Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft
File:                     148wkE5135TOt1lmr4OOdj6ol2I.mft (raw, json)
Hash identifier:          dY6095IcQNuP3D54+5DcoXAr1mzyPUgTXfpq7nB3QWM=
Subject key identifier:   FE:DC:6E:58:4A:8F:5C:3C:E0:08:85:43:A3:3D:4F:E4:26:1B:1E:F4
Authority key identifier: D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62
Certificate issuer:       /CN=A91CE403/serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762
Certificate serial:       016C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft
Manifest number:          0166
Signing time:             Sun 05 Apr 2026 04:20:58 +0000
Manifest this update:     Sun 05 Apr 2026 04:20:58 +0000
Manifest next update:     Sun 12 Apr 2026 04:20:58 +0000
Files and hashes:         1: 148wkE5135TOt1lmr4OOdj6ol2I.crl (hash: +YLn9hOe0hPGRRbDJs3rH65HQbu/1Jje/57KnI/08TE=)
                          2: B74BF7F018BF11EFB54AFB20C4F9AE02.roa (hash: i7+K6StkhEeeezuH07nFABJ4+D7tgTloR83xwjCdBu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl
                          rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:20:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE403, serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762
        Validity
            Not Before: Apr  5 04:20:58 2026 GMT
            Not After : Apr 12 04:20:58 2026 GMT
        Subject: CN=69d1e32a-e79f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4e:bc:a1:15:89:59:3a:e5:79:4b:d5:05:ab:
                    8d:27:35:19:a4:c6:88:ac:b7:d7:4d:92:aa:e8:0d:
                    11:b9:ec:b1:62:f2:de:7c:43:66:fd:28:a6:fb:4a:
                    32:96:39:2a:ef:f8:d3:c4:28:17:74:24:ad:df:d6:
                    2c:bc:27:4d:f0:4a:c1:df:04:48:24:8a:6d:bb:06:
                    2e:0f:97:14:27:20:fe:45:e8:bb:f6:c5:67:79:b4:
                    ec:80:f6:da:db:d7:6d:da:7e:58:5d:03:23:33:6d:
                    c9:b5:f5:01:09:5a:2e:88:00:70:7c:e3:20:dc:06:
                    c3:5f:e2:05:cf:97:d9:72:5c:21:53:bb:39:da:09:
                    cc:b7:7d:6e:ce:f5:37:1a:20:10:4f:5d:f4:61:ec:
                    30:f3:58:c3:fe:29:79:7b:bd:b0:fd:93:a5:24:12:
                    9f:fc:dc:64:a5:b2:c8:85:c9:6d:3f:f7:31:13:de:
                    d1:8d:77:f6:b9:81:3a:4b:75:11:e4:dd:27:fe:19:
                    57:01:a4:dc:3c:d1:49:70:77:04:8c:b6:ba:3d:61:
                    f1:2e:ae:b7:0b:a4:65:84:44:77:22:1e:60:12:74:
                    f3:52:11:f7:ba:04:db:98:52:15:ef:da:9d:87:4b:
                    5c:cd:57:7d:7d:d6:56:89:cd:08:d7:a0:8a:94:47:
                    af:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DC:6E:58:4A:8F:5C:3C:E0:08:85:43:A3:3D:4F:E4:26:1B:1E:F4
            X509v3 Authority Key Identifier:
                keyid:D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:15:cd:45:84:a3:89:80:57:52:dd:ac:6a:6d:fb:30:64:dd:
         71:bc:42:99:32:f1:2a:b7:99:1f:7d:eb:60:c8:50:62:5b:1a:
         41:76:39:ad:4b:35:5c:21:1e:1b:ef:6f:a0:d0:d6:83:cf:4c:
         5d:1a:e1:49:12:7a:6f:f2:b0:f1:fe:ba:38:36:7c:04:80:b6:
         c5:ea:e0:72:5f:bd:91:6c:fd:2b:25:43:7b:2e:6b:d0:4a:76:
         0c:e7:64:5e:cb:ec:73:ce:bb:d4:37:2d:25:9d:64:f5:55:5f:
         6c:ad:3e:07:44:53:cc:bd:46:94:56:68:a9:f0:77:e7:96:5a:
         ac:18:40:7e:bc:6b:4c:ee:bb:c2:67:5e:ff:92:94:64:f5:2f:
         81:01:e1:51:32:2a:19:31:f3:a6:7b:33:b0:50:f1:12:d1:82:
         67:8f:2d:53:d3:c1:7e:ad:ab:be:65:06:06:d9:da:19:50:23:
         10:70:66:b7:d8:1b:64:4d:fa:d4:10:91:e0:ed:11:03:b3:6e:
         54:a5:cb:cf:55:d0:b6:fb:6e:69:48:a0:fd:7b:f8:1c:1a:a0:
         57:61:64:a5:9e:b2:ad:ed:3f:40:30:58:ef:47:65:f2:6e:bd:
         fb:f8:58:b0:28:64:86:fd:6f:95:5e:bd:82:4c:f9:e7:87:5e:
         51:37:72:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:27:03 2026 by rpki-client