Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
File:                     664fmrSVbxg0tzUpNXyfPx4SBfA.mft (raw, json)
Hash identifier:          WtjU0gu0ko59TFZh1x+G+D4TAOlF1JA5uOA37ErBHD0=
Subject key identifier:   A4:29:8E:5C:1B:15:62:97:33:70:4E:97:71:5F:68:33:2F:AE:7F:12
Authority key identifier: EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0
Certificate issuer:       /CN=A91923E1/serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0
Certificate serial:       0560
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
Manifest number:          0556
Signing time:             Sat 04 Apr 2026 23:14:48 +0000
Manifest this update:     Sat 04 Apr 2026 23:14:47 +0000
Manifest next update:     Sat 11 Apr 2026 23:14:47 +0000
Files and hashes:         1: 664fmrSVbxg0tzUpNXyfPx4SBfA.crl (hash: 2rAISW5w+G4V/DFpXE60OO8YzADu7cv60tomQMwo7HI=)
                          2: 42A39472C74E11ECB4AD656CC4F9AE02.roa (hash: ZFaS0mb5R6BUb+cE9Qt/8Ifm4cDm/dmrFXNIbrri4GI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl
                          rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1376 (0x560)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91923E1, serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0
        Validity
            Not Before: Apr  4 23:14:47 2026 GMT
            Not After : Apr 11 23:14:47 2026 GMT
        Subject: CN=69d19b68-1fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:80:2f:4c:79:1f:93:1e:9f:3a:f3:86:0b:75:
                    3a:c1:18:ca:e7:60:f9:99:c6:3c:48:ca:f9:28:90:
                    28:ea:57:33:a1:d3:c1:aa:5c:40:78:96:4e:aa:05:
                    a6:81:27:9a:4b:72:92:6f:f4:b4:6d:04:ec:be:4a:
                    ca:4d:50:d2:8b:ce:06:70:08:d4:73:07:72:dc:12:
                    2e:d3:7f:27:c2:32:4e:92:e7:83:f7:a7:75:62:a5:
                    b2:e1:89:5b:e8:b9:af:9e:8e:11:b0:64:da:eb:29:
                    e8:cb:44:4c:db:45:e3:e5:15:8c:53:43:93:e3:ad:
                    b5:a9:11:ac:ab:d3:15:20:14:b4:e9:7b:4a:98:d3:
                    9d:4c:5c:31:4b:f7:f3:fc:b8:3f:00:fc:bd:40:f6:
                    3b:73:5a:82:68:d2:94:83:c1:13:82:8c:ff:e4:bf:
                    ae:32:ac:d3:a6:c8:22:3f:81:67:a0:46:e6:4a:82:
                    e8:b5:36:9d:7e:de:18:e6:94:7e:4b:d9:2d:71:3a:
                    bc:0a:fb:23:27:64:85:f0:f5:33:2b:d4:93:7d:b9:
                    37:f0:63:20:eb:b8:ff:e9:bc:d7:5b:be:90:c6:00:
                    ff:d2:62:06:19:a7:bf:92:24:ef:15:77:db:db:8a:
                    07:fb:72:ff:50:66:b0:c9:66:a0:7b:03:82:af:24:
                    51:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:29:8E:5C:1B:15:62:97:33:70:4E:97:71:5F:68:33:2F:AE:7F:12
            X509v3 Authority Key Identifier:
                keyid:EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:41:9c:d4:f5:d3:54:b2:5f:61:e0:b3:59:fe:07:90:5e:7a:
         f0:11:27:8a:7f:30:54:12:cc:11:b6:5a:d8:31:6b:32:70:a5:
         19:ad:c4:43:df:8f:5f:a9:de:fd:6d:2f:27:58:d5:2d:3f:fa:
         52:78:16:f7:6b:80:bb:f8:ca:e2:d2:2c:b2:ac:66:28:81:f1:
         f0:f8:eb:9f:a6:64:ca:f3:b9:ff:2f:fa:95:b0:6e:99:e6:5e:
         b6:0b:00:83:19:f7:78:e8:14:de:c2:1b:ae:fb:f1:f2:b7:a3:
         92:b1:cf:bc:2a:d9:82:61:d7:bb:1a:44:02:09:3f:7e:6d:9e:
         5e:ec:2d:9a:80:6c:14:16:97:95:b5:40:02:e7:1b:ec:2a:dd:
         ae:92:3c:07:03:8e:23:03:be:de:c4:d5:05:8b:37:e3:cd:f5:
         5c:ba:31:78:28:1b:97:5c:8e:3b:ef:12:16:9c:47:36:1b:22:
         99:85:b2:45:dc:ed:3a:e7:40:71:82:60:bf:88:a4:96:04:62:
         49:6b:15:21:ea:c1:69:50:94:90:33:34:00:c8:d3:c6:05:3f:
         de:53:49:31:7c:7d:98:81:17:02:29:e4:5a:67:33:a5:15:d6:
         dc:66:23:7e:d5:84:0d:fb:df:a6:21:b7:b2:93:b5:74:86:f3:
         a5:07:19:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:00 2026 by rpki-client