Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft
File:                     IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft (raw, json)
Hash identifier:          AzHbJyOH4ZIrmuq+ioUAkJ4JbFquUEipgJCk29VzeAU=
Subject key identifier:   7E:D4:A3:8B:BC:C1:9A:2F:77:10:0C:CA:6A:50:67:78:9C:5A:D1:A8
Authority key identifier: 21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95
Certificate issuer:       /CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195
Certificate serial:       0A2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft
Manifest number:          0A19
Signing time:             Sat 04 Apr 2026 19:36:55 +0000
Manifest this update:     Sat 04 Apr 2026 19:36:54 +0000
Manifest next update:     Sat 11 Apr 2026 19:36:54 +0000
Files and hashes:         1: IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl (hash: WAqWp/FAEZjRgRdlciHFPsoJvOUklKDclS4exqx0rgI=)
                          2: FE6C73289C9A11ED8123147BC4F9AE02.roa (hash: 2OCGb2GsDSN9eWUkEJm9OxDpHisk081Il0yQc3djlTw=)
                          3: 371ADD3E9C9811EDA6AEF053C4F9AE02.roa (hash: ZDaQsYTQonQRSy58mGR7Kcfg4nWAO+ekMAlPoJ+tMyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl
                          rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2602 (0xa2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A91D2, serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195
        Validity
            Not Before: Apr  4 19:36:54 2026 GMT
            Not After : Apr 11 19:36:54 2026 GMT
        Subject: CN=69d16857-510d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bd:3f:d6:75:d6:c5:92:12:02:51:95:de:34:
                    4b:d1:87:07:a3:69:f7:2a:36:46:aa:a0:e4:fb:d0:
                    d8:f7:3e:11:61:a4:c9:0a:6c:32:4d:de:43:92:25:
                    c8:44:8f:c1:39:21:e1:c3:f2:dd:b2:84:b3:ee:2f:
                    22:0c:62:99:03:2f:b4:7f:7b:72:12:ea:90:e8:53:
                    94:b5:c0:e7:c7:c5:38:c1:df:34:f1:bb:65:95:45:
                    66:95:a8:9e:48:04:ba:af:2e:9b:7f:15:59:a9:49:
                    53:67:32:ac:d5:1f:b3:dc:6b:41:3a:92:c3:18:25:
                    26:77:64:83:33:8c:78:ea:74:3d:4d:d0:6c:8e:38:
                    fa:fb:88:c8:45:01:43:d6:63:ad:d1:2c:c1:96:8c:
                    fd:b4:0a:44:f0:22:0d:54:3b:47:45:e8:c6:4c:1e:
                    49:a9:aa:77:c6:8d:1d:6a:e8:1a:29:37:a3:e4:15:
                    4c:59:1e:d1:68:32:9e:bf:12:0f:1d:49:31:0d:aa:
                    da:b2:7d:ff:be:29:0e:db:b2:d7:a0:ad:8e:98:1e:
                    d4:01:c0:32:eb:94:4f:7c:6b:67:81:ff:12:c2:d3:
                    96:26:7c:95:a4:ba:13:85:77:37:62:f8:d7:a2:b6:
                    66:03:92:b7:5c:d9:92:ee:c9:67:10:c1:64:15:76:
                    bf:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D4:A3:8B:BC:C1:9A:2F:77:10:0C:CA:6A:50:67:78:9C:5A:D1:A8
            X509v3 Authority Key Identifier:
                keyid:21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:1a:bf:54:62:6e:ed:d6:f2:c5:0d:53:a1:8a:f4:0d:f2:6f:
         89:16:15:9a:44:12:12:63:b8:47:5a:5d:44:7e:82:2d:12:ad:
         68:83:7a:95:55:95:6f:21:8d:16:c3:e4:02:4a:ee:d8:2b:92:
         d8:9c:74:72:3d:0f:1a:b7:48:2a:99:69:54:fb:5f:86:d9:b0:
         e8:98:11:db:62:a6:ca:0c:b2:d0:bc:66:4b:c8:12:21:5d:e3:
         4d:fa:55:b6:f1:2e:08:6b:fd:4e:a8:2e:c9:7a:26:e7:19:29:
         46:1a:bc:ee:36:cf:ae:eb:45:d2:9c:3a:2c:5c:fc:52:1c:89:
         7d:55:f6:a6:80:2d:66:b6:da:e2:30:ab:77:a0:d8:9e:68:47:
         46:29:00:33:d0:9c:8c:6d:76:dd:82:d4:bd:6c:2a:38:a5:81:
         97:5b:55:6c:b9:3d:8f:0d:4d:bd:01:a8:55:19:f2:2d:4b:bd:
         4e:7a:8f:88:6f:75:d0:92:64:ef:0b:90:33:d1:bc:6b:11:84:
         be:f8:cf:e8:99:62:a2:9c:39:31:11:50:05:84:35:60:06:24:
         af:23:3b:6b:42:eb:0a:33:8d:89:82:ea:12:e9:13:6f:08:a5:
         0a:f1:eb:6d:07:06:7d:e1:62:b5:2c:ed:5b:29:24:1d:51:b5:
         8c:17:73:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:38:30 2026 by rpki-client