Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
File:                     i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft (raw, json)
Hash identifier:          lSzyu9IktxtOOTmzFq9G18XoxBuyUv9InoeEU7qF54Q=
Subject key identifier:   3E:7A:DF:B5:7C:CE:4D:D8:42:D2:24:F1:7E:2E:81:94:08:B4:B1:3D
Authority key identifier: 8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D
Certificate issuer:       /CN=A91D37E4/serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D
Certificate serial:       081E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
Manifest number:          080F
Signing time:             Tue 28 Apr 2026 21:27:44 +0000
Manifest this update:     Tue 28 Apr 2026 21:27:44 +0000
Manifest next update:     Tue 05 May 2026 21:27:44 +0000
Files and hashes:         1: i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl (hash: wcFM4ziFYWpXNpdZ7YzbbtbJIZau4BbQZId3k7MVBA8=)
                          2: BD764EAE1D5B11EBAB008D19C4F9AE02.roa (hash: JZqHXQRGfZxF3NgJ2VE0gwCg4J3Ofdou+/uDHMJJLwg=)
                          3: D933655E23B511EBA7BDD50FC4F9AE02.roa (hash: D8eauO5Ji5HlCRuIfjUIlmK4L86PjKaAnDzrks9sonQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl
                          rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 05 May 2026 21:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2078 (0x81e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D37E4, serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D
        Validity
            Not Before: Apr 28 21:27:44 2026 GMT
            Not After : May  5 21:27:44 2026 GMT
        Subject: CN=69f12650-7999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:b5:13:7c:2a:8e:81:ee:ae:54:f5:0a:df:
                    3d:08:03:bf:02:d0:36:aa:82:5b:4f:0d:ac:06:f9:
                    38:5d:61:e2:bc:d9:16:04:d8:0e:86:4e:b5:3a:77:
                    35:fe:63:7c:dd:78:f8:25:1e:d1:e5:d1:21:d9:fb:
                    e8:65:be:c3:f7:87:5f:dd:b6:05:ac:a1:db:92:50:
                    30:6e:73:84:ea:cd:3a:22:34:07:d4:3b:db:76:9c:
                    a8:ec:b8:37:cf:14:86:4e:c5:61:c1:3a:97:53:4a:
                    0c:2a:af:c5:f1:52:8c:d3:32:fc:9c:8b:a9:6f:64:
                    3d:99:9d:7e:93:c4:1f:0f:75:ec:c5:97:66:1e:91:
                    0d:1e:48:64:46:bc:52:82:fd:f1:f8:11:6a:1b:12:
                    49:6b:b0:23:12:78:e9:6a:44:e0:a4:1b:5e:b2:88:
                    f6:63:c2:c5:23:36:b9:ed:c8:c2:9f:17:d6:3d:8b:
                    d5:89:ca:a1:a5:8f:97:69:15:d0:bf:00:d2:96:36:
                    58:ca:66:ac:50:1c:db:ce:ce:5a:c4:18:3f:2d:33:
                    0a:cf:ae:cf:16:b9:67:54:8f:83:d0:f3:b6:d3:5f:
                    f2:3c:77:74:23:79:88:d4:c8:6c:72:f0:b6:e4:7e:
                    4d:a8:b9:e7:c2:b4:68:8b:d0:6b:f2:cb:81:f4:da:
                    51:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7A:DF:B5:7C:CE:4D:D8:42:D2:24:F1:7E:2E:81:94:08:B4:B1:3D
            X509v3 Authority Key Identifier:
                keyid:8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:1f:8f:38:84:78:53:f9:32:ae:eb:9e:78:6b:f3:98:b9:41:
         cd:51:40:a6:7d:b0:03:cc:74:25:59:3c:b2:11:80:b1:14:32:
         64:84:ca:1c:54:36:8c:8f:bb:5a:4b:54:ee:b9:49:7b:cb:96:
         06:bd:aa:7e:58:d4:af:31:5a:9b:d9:79:e8:2b:40:e1:25:5f:
         0b:8c:c0:96:74:09:6d:15:bd:93:a8:c0:93:d5:24:79:8b:28:
         57:85:73:66:ec:d5:69:6b:f0:ca:87:85:fd:d5:84:cd:91:f2:
         a1:af:a9:af:9c:17:84:99:77:4f:82:3d:89:c8:72:71:db:92:
         20:e1:ed:5d:90:49:b1:9a:28:77:18:58:b5:fa:b5:9b:1e:41:
         f8:b6:a6:f0:b9:cd:22:3a:00:9a:78:76:07:18:6c:0a:dc:d8:
         b2:91:2a:cd:1b:1f:5f:a2:60:cb:bf:2f:9f:ee:e1:97:f2:86:
         da:56:e4:44:90:ad:0a:3d:55:10:bf:a9:7a:1e:17:ca:a1:c6:
         24:95:8a:b9:51:94:25:d5:ac:c9:6d:b8:36:fc:d6:a2:5e:04:
         20:3b:cc:9a:35:6c:99:0d:60:cd:bd:30:a5:7f:92:90:21:82:
         31:58:50:b9:1f:bb:3d:94:98:2e:c0:4f:4b:74:9d:80:c7:a6:
         da:74:f8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 13:48:04 2026 by rpki-client