Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft
File:                     X45P1KbdY15DeC5aBVYiyrJlSjc.mft (raw, json)
Hash identifier:          +ygk5hr1/TQsfCdFXucJagRwVgzbInJMC8KSEdmXp2Y=
Subject key identifier:   16:CB:24:44:7C:D0:CC:97:C1:A7:E1:4F:55:1F:38:19:17:E1:24:59
Authority key identifier: 5F:8E:4F:D4:A6:DD:63:5E:43:78:2E:5A:05:56:22:CA:B2:65:4A:37
Certificate issuer:       /CN=A91BCF31/serialNumber=5F8E4FD4A6DD635E43782E5A055622CAB2654A37
Certificate serial:       09A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft
Manifest number:          099B
Signing time:             Sat 04 Apr 2026 19:47:40 +0000
Manifest this update:     Sat 04 Apr 2026 19:47:40 +0000
Manifest next update:     Sat 11 Apr 2026 19:47:40 +0000
Files and hashes:         1: X45P1KbdY15DeC5aBVYiyrJlSjc.crl (hash: AtXqk3hYcxx0STAWs5TpZNd9SyBBvlWdDVQrjY3Hr5E=)
                          2: B757FF4EAB8311EA9983D717C4F9AE02.roa (hash: +2jTblD+/4omeCEhDlwqOghx+nNjjgIJKr1/zmP67Lo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.crl
                          rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2469 (0x9a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCF31, serialNumber=5F8E4FD4A6DD635E43782E5A055622CAB2654A37
        Validity
            Not Before: Apr  4 19:47:40 2026 GMT
            Not After : Apr 11 19:47:40 2026 GMT
        Subject: CN=69d16adc-d722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a4:cc:e8:67:48:2a:86:a1:e4:a8:eb:ae:8c:
                    13:04:31:ac:c9:bb:22:39:7d:7a:ef:db:25:a2:55:
                    0e:e3:3c:9e:53:e7:49:60:1c:50:ef:b0:f2:5f:de:
                    52:05:f6:75:89:4d:6f:65:67:73:eb:73:d7:0c:67:
                    82:fb:cb:bd:45:5f:0b:cc:99:f1:16:fb:66:0f:cf:
                    0e:dd:b1:50:88:63:a2:75:f1:63:6e:e1:62:d8:2b:
                    25:3e:21:e5:e2:fc:24:7c:a9:e3:9b:e8:c0:38:20:
                    81:58:c1:cc:d6:b2:3c:af:57:70:71:9b:f3:b0:e7:
                    be:74:f7:02:29:2e:03:1f:3f:d8:8f:c2:3e:01:db:
                    60:63:01:9a:e4:86:d6:8c:9b:73:7e:76:8d:1c:81:
                    52:4d:d0:d8:ac:1c:70:7d:51:2d:6d:fa:61:38:6e:
                    e8:af:c9:d0:d9:4b:b2:a9:c7:1c:a5:2c:fb:71:ec:
                    f8:f5:8b:e0:30:24:51:1c:d1:a0:1a:c4:28:52:bc:
                    55:4b:63:c9:81:ce:00:9d:96:d7:25:bd:d8:f8:c7:
                    e1:b1:ac:76:23:2c:4f:80:c9:54:bc:b7:a9:9f:2d:
                    4c:6f:2b:45:98:85:7a:86:39:7a:5e:2d:d8:68:ad:
                    d4:92:9b:c5:b0:8f:9e:c1:23:b8:9e:2c:7c:df:8e:
                    ed:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CB:24:44:7C:D0:CC:97:C1:A7:E1:4F:55:1F:38:19:17:E1:24:59
            X509v3 Authority Key Identifier:
                keyid:5F:8E:4F:D4:A6:DD:63:5E:43:78:2E:5A:05:56:22:CA:B2:65:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a7:b0:cd:65:bd:9a:b3:ee:83:a2:1c:06:0b:e7:c8:8e:38:
         c1:1e:ed:c2:61:76:38:36:07:f3:ce:93:8a:98:ce:ea:28:32:
         af:42:e0:43:7f:69:60:59:f8:0e:41:87:1b:3f:db:a5:3c:07:
         90:4d:20:6d:af:8a:1e:8f:dd:f2:6f:43:5d:1f:79:3c:65:eb:
         b3:50:da:ba:42:9d:97:8d:2e:3c:5f:5c:70:8c:68:3d:cd:e8:
         47:b8:c8:e6:1f:89:67:fe:d0:18:fa:04:50:87:1e:9b:51:03:
         70:7e:f6:c8:56:24:b8:2e:76:b6:d4:3f:df:f7:b6:b6:ae:7f:
         98:41:35:e0:be:38:e6:d5:ab:f4:72:5b:d7:d0:20:39:03:8a:
         fa:8a:16:95:39:d0:d3:1a:f0:37:f5:af:4f:4f:4e:a6:ff:3e:
         12:d0:ef:59:64:e2:46:42:30:02:f2:e5:f9:ce:da:b1:f3:59:
         32:d9:13:fe:d4:9d:01:d5:bb:25:34:17:b8:ab:a4:4b:52:95:
         70:43:de:d1:c9:c0:1d:95:f7:d5:29:53:7a:6c:a6:bc:56:42:
         9b:dc:52:8d:01:b9:c2:1d:ee:dd:ab:d4:b7:5f:5e:42:5b:96:
         04:91:47:49:ff:c9:d1:cb:bf:c0:28:c6:8b:be:8a:00:0a:54:
         19:4d:10:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:45 2026 by rpki-client