Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
File:                     FYuWZk-xya7us9KHB_h3_iN7Atw.mft (raw, json)
Hash identifier:          wufs9/5TqYpSVJvXsS/qtKxgxVnryMYrDm9Sx/eRgF8=
Subject key identifier:   E5:E9:21:F9:CC:76:35:BE:EB:7C:B9:B8:8C:E6:57:50:4D:5A:C4:D5
Authority key identifier: 15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC
Certificate issuer:       /CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
Certificate serial:       02CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
Manifest number:          02B4
Signing time:             Mon 27 Apr 2026 01:26:39 +0000
Manifest this update:     Mon 27 Apr 2026 01:26:38 +0000
Manifest next update:     Mon 04 May 2026 01:26:38 +0000
Files and hashes:         1: FYuWZk-xya7us9KHB_h3_iN7Atw.crl (hash: Isr03aFuOtkf1NAVb0bRsmvdFhSOFfjhRRnKcgzAzg4=)
                          2: 378FB0D25B9211EEB8E7453DC4F9AE02.roa (hash: 9JCyRgRs6j+igw+gtUtxDvzUhWBvN1Zyyhk+gm4t+MI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl
                          rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 01:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 716 (0x2cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C08EE, serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
        Validity
            Not Before: Apr 27 01:26:38 2026 GMT
            Not After : May  4 01:26:38 2026 GMT
        Subject: CN=69eebb4f-5361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:69:73:54:73:c6:3f:b8:80:9e:38:18:09:6e:
                    a4:ad:04:fe:48:e7:2d:f3:76:fa:fb:04:f7:5e:2c:
                    dc:5b:91:7e:cd:b0:d5:18:e0:f2:db:07:0d:f9:86:
                    c0:aa:6f:e5:9a:b6:86:c3:21:67:a7:9d:6f:ff:05:
                    62:57:21:37:ce:43:0c:b1:bd:40:e8:ef:de:fd:9c:
                    d9:dc:ee:6b:c5:e4:ff:3d:ba:a1:00:8e:b6:fb:a9:
                    9c:13:fa:4c:77:73:c7:50:54:e1:e8:6c:c5:d1:32:
                    69:9f:bf:e3:2c:44:b9:4c:1f:92:0b:46:d1:97:b3:
                    9f:04:df:ac:e2:0c:33:84:09:12:62:57:1f:ea:d1:
                    e0:19:22:06:1c:66:c3:2d:05:70:fe:04:d0:6e:3e:
                    8b:4b:38:0f:a2:ca:2e:27:2f:fb:79:0f:d5:f7:24:
                    4c:3d:6a:66:3f:7d:f4:48:59:82:76:e8:09:b2:64:
                    90:96:37:ef:d0:d8:7e:d9:a7:ba:de:5b:ca:8f:c5:
                    98:90:d0:7f:bc:8d:99:6a:e6:d7:22:c7:14:90:bc:
                    d1:65:95:d0:50:93:9c:8f:a7:ea:f5:4a:cb:c9:4e:
                    63:92:0d:ac:c2:00:b9:12:c7:7d:89:04:8c:12:53:
                    6b:79:f5:e3:7f:ee:cb:30:c7:46:a6:ee:18:8b:8b:
                    20:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E9:21:F9:CC:76:35:BE:EB:7C:B9:B8:8C:E6:57:50:4D:5A:C4:D5
            X509v3 Authority Key Identifier:
                keyid:15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:c7:71:29:aa:11:49:d0:de:b4:4b:aa:71:33:9d:2a:36:e5:
         1e:f4:39:5b:b9:3f:21:d1:c7:51:c7:e8:0c:82:c8:12:b0:11:
         41:17:53:16:f0:33:57:ec:ef:98:1f:86:ab:33:b7:1b:a0:7e:
         e9:8a:04:46:16:9e:5b:5d:2c:5d:2a:95:39:f4:66:09:f5:5f:
         a4:64:0d:47:d4:cc:c7:b0:e2:81:b1:17:d2:85:d2:74:1c:09:
         60:ea:a6:12:10:d2:78:78:49:7d:41:b9:08:89:09:ac:3a:cb:
         48:e3:82:e4:2e:20:ec:1e:01:02:15:52:52:e6:71:d3:83:6d:
         15:21:1f:52:95:18:f4:cf:c8:19:8b:59:df:9e:b7:34:b7:9a:
         ed:e6:63:ea:cd:c6:40:1b:19:ef:db:c2:53:a0:af:ea:8a:22:
         00:81:39:7c:d9:b5:4b:73:59:0e:dd:83:63:a6:83:10:b6:40:
         7e:2c:b2:78:f9:ff:fa:be:8b:71:e4:d1:c6:f4:6c:a1:f8:af:
         99:26:91:03:fb:bb:0a:23:af:04:6d:4c:14:80:22:2a:73:2f:
         32:d3:d7:7c:8a:0a:8f:be:d2:a8:b8:65:64:9d:b7:7d:d4:e7:
         45:9b:a6:b2:16:46:09:bf:bd:36:2c:9b:26:f4:f7:6f:38:ae:
         bd:ba:76:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 07:27:46 2026 by rpki-client