Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft
File:                     _f0WbMUdnjq3SWQHS25klGdOL24.mft (raw, json)
Hash identifier:          jEl0KuSUHTq5Gh1BcMrkZCDELbvMQteb9DTvGzO20v8=
Subject key identifier:   81:4D:4B:A7:C3:DC:93:D5:89:5C:AF:DE:52:61:CD:9F:FE:B6:A6:A4
Authority key identifier: FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E
Certificate issuer:       /CN=A91884F8/serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E
Certificate serial:       1F5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft
Manifest number:          1F44
Signing time:             Sat 04 Apr 2026 15:56:15 +0000
Manifest this update:     Sat 04 Apr 2026 15:56:15 +0000
Manifest next update:     Sat 11 Apr 2026 15:56:15 +0000
Files and hashes:         1: _f0WbMUdnjq3SWQHS25klGdOL24.crl (hash: xx+KenUjoFFxNB6XXxRTCAegMPdDTqEUwmVZSBy2HpA=)
                          2: 888B4AC26B3611E6A149F871C4F9AE02.roa (hash: AkHZVFpWpRiqPyM58pXt8XWBhgL1/61b1bh+bdJb7XA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl
                          rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8029 (0x1f5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91884F8, serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E
        Validity
            Not Before: Apr  4 15:56:15 2026 GMT
            Not After : Apr 11 15:56:15 2026 GMT
        Subject: CN=69d1349f-d72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d3:c9:8c:48:73:ef:7d:6e:fd:ee:71:e2:1c:
                    1e:aa:94:31:13:6d:bd:da:41:3c:2b:5e:f0:52:ef:
                    4c:41:1b:a1:09:0f:14:96:62:02:3a:b8:11:d4:d1:
                    a3:f3:a4:68:90:15:61:9c:de:9c:14:b2:77:1f:85:
                    54:6d:26:74:3a:6e:e5:25:82:00:83:63:e2:3e:c8:
                    01:8d:64:d4:b2:52:1a:23:3a:48:21:25:9b:f3:46:
                    c1:0e:ce:6d:1c:61:3d:78:9d:24:9c:95:35:ca:ea:
                    08:98:91:f3:f1:11:5b:8f:4c:f4:00:99:93:77:15:
                    e5:f8:fc:b5:01:96:cb:9b:bf:f5:9d:bf:a3:c6:11:
                    2e:13:3a:40:e2:f4:23:80:c7:c2:64:1c:fa:43:a3:
                    df:ae:45:f2:0d:4b:81:a1:28:89:6b:6a:9b:6b:51:
                    b9:2c:11:ba:d8:a6:57:69:3c:96:d0:e2:d4:04:a2:
                    7b:f7:6e:68:44:c1:25:e7:92:22:07:c5:15:7f:b8:
                    8c:29:78:dd:61:f1:1d:94:f9:ac:fa:39:eb:8f:fc:
                    fa:5c:95:a2:61:a2:ed:76:06:e6:75:84:88:f0:e5:
                    ef:01:39:8d:ec:4f:bb:45:4f:80:4a:7a:1b:f4:fc:
                    ca:9a:8f:2d:6d:bb:9c:1a:92:2a:6e:e0:b8:09:24:
                    64:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4D:4B:A7:C3:DC:93:D5:89:5C:AF:DE:52:61:CD:9F:FE:B6:A6:A4
            X509v3 Authority Key Identifier:
                keyid:FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f7:87:52:4e:3d:9d:9f:77:ea:61:9f:b5:33:32:ce:84:9b:
         c6:74:aa:17:70:24:f6:21:0e:94:50:63:30:36:3a:f0:98:a2:
         e6:bc:89:f4:f5:cc:e4:4f:17:85:95:22:e5:af:2e:ee:0b:1d:
         09:37:f8:3f:6d:1c:db:cb:e1:fa:01:37:61:eb:d6:40:25:88:
         37:5c:61:b0:97:bc:15:6d:0f:01:ad:ff:bb:17:b6:a3:ad:9c:
         be:58:e8:37:e3:6a:e5:3b:d6:dc:08:9a:0e:47:bc:38:14:c3:
         f7:ba:a5:65:2f:f5:23:53:4e:79:ff:dd:7a:93:4c:71:fc:59:
         51:7e:64:07:54:17:1b:ef:48:89:4d:20:f1:fa:49:96:ce:6c:
         b7:fc:be:2f:65:1a:f6:d3:6b:92:e7:23:a2:d6:30:49:84:95:
         29:74:8f:ab:fd:ae:4f:31:06:63:c2:fe:76:0b:b6:84:cf:dc:
         97:3d:b0:9b:31:e1:d3:26:0b:8a:83:c9:b7:2b:fb:09:fa:28:
         31:a4:a8:f5:40:4e:06:e9:ff:90:c3:d4:61:e3:93:53:6c:6a:
         96:5f:b2:d5:08:54:f6:ad:da:53:97:91:35:85:57:19:85:61:
         16:2e:d8:ed:1d:d3:4d:57:ec:1e:c7:78:b5:72:29:cb:1f:2a:
         54:6a:0a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:27:06 2026 by rpki-client