Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
File:                     74x3yBft3T_cxmtjUtbqeNcsWsY.mft (raw, json)
Hash identifier:          ciKlMu83ttluYi6wvtPA6Q0g6p4aXgdUjEB/5KBfF1Q=
Subject key identifier:   08:DF:D7:9E:A7:4E:D8:9F:78:33:CF:CC:00:EA:CF:06:42:75:99:F7
Authority key identifier: EF:8C:77:C8:17:ED:DD:3F:DC:C6:6B:63:52:D6:EA:78:D7:2C:5A:C6
Certificate issuer:       /CN=A91DABAA/serialNumber=EF8C77C817EDDD3FDCC66B6352D6EA78D72C5AC6
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
Manifest number:          47
Signing time:             Fri 17 Apr 2026 08:04:39 +0000
Manifest this update:     Fri 17 Apr 2026 08:04:38 +0000
Manifest next update:     Fri 24 Apr 2026 08:04:38 +0000
Files and hashes:         1: 74x3yBft3T_cxmtjUtbqeNcsWsY.crl (hash: MoNNsO2xzSq/aRv2sTiD6rDccFcTSpRbZtMaGfWUlPU=)
                          2: EEEB4CEAD19D11F0B238D972C4F9AE02.roa (hash: KBecdMTFKnUpJ7QDfC5GLAYFAglDXZ+nTAZgDKN2WsU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.crl
                          rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DABAA, serialNumber=EF8C77C817EDDD3FDCC66B6352D6EA78D72C5AC6
        Validity
            Not Before: Apr 17 08:04:38 2026 GMT
            Not After : Apr 24 08:04:38 2026 GMT
        Subject: CN=69e1e997-080a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3b:1f:e9:4c:8f:91:e8:4d:ce:8f:58:3b:8c:
                    b9:43:03:47:ae:9c:6c:19:bd:fd:70:bd:93:72:32:
                    89:ed:0a:df:b6:7b:3d:92:f4:2f:73:d9:07:cb:82:
                    df:92:f3:39:31:67:9c:7d:29:2b:97:db:85:4a:dd:
                    76:f1:11:59:d7:9f:6b:54:81:c4:7a:1e:bd:17:61:
                    a3:75:f2:8f:4c:6b:bd:dd:6a:fb:22:be:f8:54:96:
                    24:a3:8c:44:8d:19:8f:ee:15:13:72:9f:c1:d8:fd:
                    d9:64:5e:95:8b:ea:5f:9a:df:4b:3c:f4:56:c2:96:
                    1a:85:6d:b9:b0:f4:29:cf:c5:8f:bd:d7:4d:88:5f:
                    e2:8f:f7:9a:d2:c8:6a:db:a2:61:74:4f:8a:9f:35:
                    8d:cf:83:22:1d:fd:23:92:1b:a3:15:cb:be:ec:99:
                    36:61:f7:5d:2e:d6:10:06:6f:0d:41:4f:89:01:a1:
                    40:cd:e6:a4:d5:c1:1b:9a:cc:a4:4c:6e:84:93:da:
                    22:31:a1:3c:53:fd:1e:7d:44:65:af:45:a9:62:42:
                    66:d1:6b:f6:75:8c:2a:f6:73:34:57:6f:ab:b9:4c:
                    bb:14:83:e8:db:21:48:2b:6a:cd:bd:60:e2:3e:e7:
                    1a:58:8b:33:b8:f7:3a:83:71:62:7c:4a:d5:bf:3c:
                    f9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DF:D7:9E:A7:4E:D8:9F:78:33:CF:CC:00:EA:CF:06:42:75:99:F7
            X509v3 Authority Key Identifier:
                keyid:EF:8C:77:C8:17:ED:DD:3F:DC:C6:6B:63:52:D6:EA:78:D7:2C:5A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:33:17:7d:f8:a1:04:56:9f:d8:71:a4:eb:50:dc:68:b3:47:
         4d:b3:1c:99:b9:7d:a1:44:b7:d5:41:e1:31:94:93:6b:34:00:
         fe:bd:cc:4e:f0:76:a1:68:2c:9f:41:cb:a2:04:a5:64:fa:e5:
         a4:4b:3d:7e:2e:5e:97:58:a8:4e:db:af:43:71:86:f7:0f:3e:
         f9:04:5c:ad:7d:dd:c3:6f:84:dd:97:0b:b9:8e:67:75:ef:f7:
         9e:bb:96:82:58:33:f9:ea:bb:e3:be:60:2b:f1:38:88:7f:81:
         aa:2c:45:60:47:aa:52:fd:59:8d:61:a7:19:08:ad:c5:77:b3:
         8c:05:1f:b8:ae:ca:8d:08:87:a0:12:59:43:2d:09:c1:80:a8:
         f3:fd:74:b8:12:72:be:c7:29:11:93:9c:99:89:94:53:36:43:
         81:63:91:8a:94:e8:1a:43:f4:94:8e:69:68:48:01:29:8b:29:
         b1:8d:27:cd:ca:74:86:11:3b:c5:dc:81:87:e7:6d:4f:8d:ea:
         84:74:24:30:03:14:0e:49:cb:2c:17:8b:ff:d4:5b:48:fc:5f:
         61:6c:95:4e:a0:23:85:36:86:70:49:0c:4b:ba:e8:5f:53:0d:
         64:0e:6a:7b:67:a0:fc:cf:4a:31:89:ec:d1:dd:f8:91:f8:ee:
         73:d1:dd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:24 2026 by rpki-client