Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft
File:                     5VpZVzhbbPjKDASB1i3f_asSwfQ.mft (raw, json)
Hash identifier:          rdp8BPBxuURDx2/S4vePvl07a89S+kLFsP0h7U19Vok=
Subject key identifier:   9C:13:DE:DB:43:AE:82:1E:EF:DA:BD:78:6E:E3:95:8F:F8:23:84:D8
Authority key identifier: E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4
Certificate issuer:       /CN=A91BD090/serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4
Certificate serial:       09BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft
Manifest number:          09B1
Signing time:             Sat 04 Apr 2026 19:45:15 +0000
Manifest this update:     Sat 04 Apr 2026 19:45:15 +0000
Manifest next update:     Sat 11 Apr 2026 19:45:15 +0000
Files and hashes:         1: 5VpZVzhbbPjKDASB1i3f_asSwfQ.crl (hash: 1fwAK0BbFCi5baADmnws7ExljRTr58H+M1tkx31d6oY=)
                          2: A1F46062A64611EAA24E1461C4F9AE02.roa (hash: zK6lG6qBER/8ICDiEU5RYdbytR54/LmR0O7DOfT8VTo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2492 (0x9bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD090, serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4
        Validity
            Not Before: Apr  4 19:45:15 2026 GMT
            Not After : Apr 11 19:45:15 2026 GMT
        Subject: CN=69d16a4b-b267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:86:c2:22:51:c6:a2:52:b1:1d:05:f4:cd:9b:
                    c6:44:85:b3:ca:13:cb:42:9c:b3:18:35:64:29:65:
                    1f:a9:84:dd:12:c0:1d:5d:67:d6:70:00:08:3f:e6:
                    37:59:6f:08:d1:70:06:31:d1:33:20:14:20:00:2d:
                    25:9a:27:18:66:69:97:44:e5:69:47:6f:d8:e6:6b:
                    7a:fc:45:ae:97:1b:30:d0:68:3e:87:67:a7:61:6f:
                    32:bc:1e:ac:53:3c:45:53:9a:c8:36:ff:5b:a5:6b:
                    e4:c2:76:76:d4:31:db:4d:f5:5f:90:ab:4a:9f:9b:
                    98:4f:a3:f4:4f:a9:1d:44:e9:7c:a4:97:39:74:06:
                    ed:80:08:82:9b:e4:48:88:75:20:8b:84:5e:6b:ec:
                    eb:ce:85:5a:6b:47:3d:f1:24:30:2f:bf:1d:81:5b:
                    ae:e1:28:70:f1:20:23:25:44:1c:99:3b:fc:6b:dd:
                    dc:6b:7a:da:94:db:fe:a3:bd:34:a1:8f:be:c3:bd:
                    ad:20:60:03:78:1c:95:f8:ef:33:65:9e:1b:e9:65:
                    9e:a2:ec:49:1b:33:28:5c:87:45:fe:75:6f:ab:49:
                    ca:4e:7e:88:c5:45:17:04:96:c5:aa:fd:cf:f0:91:
                    37:ee:d2:ec:59:dc:35:03:a2:07:79:2c:99:da:2b:
                    25:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:13:DE:DB:43:AE:82:1E:EF:DA:BD:78:6E:E3:95:8F:F8:23:84:D8
            X509v3 Authority Key Identifier:
                keyid:E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:b8:03:1c:63:1e:de:c0:c2:52:45:02:64:de:0b:4b:51:a5:
         c3:e3:b8:dc:f8:21:7c:d3:71:01:bd:9b:01:73:ea:62:00:40:
         78:08:0e:d1:7a:c8:a4:e2:42:cc:52:6d:4b:48:25:da:69:7c:
         2a:df:1f:b5:8d:6f:7d:45:d7:85:ba:fa:36:49:7f:b5:18:2c:
         89:2c:bd:67:04:ba:50:fd:3e:9b:b8:b7:e1:16:97:d5:bb:87:
         96:c0:fc:72:2d:72:49:63:2f:41:14:83:20:8a:c9:a0:af:f5:
         40:50:5d:93:f0:75:3f:5c:cb:d2:d7:1b:8b:1c:1b:b9:2f:55:
         d8:73:12:f8:1a:f4:c3:00:3b:45:c1:39:a7:b8:c2:78:55:fa:
         0f:39:55:a4:a3:3a:ab:d8:75:b0:76:ac:e6:7a:a4:8a:43:94:
         d8:84:e2:a8:05:77:43:5d:5e:bf:b8:f0:c6:d0:98:32:45:af:
         e6:94:0e:ec:0b:48:5b:31:73:f7:4c:64:30:e4:83:bc:52:43:
         47:74:91:e7:60:d7:fb:83:7c:3b:66:9f:70:a2:86:8d:81:da:
         37:a6:23:39:24:00:7c:70:ac:7b:c1:97:3e:94:2e:cb:0e:79:
         98:1c:ec:73:58:60:99:56:d6:55:51:bf:56:ae:05:d6:1d:fa:
         26:6a:21:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:01:20 2026 by rpki-client