Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft
File:                     MEsColZqFjrazh-lIaMKfmJqwR4.mft (raw, json)
Hash identifier:          avpOFqoWsJTdBKOYA6vTsCRp9WAbcZsS1qvItJF1aaE=
Subject key identifier:   95:DD:CB:ED:63:04:DF:ED:4C:F8:44:57:90:B4:95:B1:2E:E5:75:A4
Authority key identifier: 30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E
Certificate issuer:       /CN=A91CAECE/serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft
Manifest number:          BD
Signing time:             Sun 05 Apr 2026 06:23:11 +0000
Manifest this update:     Sun 05 Apr 2026 06:23:11 +0000
Manifest next update:     Sun 12 Apr 2026 06:23:11 +0000
Files and hashes:         1: MEsColZqFjrazh-lIaMKfmJqwR4.crl (hash: 1fCOBoOPYvoDYlKnqshuU/wkXqcSILcf8nQZDK4p9Jo=)
                          2: 07063FA4134B11F0B48EFA0AC4F9AE02.roa (hash: yRpg8YzN41NYB9rsIYgkG05og6BR0pcJnbn3a4gO0DU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl
                          rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAECE, serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E
        Validity
            Not Before: Apr  5 06:23:11 2026 GMT
            Not After : Apr 12 06:23:11 2026 GMT
        Subject: CN=69d1ffcf-f5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4d:e9:58:6f:c3:6d:19:ea:3c:6f:72:9f:8f:
                    96:1c:2b:77:c2:f0:cc:60:95:9a:12:3c:75:8b:c7:
                    a9:58:90:7c:90:ea:c5:7d:ce:40:a4:ae:18:86:66:
                    45:6a:e1:e0:05:ae:a3:e7:11:a4:bf:46:eb:40:c6:
                    ac:6d:76:d4:29:4f:c3:b8:f9:0f:dc:2e:6c:08:83:
                    e2:e5:0a:28:51:56:ae:dc:34:3c:a9:8a:3f:fc:da:
                    a2:4c:9b:60:f7:e6:40:69:71:26:89:5d:2c:a5:e2:
                    95:b2:dd:fd:e4:e6:02:40:dd:b4:16:4e:33:b4:80:
                    89:c0:0e:a5:30:4a:5b:a4:2e:c3:cd:1d:a5:45:69:
                    d8:fd:27:f5:c0:bd:12:2c:df:d9:98:63:72:c5:fb:
                    ba:13:23:e2:c2:6a:96:76:7d:3c:0d:a8:d4:12:86:
                    77:d6:12:26:1f:9a:42:d7:58:69:6e:17:58:0b:b8:
                    b5:51:1e:25:12:53:38:1f:94:b9:f6:4a:8e:da:42:
                    13:85:fc:c9:6d:e0:6d:1b:3f:0b:2a:05:92:06:76:
                    a4:1c:e3:ed:db:ea:35:72:cf:0d:1f:37:de:cf:92:
                    70:76:e9:09:68:9f:ce:93:98:1b:19:08:59:3d:6c:
                    20:00:55:aa:db:26:73:b0:f6:ad:74:fc:6a:61:d3:
                    6c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DD:CB:ED:63:04:DF:ED:4C:F8:44:57:90:B4:95:B1:2E:E5:75:A4
            X509v3 Authority Key Identifier:
                keyid:30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:32:1b:7e:94:47:bc:ad:75:14:e1:31:54:cd:8d:fb:8b:76:
         0a:c0:aa:3f:50:b4:e8:41:ce:56:6a:8d:15:b7:cb:c3:ef:a9:
         3a:cb:4d:e5:7d:81:c7:2d:59:45:11:59:27:dd:99:b0:62:7f:
         23:49:59:0d:4e:9b:57:36:04:9b:9c:3a:28:1e:ea:ec:66:bc:
         92:89:37:4c:15:48:ce:9e:8a:bf:c6:c9:7b:1a:f6:0a:60:88:
         be:f0:d1:fa:92:c9:db:9e:aa:d5:5a:d2:7f:85:79:17:c3:4f:
         6c:54:5a:5f:73:e1:52:b8:db:43:74:ca:b9:3f:4c:4c:ac:3d:
         ac:6f:77:b8:61:59:d9:2a:9d:48:4c:b2:07:26:81:23:e7:aa:
         00:7c:6a:20:47:60:ec:39:c0:7f:82:6c:ce:45:b1:46:b9:28:
         14:11:dd:17:bd:95:3b:31:b4:8c:71:74:b9:07:81:8f:8b:09:
         2b:4c:58:7f:6b:e6:df:03:6f:9a:e9:ca:2d:ff:8b:8e:ce:a5:
         c5:64:b0:be:f1:10:92:ea:6e:56:0f:aa:e4:63:53:d2:2a:a8:
         a5:68:aa:88:cd:05:04:e9:9c:77:bc:8f:a3:c8:72:72:7f:af:
         ae:88:64:28:c9:82:90:87:eb:cc:11:78:64:09:89:74:f3:30:
         29:69:a5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:53:40 2026 by rpki-client