3:7f:
                    8e:a2:06:83:cd:5b:12:61:57:c9:17:03:d3:91:9a:
                    26:6e:f1:fc:99:85:6a:24:aa:8e:90:76:c5:e5:85:
                    0d:ed:7a:60:34:ce:48:4b:2f:44:d5:44:cf:e4:87:
                    55:70:ee:08:f1:cf:92:40:db:d3:96:97:3f:b7:1b:
                    27:db:46:f6:a9:ad:b4:41:ca:52:3a:ee:99:61:1e:
                    b2:0e:0d:9a:c3:ce:51:da:87:ec:6d:15:a1:d8:23:
                    90:a6:85:82:ce:47:40:47:9e:ca:80:8a:1b:7d:85:
                    cd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:32:09:4B:A2:35:54:AF:64:A3:37:7E:0C:BB:E6:4B:06:6A:04:72
            X509v3 Authority Key Identifier:
                keyid:4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:67:bf:e1:de:fe:74:d8:49:82:f8:e7:fc:50:0a:f4:e8:4d:
         8c:86:95:e0:08:96:6d:d7:2d:30:46:1c:45:1e:54:9f:2b:f0:
         61:86:ae:8f:98:10:15:74:70:f8:6e:bd:87:7d:b6:5b:e2:4d:
         d0:9a:4f:94:f0:9c:76:82:5d:7b:41:4d:2f:4f:fb:14:9a:bd:
         85:61:85:35:ce:61:e6:b6:78:0c:e7:46:f9:c4:c4:fd:59:f2:
         bb:97:33:6e:43:b0:a9:b6:37:93:5a:d0:da:63:05:5e:11:a3:
         dd:27:7d:93:52:c6:ba:88:32:5e:9a:2f:29:05:3b:5c:9e:65:
         71:44:03:cd:17:1d:ca:bf:e6:2c:5d:cc:f8:a3:b4:8d:e7:e6:
         bc:8c:f0:8c:85:5e:a8:94:ab:cf:e8:f9:df:a8:18:35:8e:75:
         30:ff:96:23:63:3b:38:4e:ab:18:78:cd:c5:2b:37:9d:ea:04:
         ec:d0:15:c3:1e:6f:c7:94:23:fe:bd:29:58:0d:37:b3:0e:ef:
         7f:97:16:fa:4d:79:0f:a0:16:75:21:73:06:49:54:4e:34:f5:
         aa:a5:dd:06:92:20:be:c5:38:b0:78:d2:c5:05:4d:1f:1f:bf:
         74:6f:26:b8:c3:2d:a9:d2:d4:a9:ab:21:6f:5c:b0:fd:9f:d7:
         70:f7:c4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:01:12 2026 by rpki-client