Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft
File:                     CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft (raw, json)
Hash identifier:          wd888q496o0+UR0l7R+y5znGNysqySVqpKlXyDHHHts=
Subject key identifier:   98:AF:67:C9:72:E8:CF:CF:E8:04:EB:34:53:6E:C7:84:E3:81:9B:A6
Authority key identifier: 09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC
Certificate issuer:       /CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC
Certificate serial:       1E2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft
Manifest number:          1E11
Signing time:             Sat 04 Apr 2026 16:01:24 +0000
Manifest this update:     Sat 04 Apr 2026 16:01:23 +0000
Manifest next update:     Sat 11 Apr 2026 16:01:23 +0000
Files and hashes:         1: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl (hash: 4gqYZdgH+CLKVvnm5TnJPmCEnv5mAQ6PLHC/vEveB6E=)
                          2: 945DB376E34711EE87868164C4F9AE02.roa (hash: 4RkTGMjqWlk+rKx4kNy4NjcUMN0pXSaeXeIwpINtkK8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl
                          rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7724 (0x1e2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5098, serialNumber=099714A70E6F401289108209D6A7F4859F9800CC
        Validity
            Not Before: Apr  4 16:01:23 2026 GMT
            Not After : Apr 11 16:01:23 2026 GMT
        Subject: CN=69d135d4-57a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:09:51:f4:1f:cb:cb:44:e7:34:62:23:ce:0f:
                    2a:62:59:57:17:bc:28:7d:d5:4b:66:7c:18:be:1a:
                    5f:c1:e7:01:9f:89:d5:85:ec:5e:c3:b7:f8:8c:28:
                    b7:77:55:ad:f6:ff:eb:49:80:9f:c6:28:6b:1c:9e:
                    17:66:d0:ad:57:0f:e0:31:12:81:8a:b4:12:86:cf:
                    08:24:31:16:d3:cb:1f:c5:2f:8d:42:40:cc:b9:bc:
                    be:e4:3e:08:98:cd:ff:78:04:50:c2:4d:bc:bb:a5:
                    9a:a6:21:e7:8b:d9:31:2e:38:9c:1a:23:81:61:a5:
                    48:c9:bc:11:00:1b:69:1c:44:f1:1d:7f:41:7a:25:
                    22:95:4f:ff:e6:cb:f3:8b:c7:e9:56:65:70:b3:72:
                    cd:e7:31:06:5c:5f:a8:f1:52:3e:a5:6a:a1:bd:51:
                    36:65:2a:63:15:f5:2e:93:d8:23:92:8a:87:be:83:
                    44:30:14:69:d2:76:ac:b4:8d:77:5d:45:d8:3c:5f:
                    a0:f9:e7:72:d4:3f:a2:8a:43:44:d8:87:b1:e0:16:
                    62:32:24:09:eb:ce:59:61:04:34:a9:c7:43:57:c3:
                    ff:13:09:6d:dc:60:82:ea:ea:2e:1e:fb:66:4d:2e:
                    36:8c:ad:80:d8:6e:32:de:16:d4:97:dd:d5:3a:5f:
                    4c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AF:67:C9:72:E8:CF:CF:E8:04:EB:34:53:6E:C7:84:E3:81:9B:A6
            X509v3 Authority Key Identifier:
                keyid:09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:fe:b1:f1:a4:42:4b:d0:a5:2c:53:fd:30:4b:cd:1b:67:ba:
         57:7a:6c:75:9a:93:43:d9:cf:f0:66:59:0c:4f:7e:67:2d:12:
         95:d4:42:38:65:21:6d:57:56:78:fd:1b:c2:d7:0f:33:23:41:
         13:4d:22:9f:b6:68:67:93:ad:6d:e3:76:3d:9b:85:62:8a:f5:
         39:d5:28:70:10:a0:a9:fa:59:75:fc:68:59:ca:2f:94:c0:39:
         dc:c9:03:96:60:8b:b5:4b:fb:d9:83:5f:81:bc:0d:be:6d:57:
         df:c7:c5:61:5a:8e:2a:80:d3:e4:03:e6:af:1e:57:35:7e:cf:
         d5:db:8f:4a:3f:e6:a3:e1:c4:9a:0f:81:c0:be:39:cb:b2:d7:
         97:db:4f:62:97:7a:04:f1:c3:41:50:a7:66:c2:1f:8e:46:32:
         cf:fa:9b:23:6f:11:d1:9b:8c:b6:07:fc:13:9b:4d:82:90:cd:
         83:aa:cc:76:3e:f6:c3:07:ca:bb:15:b5:10:88:61:c0:70:52:
         60:2f:0d:de:df:77:74:9e:c4:45:be:4f:c1:1d:8d:10:5e:24:
         5d:7e:3d:83:92:ea:72:19:cd:bc:b6:05:3d:b6:da:a8:71:03:
         3d:a8:d3:c8:a4:3d:a7:d9:75:18:f4:58:03:bb:b2:40:d6:59:
         8d:15:09:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:04 2026 by rpki-client