Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft
File:                     aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft (raw, json)
Hash identifier:          FiZmFKeoaLjK+HMUcxXWEqY7Y7LQH+E/0BtoxGG+RfE=
Subject key identifier:   28:64:F7:D4:2E:74:9E:B7:8F:B8:56:19:3A:B1:80:49:F6:AF:64:B2
Authority key identifier: 69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51
Certificate issuer:       /CN=A91DC146/serialNumber=690C729F18390564D670B18F7774754E5D279951
Certificate serial:       069B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft
Manifest number:          0694
Signing time:             Sat 04 Apr 2026 22:14:47 +0000
Manifest this update:     Sat 04 Apr 2026 22:14:46 +0000
Manifest next update:     Sat 11 Apr 2026 22:14:46 +0000
Files and hashes:         1: aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl (hash: myEW4n9Uz725+e51UTyT45zDEhE91cK6ksusBcSGBj4=)
                          2: 4BB44892AE1111EBB4C2DA11C4F9AE02.roa (hash: F1fXz2/fZOT0A+vWKAw94iaOGisACVQx2A9nYViYNaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl
                          rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1691 (0x69b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC146, serialNumber=690C729F18390564D670B18F7774754E5D279951
        Validity
            Not Before: Apr  4 22:14:46 2026 GMT
            Not After : Apr 11 22:14:46 2026 GMT
        Subject: CN=69d18d57-0316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:36:78:71:cf:31:19:f3:a9:92:f9:3e:e9:5e:
                    a3:52:43:e2:91:90:e4:27:04:a9:5e:27:42:d0:07:
                    27:7f:63:52:9b:b6:9b:2f:6c:d2:76:5a:68:8b:85:
                    e4:7e:f2:6f:1a:40:87:27:9b:cd:e0:11:7b:4b:bb:
                    94:c1:16:22:43:f2:92:05:3b:43:79:dd:f1:80:e5:
                    8b:cd:8c:55:81:5f:49:48:ba:6c:51:00:49:25:4f:
                    a8:45:cc:6b:de:e7:c1:6f:f2:81:be:8b:d6:c8:12:
                    3e:14:b2:ae:38:55:a0:b1:ac:9c:c6:da:38:e6:7e:
                    cc:b6:a8:cc:44:b2:0b:59:b6:56:a3:56:ab:16:29:
                    8a:a7:ac:4b:95:ef:2a:7b:8d:30:eb:a4:bd:48:d1:
                    1f:4d:d0:f0:cd:33:63:27:a5:ce:91:91:85:ce:3a:
                    61:cf:23:40:69:10:fe:82:48:8b:9f:e8:00:92:cc:
                    7c:a7:0b:7e:6b:74:94:be:19:30:ca:0b:c0:45:51:
                    65:a7:f2:71:6a:62:c8:e1:96:36:e6:19:07:f7:b1:
                    4b:f3:25:64:ca:e0:c8:de:8a:04:44:0e:88:d3:c8:
                    f4:04:8a:5a:02:72:db:c0:98:b4:56:9f:c6:5a:0c:
                    91:e9:52:1b:f1:3e:c5:3a:91:78:f6:15:30:31:50:
                    d8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:64:F7:D4:2E:74:9E:B7:8F:B8:56:19:3A:B1:80:49:F6:AF:64:B2
            X509v3 Authority Key Identifier:
                keyid:69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:c8:d6:ac:3b:c0:8b:04:f0:50:5e:3d:9b:77:09:09:be:ad:
         e2:89:e1:7b:21:73:d3:98:98:09:6a:e7:b1:15:a3:fe:67:5d:
         ff:c9:19:69:7b:c8:78:e4:a3:b1:f5:e9:e7:20:6f:87:96:c5:
         ff:a9:d0:45:3f:f1:ad:76:58:8b:44:aa:66:cc:f7:7e:db:2c:
         6f:33:03:b3:2c:a8:c2:14:d2:4f:e0:d1:b5:63:e4:5f:a3:d1:
         ab:d0:b8:c6:e8:7f:b1:54:5c:78:1f:e2:45:e1:14:c7:6e:da:
         02:11:87:b6:a7:40:71:a5:39:d5:3d:e8:32:55:ad:c1:11:ac:
         c0:5a:d8:70:a1:36:87:3b:f2:d8:19:0c:81:a8:69:de:e5:2e:
         15:a2:9c:33:e9:5b:8e:c2:66:81:18:ef:39:fe:6f:6d:b9:54:
         b1:41:b6:4c:8d:27:e8:26:0c:18:56:6b:3a:4a:a2:24:98:eb:
         60:a5:c3:6a:0b:ff:f0:81:1f:fb:bc:dc:6a:dd:a0:68:4e:3a:
         93:db:95:43:58:ad:32:23:93:8b:fb:af:d4:34:35:fd:5d:69:
         5f:ca:ed:3c:90:bf:83:67:3f:35:49:44:b8:73:ad:b5:3b:84:
         15:64:46:0a:fd:42:2b:71:cb:6e:c6:e6:6d:d3:a1:b4:43:a9:
         17:1c:20:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:39 2026 by rpki-client