Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
File:                     fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft (raw, json)
Hash identifier:          KJYudlZ+dCoNf8+/qWcGPCmJbArFa0P56BAuDxRM7p8=
Subject key identifier:   AF:70:A9:3D:4E:E2:11:39:55:70:D7:E9:C7:15:EB:11:71:D3:5F:23
Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4
Certificate issuer:       /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
Certificate serial:       1578
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
Manifest number:          1566
Signing time:             Sat 18 Apr 2026 15:29:16 +0000
Manifest this update:     Sat 18 Apr 2026 15:29:15 +0000
Manifest next update:     Sat 25 Apr 2026 15:29:15 +0000
Files and hashes:         1: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl (hash: 4hz6ocHnId5n1wCSQcLP2nykS9ELOrSBWkzh0fq14Jw=)
                          2: C163B1881A4711EDA547FE24C4F9AE02.roa (hash: hQYRG8ncZ6CHxCWYK1hLhmfKl621jQSkzGCZnvGLqeQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5496 (0x1578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2AE5, serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
        Validity
            Not Before: Apr 18 15:29:15 2026 GMT
            Not After : Apr 25 15:29:15 2026 GMT
        Subject: CN=69e3a34c-ba7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d9:9e:39:b3:ff:fa:1a:c9:41:05:f1:c8:90:
                    48:77:29:12:5b:ab:13:f9:ba:c5:19:ed:1c:3c:ea:
                    a2:c2:1f:ad:71:3d:2c:14:63:d9:33:a6:df:9f:48:
                    e3:d3:e9:b8:fe:02:d7:5e:f0:77:92:3c:8a:96:ab:
                    f3:d5:d6:68:a2:35:4c:9d:0c:6e:41:da:95:3a:df:
                    07:87:ab:9e:a6:b4:af:71:03:93:d2:01:8e:29:90:
                    a1:02:73:22:d8:f7:43:cc:d0:51:ad:31:c8:d4:09:
                    50:bb:e1:88:4d:94:a6:00:6f:bb:37:13:06:bf:11:
                    38:aa:ad:6e:f8:19:b1:12:68:99:f0:a1:1a:7d:e1:
                    98:9b:ba:ac:4f:65:6b:cb:12:89:8a:4e:a0:25:82:
                    9f:b6:c8:9f:bb:71:97:da:c5:79:61:fe:c7:d2:02:
                    57:a8:d4:1a:16:28:e6:f9:3f:1c:6a:a1:2c:a5:53:
                    1a:f4:4e:f6:88:7f:de:cb:4c:39:35:7a:bd:fd:a2:
                    a4:d2:e9:a6:0e:c5:7a:f6:af:5a:6b:d4:21:76:9e:
                    1b:f3:83:e9:4f:65:ff:a6:02:63:78:07:d7:89:7a:
                    0b:1c:58:7c:7d:df:8c:b4:01:b3:59:5a:e1:e9:7f:
                    c7:22:c4:ae:af:66:63:15:f0:ba:f4:8b:67:e2:12:
                    eb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:70:A9:3D:4E:E2:11:39:55:70:D7:E9:C7:15:EB:11:71:D3:5F:23
            X509v3 Authority Key Identifier:
                keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:fb:72:c4:af:cb:e2:29:be:65:af:d3:a6:dd:b6:4c:f3:ab:
         ee:b9:f3:77:8f:a7:6f:6b:ff:0f:11:fb:c9:16:20:eb:cd:79:
         01:38:f4:2b:47:2f:ab:b0:6e:b1:f0:16:ae:09:e9:4c:93:4e:
         f9:9f:26:cd:a6:84:d5:9d:32:85:41:47:75:16:ca:b3:a6:f0:
         c6:6d:4e:d7:62:c6:dc:06:94:9e:de:60:1a:56:e6:e8:2c:84:
         60:ce:88:89:6b:8f:e6:9c:cc:92:11:07:04:80:5c:56:f0:60:
         ba:50:65:a2:88:fe:b0:eb:0f:04:65:19:78:0d:16:2c:08:56:
         a5:4b:a2:4c:2a:4b:6c:5a:87:1c:b7:2c:e2:79:bc:48:c6:75:
         6d:ee:33:ae:d7:bf:d2:59:bd:cf:f2:9a:fb:9f:8e:65:8d:19:
         f8:35:f7:75:b7:21:05:3d:7b:4a:ad:71:9a:75:60:fb:df:35:
         a0:3c:d3:57:f4:ca:b2:10:c0:f4:bd:e3:e4:3b:c6:1c:bb:0f:
         e1:56:23:42:05:55:ae:f9:f9:8a:42:af:50:2e:ad:a6:bb:82:
         1f:65:ae:31:67:9a:5c:cb:c5:80:76:3f:07:9a:bb:4a:31:aa:
         d0:95:0b:de:58:62:86:e6:1e:db:50:85:57:ca:8f:94:cc:76:
         65:c5:f9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:07:47 2026 by rpki-client