Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
File:                     3M1VNVK6-KZcGgZrM0f3kyRPV14.mft (raw, json)
Hash identifier:          LScjpKvNUYZl/si2hHJ3/4ILZsehl2nXnQJChJKL78k=
Subject key identifier:   D4:6B:4D:A0:14:94:30:49:9F:8E:5B:BC:D7:BD:E3:70:42:8C:F8:7F
Authority key identifier: DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E
Certificate issuer:       /CN=A91BD829/serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E
Certificate serial:       0ADA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
Manifest number:          0ACE
Signing time:             Mon 20 Apr 2026 19:22:25 +0000
Manifest this update:     Mon 20 Apr 2026 19:22:24 +0000
Manifest next update:     Mon 27 Apr 2026 19:22:24 +0000
Files and hashes:         1: 3M1VNVK6-KZcGgZrM0f3kyRPV14.crl (hash: /IYAetQxlj0kdMFT0TNG/b3TzAEVMB9S9NDlqGluOoM=)
                          2: 1D28516E70DA11EA957FDE74C4F9AE02.roa (hash: gtJjhkrsvX4UbJWPIxhCIDDPfa2ngXQGjRcobVE2Yx0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl
                          rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 19:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2778 (0xada)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD829, serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E
        Validity
            Not Before: Apr 20 19:22:24 2026 GMT
            Not After : Apr 27 19:22:24 2026 GMT
        Subject: CN=69e67cf0-dd43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:36:6b:46:f2:d9:f7:4d:c5:d4:bc:75:b6:b2:
                    5c:60:a3:de:7c:5a:88:0c:05:91:70:09:fa:1b:e5:
                    25:06:80:cd:f4:59:2e:25:93:68:25:b5:81:e9:b7:
                    84:d4:8b:4e:78:b6:e7:16:78:da:7d:5f:44:9a:ea:
                    25:86:d1:cd:b7:3f:79:af:02:36:6a:8e:09:34:97:
                    de:76:c9:60:e4:8e:61:24:1a:33:6c:e6:1f:80:49:
                    c4:25:95:a0:ca:c4:cf:2f:35:de:80:cf:2e:65:89:
                    75:e4:33:2e:00:33:25:bb:c1:b3:0b:30:2a:f9:89:
                    13:1d:11:89:7f:ad:b2:97:8c:53:74:ad:67:c0:fc:
                    6e:c0:db:04:d1:9d:65:c3:f9:68:76:f9:df:b1:b7:
                    d4:14:ef:86:b9:81:a3:80:cc:1d:1a:f6:f8:b3:24:
                    8a:bf:d8:50:fb:bd:93:28:8d:80:4f:66:a7:b7:1e:
                    63:1a:14:70:f5:ef:cf:f3:4e:a7:d9:9e:51:4f:e6:
                    2d:09:f2:ce:8a:52:35:7f:6c:9c:c0:f4:3d:f8:8e:
                    bd:df:7d:35:05:e7:2b:dd:e6:4c:dd:35:54:78:d4:
                    4c:02:64:ef:16:03:30:a4:b7:f7:d7:26:cb:de:d3:
                    b9:90:0e:88:36:30:e0:5e:82:c7:8d:96:53:0e:ee:
                    18:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6B:4D:A0:14:94:30:49:9F:8E:5B:BC:D7:BD:E3:70:42:8C:F8:7F
            X509v3 Authority Key Identifier:
                keyid:DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:98:79:b3:ee:74:43:81:39:f1:6b:06:17:25:75:7e:08:2b:
         45:76:26:20:93:46:6e:d5:22:9a:0e:ed:4b:b8:99:ae:a8:b9:
         54:f5:aa:6c:36:4f:36:2e:d6:d2:95:08:a8:40:f2:80:bb:06:
         d1:45:d5:33:d4:01:71:54:2f:43:5f:a3:6f:6d:51:ca:be:a7:
         7e:b1:eb:42:a6:4b:e2:1a:a4:0e:e2:3a:66:bf:57:f1:ae:a0:
         1b:ee:db:a7:8a:87:d5:bb:2f:ac:87:0e:8d:69:73:95:87:45:
         b6:62:8d:75:63:b9:cf:6d:f8:c0:34:9c:94:5a:d7:dd:45:0a:
         32:a9:45:20:1c:e9:ee:43:7e:16:1c:db:20:5e:da:1a:4e:48:
         8d:27:43:6b:82:bd:6d:14:b5:f6:08:e5:af:bc:2a:83:32:90:
         31:64:9f:bc:46:13:19:47:2b:84:c2:bc:d6:75:9d:45:2c:27:
         b2:9d:55:a6:a6:32:a6:28:59:c6:87:6c:18:3f:e8:4c:f8:65:
         7f:c2:99:ed:19:f0:55:d0:35:f1:81:ac:19:b1:91:76:30:2a:
         8d:11:29:a0:25:1a:ad:15:7e:7f:e7:58:d9:3a:03:4a:51:32:
         87:d4:20:65:1b:54:19:ba:f9:59:c3:8b:0d:fd:ed:48:16:c8:
         1b:db:74:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 10:27:51 2026 by rpki-client