Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
File:                     I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft (raw, json)
Hash identifier:          4pxeD+5X8Q2817B9o1GNeWTOAyi0GgjSg+AyyvmYPoM=
Subject key identifier:   BE:3C:86:A5:CE:B5:6C:99:D7:31:25:F9:A0:61:54:5E:D0:BA:F5:50
Authority key identifier: 23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15
Certificate issuer:       /CN=A91E22E5/serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
Certificate serial:       02BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
Manifest number:          02B6
Signing time:             Sun 05 Apr 2026 01:10:52 +0000
Manifest this update:     Sun 05 Apr 2026 01:10:52 +0000
Manifest next update:     Sun 12 Apr 2026 01:10:52 +0000
Files and hashes:         1: I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl (hash: 7GvlbyHA+pmnMWb32qLgcyohD//5NOPc4UBPfsC2rrM=)
                          2: 623705DA339111ED9249064BC4F9AE02.roa (hash: dJkQChNuxBTFdv5H2Ke/hDe3+P5lfeBF0mKLDRfy7Ic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl
                          rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699 (0x2bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E22E5, serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
        Validity
            Not Before: Apr  5 01:10:52 2026 GMT
            Not After : Apr 12 01:10:52 2026 GMT
        Subject: CN=69d1b69c-0f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:48:af:90:20:58:71:db:51:0a:05:bb:07:c0:
                    91:e8:c5:2a:d7:01:d0:17:34:d8:85:ef:5a:55:f1:
                    2c:de:8f:5d:77:03:23:4b:d0:b8:b1:be:a5:12:6c:
                    f5:7a:53:fa:1b:fe:a5:4b:61:5e:45:ee:9a:01:3b:
                    bb:7f:0c:75:01:b5:40:24:59:5d:c7:b4:89:b7:b5:
                    21:d8:61:af:03:19:46:55:f1:4b:26:a6:ae:f7:01:
                    08:3c:a8:94:b1:17:65:7d:cc:48:8f:ef:71:55:46:
                    0b:47:8a:9d:b5:4b:0a:ea:82:98:61:d4:55:cb:0f:
                    e5:23:7c:9a:48:cc:00:5d:60:b4:fd:78:a5:de:1f:
                    e8:a6:6f:72:4a:3b:19:14:8a:cc:ab:19:12:89:15:
                    17:f1:a4:df:c4:ac:05:9a:70:3e:8f:97:cc:7d:3e:
                    fe:15:29:09:25:75:68:b3:08:68:96:2b:9e:83:9d:
                    c8:f1:fb:84:d1:7a:a8:c5:07:25:33:9e:0f:c7:d7:
                    61:16:78:b9:7d:d4:cc:41:44:e0:f0:78:44:d9:13:
                    71:fa:76:0b:3b:55:a5:2b:49:d0:3f:9b:4c:bd:eb:
                    70:c4:8d:c8:b2:38:fa:ad:1d:ba:a4:61:d9:94:65:
                    89:be:52:fe:56:93:ce:63:04:7a:c8:18:41:15:d6:
                    de:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3C:86:A5:CE:B5:6C:99:D7:31:25:F9:A0:61:54:5E:D0:BA:F5:50
            X509v3 Authority Key Identifier:
                keyid:23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:14:1c:c0:06:81:66:08:22:28:cb:fc:75:06:0a:55:58:e7:
         46:ce:f2:b4:18:ea:05:13:49:00:d5:7d:53:5f:36:9b:e0:4e:
         75:52:c4:94:1d:05:af:11:04:f9:d7:64:d8:ed:1c:6c:63:90:
         d4:57:43:6c:00:12:d2:ae:51:55:a1:09:f2:76:a2:e8:ba:3a:
         81:63:96:01:79:cc:12:95:3c:db:06:24:50:bc:1a:7d:14:ca:
         a4:14:fe:ac:7f:c6:9e:54:b8:ab:3d:88:8a:b7:7b:05:d9:76:
         0c:26:48:f8:23:b4:1a:3d:61:67:b1:1f:ad:cd:60:4b:b1:39:
         8b:9d:05:28:92:16:6c:4b:f0:30:17:7c:2a:b7:e8:8f:f0:00:
         c3:f4:6d:65:35:50:e2:fb:26:2d:cd:4c:9f:19:d4:85:84:dd:
         29:4e:82:ee:2a:d8:1d:21:ac:59:08:30:2b:38:f0:b0:50:49:
         2d:13:cf:31:bd:62:37:99:df:c4:2c:be:e2:f7:0b:bd:9e:e0:
         7a:88:53:ff:1c:f1:b5:ea:d3:fe:4f:f9:bb:b8:7f:98:cd:af:
         41:5e:fe:45:5f:e3:f3:5c:aa:9d:f4:c2:29:73:b7:85:34:9a:
         01:54:9e:99:9e:77:cb:d2:7a:dc:54:92:a5:f7:f9:d8:d0:13:
         1d:3c:61:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:55:03 2026 by rpki-client