Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
File:                     dF1Xf1uOfU-NtJqNuayxP8JaojM.mft (raw, json)
Hash identifier:          24pzfE6c7oRQgzins6m9fD6Qn8UtHl8t0Cxiaq+/pPk=
Subject key identifier:   B0:3C:D2:FC:86:73:C5:E9:C3:BC:FD:37:AF:EA:3C:8B:D5:97:3E:08
Authority key identifier: 74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33
Certificate issuer:       /CN=A91DFEC2/serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
Manifest number:          5C
Signing time:             Sun 05 Apr 2026 07:32:08 +0000
Manifest this update:     Sun 05 Apr 2026 07:32:07 +0000
Manifest next update:     Sun 12 Apr 2026 07:32:07 +0000
Files and hashes:         1: dF1Xf1uOfU-NtJqNuayxP8JaojM.crl (hash: pULjx3VTk38IzCkh/nSE5vgYwYV+MZS4QxpPRXzgi7A=)
                          2: FADF73B4C42811F0B219BB6AC4F9AE02.roa (hash: b99ya6U9QMY/5a9pzqhDLkO/k1qaTOIL0zEPGVgl0hk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl
                          rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:32:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFEC2, serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233
        Validity
            Not Before: Apr  5 07:32:07 2026 GMT
            Not After : Apr 12 07:32:07 2026 GMT
        Subject: CN=69d20ff7-37c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:5e:6e:95:54:6f:cc:f0:54:1d:ff:a0:a0:
                    db:ef:e1:db:9c:35:c2:23:a0:1a:59:2d:cb:45:1b:
                    90:81:17:b1:95:3d:bd:0e:38:c9:b5:32:80:ce:7e:
                    a7:95:68:1f:53:9c:fb:76:36:80:a6:a0:1a:6b:40:
                    88:33:14:6d:f3:cd:ad:06:78:bd:64:68:8b:2b:ac:
                    1d:15:01:d4:60:bf:b8:e9:dc:b2:9f:1b:4a:17:98:
                    18:28:f4:0f:22:ef:4e:ec:0f:ba:92:15:cd:5e:4f:
                    30:f1:f6:4f:b9:9b:3b:55:ba:b1:0b:44:2c:23:28:
                    8e:b3:6d:93:9e:6e:72:25:27:01:df:db:4b:b4:c9:
                    db:28:0f:88:f3:8e:eb:03:c4:e6:8a:5f:23:57:ca:
                    83:6f:84:ee:b7:ac:70:55:95:aa:9a:e5:76:ad:b6:
                    05:bd:87:00:55:d0:81:3b:48:46:c9:c5:b0:ac:fc:
                    86:cd:f2:98:cb:5d:a7:fd:35:e9:0d:fc:82:35:af:
                    8d:ac:4f:c4:17:b2:3e:d4:55:68:5d:1e:45:98:46:
                    0d:5d:a0:bf:c9:4d:f1:38:4a:46:78:09:95:64:ff:
                    32:ba:a8:9c:99:3a:1f:18:1d:ce:24:cc:52:b2:54:
                    bf:6f:0b:f3:d3:6c:d8:e2:7a:d2:cf:08:f1:d2:57:
                    e9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3C:D2:FC:86:73:C5:E9:C3:BC:FD:37:AF:EA:3C:8B:D5:97:3E:08
            X509v3 Authority Key Identifier:
                keyid:74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:6a:5a:09:b9:cb:86:81:8b:d1:92:07:31:84:44:53:18:67:
         9a:50:bb:75:24:27:57:75:dd:dd:c2:74:df:8e:cc:6b:ff:f1:
         ee:f7:0f:b1:cf:58:69:31:b2:c5:d1:64:40:74:7d:9c:03:82:
         94:48:a9:51:4c:ec:81:71:6b:9f:27:08:a8:c1:9d:8c:9b:05:
         50:6f:18:c0:bf:84:7a:eb:da:6c:f5:2c:03:71:86:70:34:01:
         8f:6e:8a:73:e2:69:3a:2e:0b:12:30:f3:28:b8:e0:c1:8c:9f:
         03:c5:96:d4:49:4d:ee:fd:c9:64:09:9e:93:c9:b2:2d:33:6e:
         1f:46:39:c1:dd:99:03:21:40:df:07:11:93:a4:12:05:a4:d2:
         e0:ab:24:28:8b:f1:c5:f9:85:18:f4:6a:48:83:74:30:fb:3f:
         85:b7:c8:4c:cb:f5:84:41:24:ec:26:43:73:7a:71:f5:ad:81:
         cc:e6:15:47:a3:2b:bf:e0:72:43:a1:c1:d7:c8:14:7a:39:cb:
         03:48:71:02:90:65:57:c9:f7:fb:bc:bc:63:bb:f9:fb:2d:4c:
         cd:45:cb:c2:18:fb:d0:65:30:28:33:f5:10:de:c8:c8:1b:b9:
         21:60:9a:15:3c:73:ec:24:df:c8:40:55:ef:65:e4:cd:49:39:
         98:66:69:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:53:54 2026 by rpki-client