Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
File:                     aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json)
Hash identifier:          PiAag7p6iQrWsB+RvrbvpcYpTxvJUGs0gFuTVVppcI4=
Subject key identifier:   D8:F1:E6:12:2D:D1:24:40:7D:06:6D:0C:34:5A:1A:8C:31:25:4D:15
Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9
Certificate issuer:       /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
Certificate serial:       02A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
Manifest number:          0282
Signing time:             Mon 27 Apr 2026 01:53:57 +0000
Manifest this update:     Mon 27 Apr 2026 01:53:56 +0000
Manifest next update:     Mon 04 May 2026 01:53:56 +0000
Files and hashes:         1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: mE+syMhQoAvxiROzGCFXuSc1qVlAe8MAZIUvokl4kXM=)
                          2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: +jjzQDT4VXtfOv7UHvs6KHzX+DKS/3je1TxZKSVKupY=)
                          3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: 40EGBMsbpMDMqk64oIlNxvPswRIVzMQ9vAqZ+9/aJ30=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl
                          rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 01:53:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674 (0x2a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
        Validity
            Not Before: Apr 27 01:53:56 2026 GMT
            Not After : May  4 01:53:56 2026 GMT
        Subject: CN=69eec1b4-e6f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d7:17:d5:24:12:70:75:f8:d8:f2:a5:b3:4a:
                    88:7a:01:0b:8d:ad:8c:11:61:9c:b2:59:53:46:a3:
                    15:6a:79:72:12:f0:27:81:d3:46:af:7d:c4:10:6d:
                    e3:d0:60:8f:01:09:c8:f2:96:05:af:8a:b4:54:10:
                    f5:05:6a:55:2d:b8:17:95:6f:0c:d7:28:7e:62:86:
                    1d:de:e0:1f:bb:2e:db:45:34:29:54:a5:d7:63:be:
                    dc:ce:a8:89:e1:7c:df:27:8c:a5:28:68:a6:e6:80:
                    7b:2c:ab:15:10:23:cd:eb:6f:b3:9f:51:e0:fd:7e:
                    e5:ce:88:34:b3:da:39:fa:f9:00:6b:3c:39:c2:78:
                    1c:63:6b:c5:ae:4f:e5:c0:76:2b:2f:28:04:0e:38:
                    9a:b9:8f:3b:b4:41:e2:f6:f0:2d:4f:c8:54:c8:ed:
                    df:0b:84:9c:ff:3b:bc:9f:b6:54:bf:a9:3f:10:e6:
                    f5:7c:a5:df:91:00:73:52:80:f7:6b:4b:4a:73:db:
                    c1:16:03:47:33:75:a6:96:5b:29:ca:04:4c:82:cf:
                    00:8c:5f:d4:ed:55:22:59:72:db:ab:a7:0a:8f:56:
                    ac:18:6f:7d:63:29:89:36:4d:f0:79:99:a2:b6:29:
                    9a:1a:fc:90:f9:29:f9:70:36:dd:ed:2e:5e:28:45:
                    18:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F1:E6:12:2D:D1:24:40:7D:06:6D:0C:34:5A:1A:8C:31:25:4D:15
            X509v3 Authority Key Identifier:
                keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:c5:2f:1d:c1:59:51:17:ae:99:f5:57:1b:1f:59:5b:e1:47:
         f5:17:3b:26:2f:94:15:46:07:60:3d:23:01:52:d9:14:f7:33:
         97:74:86:36:12:3c:c9:54:be:dc:24:c6:e6:b0:d8:6d:fe:fb:
         0a:60:63:86:c2:ca:b9:03:9a:80:78:39:6e:e2:6a:6b:7f:51:
         e6:71:8b:90:63:49:35:f9:fd:d0:74:ca:31:52:86:87:0f:a8:
         c6:77:e5:aa:59:53:64:4d:f9:dd:97:c1:a0:f1:09:df:4e:35:
         20:b3:f0:74:84:97:c0:bd:22:d1:64:9c:8c:cf:90:99:d2:09:
         90:c2:1f:42:d6:df:16:83:76:bb:92:e4:13:ee:b1:a0:16:1e:
         53:f8:f8:ee:8d:02:1c:8e:06:3b:4b:19:25:ce:d7:fe:20:66:
         a9:90:d5:cb:51:bc:3a:46:fd:3b:a7:b9:2b:10:6a:40:dd:fa:
         03:54:f5:2a:5b:13:63:a3:b7:04:e5:20:de:4d:e3:3a:f2:91:
         11:33:ea:c8:4f:78:8f:77:a2:5b:7b:c1:03:3b:6d:bd:7f:d4:
         bf:12:ba:77:08:18:66:5c:18:5f:a5:30:9c:25:2f:c7:f4:30:
         0f:3a:b0:7b:0f:84:da:64:09:b0:ca:a2:79:3d:b4:a2:7d:0c:
         13:fa:66:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 07:27:16 2026 by rpki-client