Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
File:                     redjNI0CWa0SzYi3ZNOYy4rHQMk.mft (raw, json)
Hash identifier:          UcUwX/+hPnw6cREFYQQnuBINXxa2HbSm8Qxh+orkEPc=
Subject key identifier:   6C:A9:88:57:3B:25:14:E1:F6:A0:A0:91:85:4D:A2:9E:52:97:37:12
Authority key identifier: AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9
Certificate issuer:       /CN=A91BBCC9/serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9
Certificate serial:       068A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
Manifest number:          0680
Signing time:             Sat 04 Apr 2026 22:17:38 +0000
Manifest this update:     Sat 04 Apr 2026 22:17:37 +0000
Manifest next update:     Sat 11 Apr 2026 22:17:37 +0000
Files and hashes:         1: redjNI0CWa0SzYi3ZNOYy4rHQMk.crl (hash: w0/UUkGiyR4Qd2hVKiBC1e2O+ESv1h3fxutIk8KF21Q=)
                          2: B69C27DCB6D711EB9D603F7DC4F9AE02.roa (hash: WUXJJ8dA0rIPvSiYS0+Cpa5v7JDaDBTiBjA7j+6k8hI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl
                          rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1674 (0x68a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBCC9, serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9
        Validity
            Not Before: Apr  4 22:17:37 2026 GMT
            Not After : Apr 11 22:17:37 2026 GMT
        Subject: CN=69d18e02-d6e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fc:af:53:0f:c7:75:f3:21:27:ec:5a:55:f6:
                    4a:ed:df:d4:53:92:77:dc:39:00:73:dc:06:10:ac:
                    98:46:2d:e8:9b:2a:16:c4:21:39:98:23:e7:18:58:
                    d4:ec:26:c8:86:98:3e:ad:12:d5:86:05:fd:66:d7:
                    36:eb:f2:cb:ef:aa:fa:e0:fd:b8:49:96:9a:57:bd:
                    80:d1:f2:28:04:36:ba:43:4a:5a:28:bf:a9:b9:10:
                    60:ef:29:5b:24:76:e8:e9:4e:b5:c9:90:12:ef:c5:
                    2b:53:0a:79:0c:c1:da:88:96:d1:48:4e:ab:28:1c:
                    e2:2f:6a:b2:6a:9b:87:c4:cd:36:3b:07:df:0b:c6:
                    5e:3f:85:87:d9:35:30:03:aa:02:26:01:f0:36:a3:
                    32:d4:8f:67:83:0a:ac:51:e4:35:b6:91:53:aa:55:
                    28:98:e9:8b:4a:ce:c7:16:bb:21:0d:94:2b:c5:7b:
                    16:3c:7a:ff:74:1e:66:c9:46:fe:4b:49:5f:b3:dd:
                    4f:f6:57:26:f0:66:f9:d9:10:cd:05:a4:cb:91:2b:
                    d3:fe:f1:11:dc:e4:44:20:82:41:37:bd:ef:4d:10:
                    ad:72:77:62:1f:20:1e:16:b5:30:4e:b2:c2:23:cb:
                    f8:54:a0:e1:57:f6:13:24:d1:89:a7:a1:67:52:b9:
                    bb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A9:88:57:3B:25:14:E1:F6:A0:A0:91:85:4D:A2:9E:52:97:37:12
            X509v3 Authority Key Identifier:
                keyid:AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c2:a0:a7:ce:76:94:e4:2b:61:4a:54:09:2a:8c:b7:30:77:
         9d:ae:57:f7:cc:8d:cd:b6:76:af:43:66:8a:b2:9c:5e:8d:51:
         41:e2:fd:c4:0c:68:c5:3c:0d:2f:20:39:45:7b:ab:7f:35:49:
         00:ed:e0:43:e3:b8:9c:3f:0c:8e:cf:3a:89:96:14:b6:7a:18:
         0f:05:83:ad:9c:ae:f3:6e:72:a3:bb:46:7e:18:2d:6e:d9:79:
         dc:6c:0f:1c:c9:c9:20:1d:f3:46:2b:05:72:e2:c6:57:94:97:
         6b:dd:14:2b:c9:4b:02:6d:86:4b:5a:36:fc:9f:f3:d7:bc:66:
         4b:1b:17:44:0f:18:28:8e:06:a3:a7:ab:a4:3e:fc:03:dc:36:
         10:79:22:4d:ac:55:02:b3:ce:80:f0:22:c5:4d:38:2b:da:73:
         d8:a8:8a:c0:86:ed:37:95:3c:ed:16:93:ae:9a:ad:38:59:bc:
         61:f5:55:dc:6f:f0:da:2f:37:00:53:2b:86:cb:34:26:36:28:
         59:6e:15:5c:9c:63:3a:6a:af:be:4f:75:a4:20:02:06:ee:d7:
         fd:1a:66:e3:8e:90:90:e2:3a:64:e2:b2:30:11:22:ee:a3:7b:
         e5:ec:f9:9e:83:33:92:75:f5:00:0d:3d:ec:87:7c:92:56:e7:
         cb:a5:bd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:52 2026 by rpki-client