Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
File:                     aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft (raw, json)
Hash identifier:          iELaVXYejtzPVC1tE1nPKu1NeYGW24LdJcGX4i4JAM4=
Subject key identifier:   80:8F:03:21:2E:07:00:F1:9D:AC:13:83:12:F6:F2:75:7F:D5:27:90
Authority key identifier: 68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA
Certificate issuer:       /CN=A91A5208/serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
Manifest number:          E1
Signing time:             Sun 05 Apr 2026 06:00:03 +0000
Manifest this update:     Sun 05 Apr 2026 06:00:02 +0000
Manifest next update:     Sun 12 Apr 2026 06:00:02 +0000
Files and hashes:         1: aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl (hash: eRuEmuYDBryQv+il/hyXmhUCT/CGogNqEekqsnj9tsE=)
                          2: FF9C9380E84D11EFBDF0C033C4F9AE02.roa (hash: L6/yynEwdWf1sD2wlmqOrbdnKHzkKjuQTgZ1LmsT/eY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl
                          rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5208, serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA
        Validity
            Not Before: Apr  5 06:00:02 2026 GMT
            Not After : Apr 12 06:00:02 2026 GMT
        Subject: CN=69d1fa63-b8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:65:bf:2b:e8:5e:94:e5:d6:b2:d4:c6:f4:35:
                    df:da:e2:be:2e:0b:5f:fd:49:d3:6b:4f:5e:3e:c6:
                    6d:98:05:ab:6d:33:65:10:49:3d:6e:b8:60:34:83:
                    c9:15:b8:4d:1d:5a:4a:98:a2:53:88:19:6a:e5:6d:
                    e8:40:46:02:8b:5b:49:75:b7:c8:53:27:5d:e7:0c:
                    ca:13:46:37:46:92:92:04:a1:7e:d0:10:24:cb:97:
                    47:00:f2:9f:4f:c3:48:22:97:a4:de:51:01:b9:80:
                    ef:96:0a:01:4a:99:88:69:0f:3a:0c:68:49:cc:78:
                    bd:c3:25:59:7e:3d:dd:3d:b9:d8:0a:e0:80:3a:1f:
                    29:e2:f3:83:23:7e:4f:70:42:5a:0d:86:13:54:66:
                    48:d7:75:93:45:8a:41:f1:2a:0c:f8:36:39:43:a5:
                    04:fb:ca:af:04:7d:0e:f3:61:5f:41:c4:f9:dd:f8:
                    97:46:02:8f:d9:e5:07:eb:01:1a:f4:6c:ab:29:09:
                    e6:98:cd:17:86:73:fc:a5:ce:75:c5:05:5c:af:25:
                    01:35:8d:27:c6:47:a3:8b:fe:09:06:88:f4:29:67:
                    01:bd:87:32:41:a5:45:0e:5c:23:fd:bb:bb:d1:46:
                    cb:8e:9e:a5:6c:72:e9:36:a0:cd:5f:26:ef:79:a2:
                    1b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8F:03:21:2E:07:00:F1:9D:AC:13:83:12:F6:F2:75:7F:D5:27:90
            X509v3 Authority Key Identifier:
                keyid:68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:2d:00:c3:89:da:a9:42:3c:2b:76:a3:03:e3:a2:c4:3f:08:
         03:5c:d2:2a:cd:d9:a4:44:92:05:e9:a2:ca:a5:6c:4c:57:53:
         70:a3:5c:48:bc:35:56:6f:84:37:1e:a9:b2:6b:26:33:26:4d:
         fe:55:4c:af:12:c1:ec:9b:96:df:22:d6:46:b3:37:aa:5e:b4:
         2e:af:b1:0a:1e:cd:f9:c3:7f:95:1b:c3:1a:5d:7b:c8:0d:99:
         28:50:df:3a:67:75:a8:a4:d1:e0:32:8d:78:6e:7c:23:81:68:
         e4:9c:62:25:6c:f4:ba:39:f4:10:b9:ce:41:a0:f7:40:90:29:
         b8:24:14:d6:d7:ab:57:45:b7:34:b6:0f:67:bc:f5:f7:64:ac:
         02:0d:39:cb:b3:f4:92:18:b8:a5:1b:e1:05:f7:9f:09:e6:ef:
         12:ec:a8:70:cd:e1:a0:4b:f8:fd:77:f8:6c:4e:4d:cf:36:59:
         cd:34:2a:c5:4a:79:65:dd:5f:1f:c5:df:66:f3:da:77:a2:61:
         f0:46:f3:77:d4:71:4d:5a:8b:f7:30:1a:32:ae:97:c1:bb:02:
         b9:06:d4:a3:5f:85:64:d5:80:ad:0d:04:71:37:90:24:98:06:
         f3:10:6e:d8:de:f7:74:47:05:80:e6:a3:38:52:10:e3:9f:b2:
         4e:0f:50:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:27 2026 by rpki-client