Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
File:                     aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft (raw, json)
Hash identifier:          CnwwldOjurR7sj+ahynSzaDwZRyxOPpUfD8Ca+N8LRw=
Subject key identifier:   1B:1E:94:6C:DF:9D:B5:7C:4C:0F:74:59:2A:33:1E:E3:E1:E7:E9:A3
Authority key identifier: 68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A
Certificate issuer:       /CN=A91C4750/serialNumber=68763E92A2C17853167576651103F81F59ACDC1A
Certificate serial:       08C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
Manifest number:          08B5
Signing time:             Sat 04 Apr 2026 20:14:16 +0000
Manifest this update:     Sat 04 Apr 2026 20:14:16 +0000
Manifest next update:     Sat 11 Apr 2026 20:14:16 +0000
Files and hashes:         1: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl (hash: Y9rQTEn4VXESmObs2rOSVWIGIP0HnPqV+pWR80JtMT8=)
                          2: DA1A98C4DABE11EAB12A5209C4F9AE02.roa (hash: Q2tDi7aDCqJfPbKlsvpv/Im3EMBA1tZp/jy9biarem0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl
                          rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2247 (0x8c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4750, serialNumber=68763E92A2C17853167576651103F81F59ACDC1A
        Validity
            Not Before: Apr  4 20:14:16 2026 GMT
            Not After : Apr 11 20:14:16 2026 GMT
        Subject: CN=69d17118-3e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ac:67:21:72:70:44:c5:cc:fa:ed:33:f2:d4:
                    93:4c:d4:c8:3c:14:42:49:44:86:38:d6:a4:f0:a9:
                    05:e6:e0:27:3c:97:82:f3:a6:3a:35:40:71:23:f7:
                    66:a7:38:2e:b9:69:06:06:3d:5a:78:fb:4e:40:f6:
                    7e:bd:59:00:f3:90:15:3e:53:88:44:56:f2:1f:a5:
                    fa:eb:c1:01:e5:c5:c7:61:4b:b3:ed:8d:42:14:29:
                    b0:f6:a8:0b:86:3b:93:bd:8b:4b:47:91:17:5c:92:
                    56:e7:d0:fa:e3:21:df:48:2e:df:91:94:d6:ca:43:
                    77:fa:ec:a4:18:68:00:b2:f8:4e:7b:9e:63:8f:77:
                    58:60:be:72:b3:06:c6:c4:61:e2:38:53:30:34:f9:
                    d0:67:74:12:1d:d0:66:ed:d1:5f:c7:f5:e6:f3:57:
                    7d:44:bc:28:99:a0:c3:4d:55:c7:af:c3:b4:57:b1:
                    4c:92:00:9a:ae:73:ed:f9:aa:bf:3f:f2:5e:80:9f:
                    11:6c:04:e0:f5:da:7e:d9:1f:a8:10:55:08:05:2b:
                    2a:1f:08:1c:e0:d4:ba:57:60:24:48:e1:33:0c:b6:
                    41:47:b3:50:0e:35:7a:ea:78:e8:be:8e:ba:a2:a3:
                    0a:dc:fe:22:13:fc:4d:c7:e7:11:e6:4e:d2:20:9a:
                    f3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1E:94:6C:DF:9D:B5:7C:4C:0F:74:59:2A:33:1E:E3:E1:E7:E9:A3
            X509v3 Authority Key Identifier:
                keyid:68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:8b:80:94:d9:9a:cc:96:29:44:11:c1:15:1d:3c:15:ab:5c:
         83:e7:51:08:db:4b:61:ea:7f:8c:c7:ba:25:74:e7:cc:ba:3e:
         1d:b7:14:d2:24:42:19:74:6d:5d:e9:ad:df:33:76:88:90:7b:
         89:20:63:01:fd:a3:d3:04:02:77:fd:f1:17:0c:89:c7:f8:98:
         0c:b7:5b:e2:e5:77:83:31:bf:7e:3e:93:8c:df:1f:69:ea:c4:
         89:dc:48:8a:00:af:27:ad:f1:03:bb:43:3b:51:9c:41:6c:4f:
         c0:a6:12:5e:77:e1:88:2e:32:d1:3f:d5:2c:9a:9a:f4:62:67:
         4b:79:63:ed:f0:5e:3d:14:0f:27:c0:15:24:2d:69:de:6e:d7:
         45:09:42:03:60:1a:2c:11:84:4d:2b:73:89:4a:ae:0f:98:a7:
         37:04:13:0a:1f:4f:f8:08:7a:d6:90:90:28:e7:2b:69:43:94:
         da:69:c8:67:1d:82:0a:a8:12:50:61:f5:dc:3a:3b:47:3e:bc:
         08:bb:7f:90:31:36:8a:11:25:82:38:34:a9:84:17:93:aa:00:
         79:c8:21:6f:b7:8c:b6:d1:2f:39:87:ea:8a:2d:b1:c0:d1:b7:
         f8:bd:16:97:0c:3e:a0:87:1b:bb:f1:20:05:00:cf:c9:02:a1:
         75:2b:7c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:08 2026 by rpki-client