Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
File:                     -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json)
Hash identifier:          jg55I1jgKAAjEkgNSG791qADmqYJ5iToXrE7uV9NoL4=
Subject key identifier:   D4:C6:DA:E5:D8:67:AD:5E:81:BC:60:C5:CB:45:45:CA:B0:71:8A:EF
Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38
Certificate issuer:       /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
Manifest number:          012E
Signing time:             Thu 09 Apr 2026 05:14:53 +0000
Manifest this update:     Thu 09 Apr 2026 05:14:53 +0000
Manifest next update:     Thu 16 Apr 2026 05:14:53 +0000
Files and hashes:         1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: q/z2WL5TWuZapsk/D2rCXX8uvEIj+PJWUJSuR4dwuo0=)
                          2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: QHT2EqJHyPujaDEriJMd/9h9fPZLETh+MJuliPGlg9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl
                          rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Apr 2026 05:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
        Validity
            Not Before: Apr  9 05:14:53 2026 GMT
            Not After : Apr 16 05:14:53 2026 GMT
        Subject: CN=69d735cd-7223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:90:40:e0:1e:b1:8c:5d:4b:44:c0:55:eb:
                    69:89:b2:d2:b8:b2:f2:ea:39:af:94:42:80:c2:69:
                    a1:e0:1d:6b:e6:98:a5:71:a3:7a:8f:45:00:c3:d2:
                    79:0c:01:e5:70:80:e2:e2:ad:32:4c:c7:f2:31:68:
                    ca:f0:31:6c:b1:48:81:77:41:90:ce:7f:50:74:36:
                    0d:18:da:10:36:da:14:b3:a0:8b:e4:6a:dc:45:58:
                    ed:79:ec:77:25:23:35:89:5c:5d:e9:94:4c:3b:3a:
                    3a:b7:46:39:00:ff:ea:4d:18:5f:05:14:8f:5c:60:
                    ba:6c:56:f7:67:c7:32:34:ea:0f:d3:df:31:38:a5:
                    37:50:34:53:13:6e:c1:a6:18:cc:dd:76:18:03:34:
                    38:6b:54:37:43:49:6b:5b:db:75:cc:5d:5f:34:6d:
                    69:d5:10:47:6f:f5:fe:46:40:53:70:ae:dd:4b:e6:
                    3a:61:58:95:0b:0f:2f:3e:36:87:7e:bd:aa:7e:d3:
                    96:c6:2a:0e:a8:6a:63:c5:f9:71:68:ba:c3:bd:bf:
                    0a:f1:31:c8:89:de:66:10:61:60:07:d4:6d:e2:5b:
                    3b:0d:dd:b1:be:39:6c:37:71:65:07:ff:70:5d:1e:
                    ab:31:8a:91:72:56:cb:09:96:ae:a1:bc:7e:50:d4:
                    bb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C6:DA:E5:D8:67:AD:5E:81:BC:60:C5:CB:45:45:CA:B0:71:8A:EF
            X509v3 Authority Key Identifier:
                keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:eb:56:b0:73:ed:94:e3:8b:a7:86:0d:e0:5b:b9:41:81:68:
         5d:0f:c9:ad:75:0e:d2:8f:de:1a:4f:f1:0c:68:c3:58:85:68:
         e7:af:58:c2:f5:47:a9:ff:71:bf:e3:80:0d:90:78:9c:d9:e4:
         45:2d:39:94:fa:c8:78:05:ed:12:90:7f:1c:e1:c6:26:36:76:
         e7:46:e6:57:f7:7c:dc:fa:29:70:87:f0:9c:8f:b5:90:83:50:
         61:df:89:fe:4e:18:1d:e2:a2:6d:22:2f:b4:1d:ee:4e:d1:79:
         13:0a:dd:3a:02:3f:25:0e:8f:0f:b1:ae:86:89:ff:9c:d0:63:
         96:8a:87:4d:d8:66:48:9d:83:0a:9a:8f:1c:ce:92:d8:9d:4a:
         88:76:45:a3:60:5b:e7:97:78:79:e0:47:96:8e:b6:02:21:6a:
         78:cc:32:7f:14:de:68:94:ce:6d:92:69:8b:94:c5:c8:d5:db:
         13:9d:4f:91:70:90:43:09:51:4a:98:2b:5b:b1:f2:65:b4:18:
         6e:4b:63:19:47:59:2b:98:cf:67:90:89:68:21:e6:eb:d6:ce:
         08:75:2f:2f:8c:4c:cf:c7:07:18:82:97:14:12:cc:7c:16:73:
         2f:5b:3d:0f:60:17:66:0b:5a:18:cc:8c:9f:a0:b6:3c:8f:ae:
         ac:39:ac:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 23:59:21 2026 by rpki-client