Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
File:                     AwfvDynPItsJcPUIPAI8KqDW9Rc.mft (raw, json)
Hash identifier:          RgppDjw7KTmNKZ679cloTPobaL0lXdjvJ6IdmVdxD9E=
Subject key identifier:   C5:C5:FC:D5:C4:B5:F7:1A:D8:5B:7F:FC:6B:7B:DE:76:D3:80:5A:D1
Authority key identifier: 03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17
Certificate issuer:       /CN=A91D8704/serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517
Certificate serial:       0948
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
Manifest number:          093D
Signing time:             Sat 04 Apr 2026 19:58:25 +0000
Manifest this update:     Sat 04 Apr 2026 19:58:25 +0000
Manifest next update:     Sat 11 Apr 2026 19:58:25 +0000
Files and hashes:         1: AwfvDynPItsJcPUIPAI8KqDW9Rc.crl (hash: D5oFOrRlYP7hjC19naXdSDVQuefv6rzrQtDy2Yj8SlM=)
                          2: B1AAC5B2BC4111EA9A5B2786C4F9AE02.roa (hash: IdJiVEfXkz53fxZJhHT8GQYKhlPRXuo9bgGTxNlpUbA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl
                          rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2376 (0x948)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8704, serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517
        Validity
            Not Before: Apr  4 19:58:25 2026 GMT
            Not After : Apr 11 19:58:25 2026 GMT
        Subject: CN=69d16d61-aa44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d7:24:92:a5:8b:88:80:be:61:8b:9a:7e:0e:
                    27:41:74:75:76:1c:e2:91:b6:12:d4:a6:50:1e:56:
                    e4:20:83:13:10:cd:5a:bf:49:17:9f:9e:c3:26:d3:
                    b1:64:1a:0f:df:d9:f5:58:fa:e9:3d:ba:75:e0:b8:
                    81:8c:f0:b0:46:8a:5f:cd:f4:5f:50:81:7d:33:e5:
                    0a:14:b4:7c:a4:44:82:eb:f1:10:5e:66:4e:1c:30:
                    13:ad:2c:ac:98:81:a1:72:98:18:76:f9:61:e2:11:
                    f7:f1:a7:af:91:5c:3a:f0:f5:be:df:88:51:1f:bc:
                    e9:ff:de:85:ae:00:17:38:c6:ec:21:ea:bf:19:a5:
                    dc:b2:eb:8b:a0:86:9f:d9:6f:da:0f:69:d2:01:f0:
                    02:92:20:85:ae:47:0d:fc:60:7a:b1:75:fc:c6:3b:
                    c3:f2:8e:25:9c:ba:25:46:eb:dc:8f:96:2e:3c:b7:
                    4a:71:82:e2:6a:93:1e:fd:d0:84:23:d7:e6:f6:39:
                    54:f5:f1:cf:39:20:fa:69:8d:87:39:bc:c3:43:6f:
                    c9:5b:99:c8:cf:6c:38:cc:e5:e8:be:11:cf:6a:13:
                    a3:a8:07:67:48:49:81:1f:6f:79:3d:22:3d:54:d2:
                    d5:d4:55:db:83:23:27:c8:e3:3a:67:66:16:04:37:
                    87:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C5:FC:D5:C4:B5:F7:1A:D8:5B:7F:FC:6B:7B:DE:76:D3:80:5A:D1
            X509v3 Authority Key Identifier:
                keyid:03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ad:6c:2d:c0:da:a8:72:0e:96:46:6f:0a:5c:2e:bb:c8:cf:
         8b:16:7b:e2:23:1e:1b:9f:ac:be:82:27:aa:6a:dd:5b:b1:75:
         36:32:4e:6c:53:5b:53:df:22:44:7a:d6:4a:c6:70:43:72:ff:
         99:7e:21:a1:40:b8:00:8a:5c:4e:a0:48:bc:c7:e0:41:41:1b:
         84:f9:8e:93:75:d1:38:35:3f:7d:4f:3f:2d:8d:3f:fe:e6:90:
         b1:f1:c9:2a:01:e6:6f:a8:96:7e:f9:e5:4e:a5:c8:fd:05:61:
         2f:4f:a6:0e:63:3b:83:26:18:37:30:bb:ad:6f:0d:1a:d0:59:
         7f:db:9c:ac:a7:9c:18:82:0f:17:ab:20:50:ed:c8:70:2d:cf:
         99:3c:e0:50:06:6d:37:e5:24:88:28:74:43:75:f4:82:38:8a:
         78:4d:fa:4a:ac:78:9a:fa:77:f2:17:33:af:83:c2:c2:f6:84:
         42:ea:ba:df:24:c6:59:fc:03:d1:00:82:1b:7f:0e:67:4b:0e:
         07:c1:b7:e2:ce:29:16:8f:e7:fc:90:b9:d9:72:9b:ec:7b:1c:
         fa:06:08:61:e7:3f:a2:18:78:d6:5f:92:7a:7c:d4:35:6b:c7:
         5c:50:9e:b0:02:80:7a:a8:99:6d:9b:83:26:3e:5a:2a:98:3c:
         f6:d4:d0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:23:43 2026 by rpki-client