Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
File:                     iV5rynpcNtnzBEctDScTpILJ2yU.mft (raw, json)
Hash identifier:          B6Inlmz2OXQTHY/1T/9U7+zeub8MD4b81q6ECm6hxXY=
Subject key identifier:   62:13:92:0B:75:D2:EA:63:C7:A6:E2:C0:35:01:B7:CC:53:0B:4E:D6
Authority key identifier: 89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25
Certificate issuer:       /CN=A91B829A/serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25
Certificate serial:       0CF1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
Manifest number:          0CE6
Signing time:             Sat 04 Apr 2026 18:06:50 +0000
Manifest this update:     Sat 04 Apr 2026 18:06:50 +0000
Manifest next update:     Sat 11 Apr 2026 18:06:50 +0000
Files and hashes:         1: iV5rynpcNtnzBEctDScTpILJ2yU.crl (hash: F3YcPbHgAd8LJXa3ZUFIEq3AnjMi7Zl7uf+D+StAYgw=)
                          2: 37759456617811ECBB095A62C4F9AE02.roa (hash: GoPelaWzfjsTFtPr3I95eodushRHuWInvxaTpmekvow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl
                          rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3313 (0xcf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B829A, serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25
        Validity
            Not Before: Apr  4 18:06:50 2026 GMT
            Not After : Apr 11 18:06:50 2026 GMT
        Subject: CN=69d1533a-4a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:61:35:44:2d:5c:cf:ce:a1:0f:b1:51:b5:
                    0c:a1:92:b4:1c:bc:b3:d7:a9:29:f0:97:f8:64:9d:
                    f7:52:99:1b:af:d7:d4:91:ab:58:b7:17:73:89:1d:
                    d1:78:c8:5b:80:7e:3c:f6:f0:e7:37:b3:eb:ff:fc:
                    7b:43:77:e1:9c:82:7f:12:d3:bf:af:26:34:da:ec:
                    37:85:e9:46:3b:4d:e9:63:da:e5:29:f1:2e:29:26:
                    23:06:71:a9:cd:49:8b:5f:f2:89:bd:62:5c:11:7d:
                    f1:f5:07:00:0b:48:e4:79:94:33:18:c8:c6:a4:5b:
                    95:2f:4f:9c:83:3d:84:fc:ee:ff:98:00:64:40:77:
                    f7:5e:c1:f1:36:a4:9b:73:76:68:be:97:ce:e1:dd:
                    c3:0c:b7:19:50:2b:10:ec:3e:00:54:a9:2b:d3:50:
                    e1:63:c8:7b:31:1e:a2:ba:88:65:a8:fa:46:6b:9a:
                    9e:1f:de:e1:7f:de:69:e2:5b:95:82:75:d1:36:ad:
                    90:a6:c9:cf:83:05:04:4c:91:83:a7:be:25:87:c2:
                    64:16:b9:a3:45:a6:93:e3:5d:44:61:db:44:68:ea:
                    09:6d:c9:4d:ba:4b:22:ae:66:ae:d4:3a:5e:39:43:
                    02:5e:8f:ca:4a:c4:ee:49:2c:d0:a9:34:af:7d:1d:
                    9e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:13:92:0B:75:D2:EA:63:C7:A6:E2:C0:35:01:B7:CC:53:0B:4E:D6
            X509v3 Authority Key Identifier:
                keyid:89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:77:34:6b:12:a8:6e:6c:40:b1:3b:e6:3a:6e:94:4f:60:b7:
         f6:05:c6:e2:be:47:8a:c6:1a:9a:50:01:03:22:a8:10:ff:c4:
         9e:77:95:d8:43:b9:ea:e2:b8:b7:ff:fc:33:12:da:2a:7c:0f:
         2b:4a:bf:80:34:66:2a:7f:46:82:42:97:dc:95:67:85:3d:62:
         44:82:75:7d:e3:4a:bf:45:18:ef:ac:90:f2:47:ea:0d:db:e6:
         f5:88:0f:bb:a9:45:f6:19:6d:a1:77:7b:cb:dd:b3:c1:d3:ba:
         22:63:62:41:2c:30:3a:9d:55:6b:a2:1a:13:64:eb:7a:d6:c8:
         d3:cc:0f:5f:ad:92:5b:7d:1d:f3:41:50:61:75:76:99:3f:b1:
         32:b0:2d:db:4d:01:f6:14:5a:f4:49:21:31:83:91:65:9d:f7:
         a7:ba:47:93:55:a5:24:85:39:f4:2e:15:cf:d3:6c:0a:1e:3a:
         07:ee:0d:2f:77:75:6a:9b:6b:a4:cf:9c:2a:15:50:1a:50:a1:
         80:18:65:22:48:75:63:88:ab:86:ea:0c:0b:3e:33:00:76:41:
         fb:32:56:60:20:0c:69:06:5f:de:04:80:a4:06:36:5e:bb:e2:
         9e:8c:b5:66:b4:f3:ce:1a:e8:e5:5e:81:71:86:f3:ca:72:45:
         b5:9a:e8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:05 2026 by rpki-client