Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
File:                     90n3b5KhbSqHFDf3LIbQ0F3imtU.mft (raw, json)
Hash identifier:          38TRueJc2GQDaJuTEEz0yMWCqL2FuCap2o5mCej6MUQ=
Subject key identifier:   68:A9:54:EB:A1:DB:6D:A5:69:5B:AE:4A:0D:75:8E:37:F3:5A:81:A6
Authority key identifier: F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5
Certificate issuer:       /CN=A91DDDED/serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5
Certificate serial:       025D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
Manifest number:          0257
Signing time:             Sun 05 Apr 2026 01:50:30 +0000
Manifest this update:     Sun 05 Apr 2026 01:50:30 +0000
Manifest next update:     Sun 12 Apr 2026 01:50:30 +0000
Files and hashes:         1: 90n3b5KhbSqHFDf3LIbQ0F3imtU.crl (hash: vbJxcxgLYRFNvcDJKwPNaEOPwVR45+Ij1vZsEpd9Vxs=)
                          2: 69B6C14A9DF611ED8D51D272C4F9AE02.roa (hash: 6qNNz/jU6Jc8rG9yGhVLuObMTM5ias6oQqU63sjwttY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl
                          rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDDED, serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5
        Validity
            Not Before: Apr  5 01:50:30 2026 GMT
            Not After : Apr 12 01:50:30 2026 GMT
        Subject: CN=69d1bfe6-7ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8c:e7:1a:af:9b:a0:e7:aa:98:36:f0:46:18:
                    0b:93:02:08:d0:f2:3a:81:23:fd:37:60:c0:cf:b9:
                    3d:a3:ab:d0:a1:b8:51:ac:2f:30:92:51:90:8b:77:
                    c1:4d:e5:14:3d:a0:09:81:f2:b8:32:2e:0d:24:04:
                    f7:82:6e:d8:f6:ba:11:39:c9:59:bf:5d:8f:ce:f6:
                    d9:2c:f8:fa:6d:d3:dd:ce:40:a2:e3:c0:e8:14:4c:
                    54:90:b3:72:7d:7b:5c:48:c3:90:4e:f7:96:f4:e0:
                    e3:c9:c7:f5:79:06:25:13:e8:de:ee:5d:83:2a:74:
                    0a:b9:0b:fb:60:a9:97:da:84:f7:8d:9d:48:e1:1c:
                    65:ac:46:64:25:f5:14:18:c6:12:61:4a:73:d8:f8:
                    21:d1:bb:1a:db:02:74:2d:92:ae:f1:3b:69:ca:69:
                    95:fe:a4:78:64:c2:3b:4d:ec:43:8b:b6:18:a2:89:
                    d9:d3:66:7d:f2:1a:c8:e0:08:3d:ea:e7:d6:03:20:
                    ed:69:0f:c6:8f:47:50:98:2c:b5:18:5b:7c:58:da:
                    02:3f:6b:23:98:f9:cd:1c:ec:f6:d1:1e:4e:00:af:
                    b9:7c:5a:75:c3:3f:19:f9:c3:09:eb:f6:c7:e7:0a:
                    28:63:85:ba:9b:e4:a1:ab:5e:c0:68:f0:4f:3b:62:
                    ac:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A9:54:EB:A1:DB:6D:A5:69:5B:AE:4A:0D:75:8E:37:F3:5A:81:A6
            X509v3 Authority Key Identifier:
                keyid:F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:61:80:e6:a5:c2:55:c7:a2:08:df:a4:bf:36:35:9f:f3:43:
         b5:0e:ee:bc:e9:e4:99:39:31:63:27:1c:41:d9:33:2d:74:10:
         15:70:23:b4:dc:d7:f3:95:14:b3:43:16:89:e7:19:7a:72:eb:
         f9:1b:73:86:36:79:b4:3b:12:90:c9:48:21:40:e0:21:a1:1e:
         36:aa:37:9d:72:bc:62:b1:66:2c:97:f2:67:60:5e:eb:cb:8d:
         57:e5:67:f4:ae:04:b0:e7:b5:3a:80:b6:de:d8:37:87:b7:49:
         e9:5a:a2:f9:21:84:77:76:ef:40:db:04:b6:44:19:46:bf:b2:
         73:3d:c5:8e:d0:fd:62:9a:c9:c6:df:11:fa:86:5a:16:97:1f:
         b1:73:bb:a2:1c:98:52:66:d7:6e:30:96:ac:d2:c7:1b:7a:b0:
         ce:6f:4e:22:0e:4b:c2:2d:87:38:3e:96:3f:04:e5:45:4f:00:
         55:58:99:c6:97:35:2e:ee:9a:03:1f:36:73:cb:75:c9:1e:92:
         a4:4d:42:fb:f5:e8:42:15:d2:7c:f9:68:b5:c1:08:65:ea:b5:
         54:38:a0:b1:de:9f:c0:d5:49:df:37:6a:c0:ee:97:0c:cc:84:
         f4:66:fb:72:bf:41:0f:5c:0b:35:1e:89:53:a8:b1:cf:56:0a:
         ec:bc:b7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:55:09 2026 by rpki-client