Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft
File:                     c0CQ78N5g_0XW-AvSUlmiiFDciE.mft (raw, json)
Hash identifier:          aPFNyzUY7Pnbie8mJzYiBVSe+ciC7cTuGMKSBEOnFKI=
Subject key identifier:   94:D6:BC:2D:78:5E:47:41:74:5F:32:49:C3:32:8F:AF:6F:74:9D:C7
Authority key identifier: 73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21
Certificate issuer:       /CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221
Certificate serial:       0568
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft
Manifest number:          0554
Signing time:             Sat 04 Apr 2026 23:13:18 +0000
Manifest this update:     Sat 04 Apr 2026 23:13:18 +0000
Manifest next update:     Sat 11 Apr 2026 23:13:18 +0000
Files and hashes:         1: c0CQ78N5g_0XW-AvSUlmiiFDciE.crl (hash: 7f+9gEEyPggzDum6qpbluYZmBR3sUQicPlYx8Owxf30=)
                          2: 4B95A58630B111ECAC3FE61DC4F9AE02.roa (hash: Chq3dYly7My4Q8PklpLWnHQt3rosp5Ahuq1dGPO+d4M=)
                          3: 7F8113B6D4DC11F091B5A227C4F9AE02.roa (hash: Kb5ukJ2yV0LLo+vAzqQ8VWRHEE3xT5Y505QcDOL5rkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl
                          rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:13:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1384 (0x568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D025A, serialNumber=734090EFC37983FD175BE02F4949668A21437221
        Validity
            Not Before: Apr  4 23:13:18 2026 GMT
            Not After : Apr 11 23:13:18 2026 GMT
        Subject: CN=69d19b0e-884f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ee:c0:b9:9a:b2:5d:6a:52:04:6c:b8:30:92:
                    dd:39:39:70:9f:6e:67:86:af:a8:56:d3:db:59:37:
                    b0:08:93:93:8b:94:a5:da:11:f7:97:4b:f3:c6:73:
                    e1:99:1f:cb:c2:68:c3:0f:06:37:6e:7c:71:8b:84:
                    b5:fa:fd:65:33:dc:41:dd:f3:42:e7:7f:d9:2c:73:
                    ca:cb:2e:31:3b:2e:0b:51:a7:3a:2f:f4:17:b8:15:
                    82:1c:10:72:dc:f4:18:8f:6e:75:36:0e:e0:f9:07:
                    3d:ac:65:30:d0:34:68:1c:14:3e:35:a3:f5:35:44:
                    4f:7a:22:62:f0:e8:d0:b5:94:8c:fa:f3:f2:89:6e:
                    57:61:ce:c5:b1:a2:a0:39:04:a0:26:64:d5:a6:f3:
                    22:3d:39:a9:18:65:8b:88:cb:3b:4a:60:ef:6f:36:
                    fb:65:9b:97:4c:9d:7e:80:aa:c7:4f:0b:2e:15:8e:
                    91:ae:0c:5e:1d:bd:25:0f:20:e6:4d:a3:3f:5c:78:
                    40:7e:45:53:3e:ed:88:a3:bf:8c:15:e8:2a:ac:30:
                    07:25:5e:32:f4:95:24:fa:22:56:20:f3:64:de:1c:
                    18:90:f9:83:c5:1e:e3:cf:ea:77:0f:37:4d:99:46:
                    11:68:22:f1:07:69:3e:77:79:03:36:8f:fb:68:de:
                    a1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D6:BC:2D:78:5E:47:41:74:5F:32:49:C3:32:8F:AF:6F:74:9D:C7
            X509v3 Authority Key Identifier:
                keyid:73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:4b:53:ad:f1:cb:60:31:a9:45:6c:0b:2c:e2:34:1a:f9:0e:
         fa:6f:bd:d5:60:90:b4:bf:c8:28:b8:c6:45:6f:7e:a8:03:98:
         48:5f:06:0a:30:df:49:17:f0:af:d6:62:8f:fa:4b:12:f0:1e:
         26:a1:43:89:93:9c:3d:b1:1f:33:83:88:fc:80:d4:9e:5a:ea:
         7d:70:21:37:02:a9:f2:59:78:d3:4f:51:94:a9:cb:a2:71:e1:
         4e:4b:89:85:5b:14:1d:53:36:62:de:e9:89:fa:ab:e4:6b:0a:
         4f:50:fa:44:94:34:99:9a:70:68:1f:63:5f:92:ae:d9:37:11:
         fc:9a:7c:8d:e5:a5:cf:c6:29:09:43:dc:bc:bc:b3:6b:b7:e0:
         29:e6:90:9a:d2:b1:19:ad:a4:d4:c5:98:69:2c:27:29:6f:bb:
         80:2a:a8:c5:f2:64:0b:1d:c4:b3:80:97:c8:46:23:d5:ad:9a:
         26:c2:f1:b0:22:3e:09:5e:ef:5f:6b:dc:9c:1f:7a:85:69:1d:
         f2:83:ac:e3:02:18:a6:c5:d8:f9:59:20:73:b7:4b:33:fa:fd:
         82:5e:ad:48:9c:00:78:54:f4:a1:61:76:82:50:c6:57:4b:ca:
         da:cf:1d:52:e6:d1:2e:07:ba:c3:40:a3:38:24:01:d0:26:89:
         9b:18:88:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:33 2026 by rpki-client