Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
File:                     SUICsDHp9CdkMVegbvqkwHDH8-0.mft (raw, json)
Hash identifier:          dobaYIyvfG9HjgRHt9J+tBzqzWk8MqSvsniZS5K7Yuc=
Subject key identifier:   C2:60:D6:F2:3B:36:52:06:48:BD:5D:08:6E:28:D0:2A:BD:0C:91:FC
Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED
Certificate issuer:       /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
Certificate serial:       059D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
Manifest number:          056E
Signing time:             Sun 26 Apr 2026 23:22:48 +0000
Manifest this update:     Sun 26 Apr 2026 23:22:47 +0000
Manifest next update:     Sun 03 May 2026 23:22:47 +0000
Files and hashes:         1: SUICsDHp9CdkMVegbvqkwHDH8-0.crl (hash: m9RHR77G9QOxsr1pI8R1PGbDLBB8Lm8pRrrGJp4LXpc=)
                          2: 6E6FEF28DC1311F0BA8FDA195F6F56BC.roa (hash: 3r8CxlUZOsQEEWTpjiWsr2BfpeGMKmyHkxU/0NH+Z88=)
                          3: E42E712E2C5611F18D711091AC833773.roa (hash: Cw/s9C+PLsgHQNbNP+ru73AyzgVUYgu3SzuDfcGzzuw=)
                          4: 9F890910DA3C11F088DF33818DD3641D.roa (hash: CyGCSQ/pp0O9nS30RykGQWMhzlMelMN01TjpiPGbPpU=)
                          5: C32D1F4A13A011F09B8EF66AC4F9AE02.roa (hash: YKeKH2q636l3KSJMk82cm/+9dzWTPFS/wE3lhbjl9yE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl
                          rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 23:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1437 (0x59d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
        Validity
            Not Before: Apr 26 23:22:47 2026 GMT
            Not After : May  3 23:22:47 2026 GMT
        Subject: CN=69ee9e48-a92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:64:66:05:ff:a1:e2:fc:50:e0:ba:46:8d:4a:
                    c5:d9:95:27:7f:e2:6b:35:34:ce:e6:d9:42:d2:41:
                    48:a3:94:ec:6c:16:bf:61:f1:71:c3:37:97:80:6e:
                    46:1b:de:2c:99:11:6a:46:67:64:ac:f3:1d:0e:cb:
                    ee:bf:d6:48:11:53:8d:e1:0f:cb:57:36:28:86:f1:
                    50:f4:39:e5:14:fd:ae:87:25:22:3e:3e:ec:1a:45:
                    3a:1c:6e:dc:c1:de:9a:85:ca:e3:fc:7d:2f:a4:5a:
                    ef:5c:77:b4:bf:8b:8b:a9:01:0f:02:71:ab:86:0f:
                    d3:86:3b:f5:1d:96:af:6a:9c:17:e9:64:5c:55:84:
                    ce:54:39:b2:44:42:c0:e2:1b:44:0e:9a:6e:90:07:
                    a3:5b:12:0e:e8:8e:42:50:b6:63:fb:64:42:66:61:
                    30:3b:78:f0:60:58:00:2e:ff:43:6e:cc:1b:5e:eb:
                    75:84:7f:bd:5a:2a:a9:cc:0f:cf:cc:85:74:00:c1:
                    c5:5f:26:3a:77:0e:a4:92:27:9c:84:2f:04:22:1b:
                    6c:f5:92:04:25:ab:8e:18:e0:85:95:7a:1f:cf:95:
                    30:20:09:fd:8a:c7:9c:04:d6:b0:8c:94:8f:ad:11:
                    2e:d7:cc:6b:48:a3:42:be:65:68:02:31:73:5b:67:
                    d8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:60:D6:F2:3B:36:52:06:48:BD:5D:08:6E:28:D0:2A:BD:0C:91:FC
            X509v3 Authority Key Identifier:
                keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:1c:39:33:9c:5f:b3:23:13:2d:e3:03:61:bc:6a:70:09:70:
         fe:b7:84:fb:01:5e:63:14:ac:ac:93:d1:cd:1e:04:70:42:03:
         60:88:99:35:33:ce:38:bd:40:a7:51:eb:6e:09:11:87:cd:48:
         25:99:ca:5d:3f:95:cb:28:48:31:06:20:33:98:21:db:d5:ef:
         b9:da:d6:71:e0:80:ed:8a:20:02:94:28:a6:ce:f6:3e:14:8d:
         88:49:3d:a6:5b:d8:83:51:50:33:d8:28:7d:35:e0:4f:32:dc:
         eb:ee:a0:0e:9f:68:40:1a:35:07:67:f8:8b:e4:76:07:1f:64:
         0f:11:bf:b5:85:d3:a4:87:5f:96:1a:05:18:7f:11:22:17:a1:
         45:28:50:bb:68:6e:1d:86:ed:3d:f7:6d:23:37:73:cc:73:f0:
         1c:a7:1d:8b:43:7d:fc:eb:76:9d:22:38:e1:b3:8b:2f:8f:fa:
         54:a2:a9:30:0d:a4:94:b4:3f:54:7d:75:32:db:43:34:5f:a4:
         90:d4:e3:00:f3:da:07:3d:f2:5f:56:18:dd:18:57:be:9a:2a:
         37:d4:4e:b4:6b:7d:1c:0d:37:eb:14:cb:b9:b6:55:e5:e8:94:
         12:51:3e:4b:f5:4e:ad:d6:d6:6e:71:b1:f7:47:50:90:8a:54:
         f7:b1:f9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 02:06:15 2026 by rpki-client