Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
File:                     RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft (raw, json)
Hash identifier:          SZddJPSMXBgQ/Z/ZGB8K2u1nsvy78ql5kUo6CQKF5FU=
Subject key identifier:   5D:C5:0C:B6:38:40:D3:C5:77:5E:33:7D:75:BD:26:09:BE:E6:00:76
Authority key identifier: 47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A
Certificate issuer:       /CN=A91CB8BA/serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A
Certificate serial:       0975
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
Manifest number:          0961
Signing time:             Thu 16 Apr 2026 20:03:16 +0000
Manifest this update:     Thu 16 Apr 2026 20:03:15 +0000
Manifest next update:     Thu 23 Apr 2026 20:03:15 +0000
Files and hashes:         1: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl (hash: ZiA551vv89YkIwJ+Vi9S7oUzEcXf2dQ4xOnvjURpJiY=)
                          2: 465DBB30BA8811EAAF996D39C4F9AE02.roa (hash: tEVppuvDqO2Igjts26bHGw8+2Z3qSj1DL7NhnyY1wWw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl
                          rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2421 (0x975)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB8BA, serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A
        Validity
            Not Before: Apr 16 20:03:15 2026 GMT
            Not After : Apr 23 20:03:15 2026 GMT
        Subject: CN=69e14084-628a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7f:c1:5f:77:05:3a:2f:ec:2b:19:bd:7c:a4:
                    7a:95:5a:4f:a7:ca:99:93:bc:29:1f:e2:94:a7:ca:
                    65:23:00:70:9a:37:14:8c:3a:b3:da:66:35:58:df:
                    cf:ac:67:3a:a9:0e:d0:42:2a:f2:9b:fe:ae:6f:41:
                    81:b0:76:9f:56:39:d5:80:bc:9b:55:92:94:a1:7a:
                    d7:d8:5f:df:ea:fa:7b:d3:99:e0:1e:d7:ca:8b:f7:
                    96:1c:9d:d0:42:74:58:b2:c1:55:01:c7:cb:51:5a:
                    04:c0:30:51:7d:de:99:52:4e:34:83:f8:a0:8c:f5:
                    8f:48:0d:82:6d:f5:e4:ea:98:5c:31:e4:5a:fc:80:
                    18:a0:5f:7d:69:5e:05:ab:e8:48:63:47:b7:e5:e1:
                    39:62:52:f2:24:ad:db:d8:01:ea:b2:d2:95:47:c2:
                    c8:98:f6:c2:96:48:70:ad:ea:5a:9b:a9:19:4e:7b:
                    a7:fc:43:5e:ef:7d:30:6a:74:3b:cd:ac:18:64:62:
                    39:30:6f:6d:81:99:9c:76:d0:e7:13:29:a3:ea:b7:
                    36:a5:68:97:a6:58:ee:8e:53:e8:30:4f:ae:38:20:
                    ca:88:ed:f0:0d:b1:66:c0:b4:c8:f8:87:3e:60:8d:
                    c1:1a:53:2d:d5:e1:71:d8:a6:83:bd:c8:2f:15:8c:
                    dc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C5:0C:B6:38:40:D3:C5:77:5E:33:7D:75:BD:26:09:BE:E6:00:76
            X509v3 Authority Key Identifier:
                keyid:47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:8f:79:77:c3:c6:61:1d:7c:c4:5b:d6:5e:15:9e:57:16:c0:
         a8:aa:50:55:05:0a:51:a1:85:d1:ba:b1:0f:0a:bb:b8:d1:30:
         82:27:01:89:23:17:e5:29:7e:b6:36:da:90:de:8a:b0:01:59:
         07:e4:c7:e4:48:3b:0a:ff:10:ab:17:ce:f8:6f:72:31:15:c1:
         8a:05:0f:3d:f0:6d:41:bf:8e:42:d7:95:63:ef:f8:49:04:a8:
         f2:49:80:42:18:e7:46:af:3c:c1:0c:2b:88:28:80:ad:23:e3:
         f4:39:07:83:9b:02:1f:e6:9d:da:e8:23:86:8e:cf:5b:86:d9:
         11:bc:94:23:06:a8:48:74:ec:19:cd:26:76:87:59:2a:ab:01:
         bf:8c:b3:02:05:e0:11:53:53:90:81:cb:f4:3f:1b:f7:af:fc:
         b6:b9:89:3c:fe:65:7c:01:3f:88:ba:d3:53:52:a7:1c:b4:92:
         95:9b:26:38:a1:d3:72:84:82:2c:db:f4:23:34:08:17:ca:ed:
         71:9d:07:74:9d:e9:8e:3c:03:4e:44:b5:7c:d9:53:19:52:dc:
         da:94:27:fd:8e:ce:d2:26:73:01:27:0c:0d:d7:8b:2b:b2:37:
         4e:3b:67:8c:42:be:b0:8d:34:d4:42:b7:e6:85:3a:eb:8c:cb:
         cd:21:4a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:07:05 2026 by rpki-client