Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
File:                     grTScd4hLgYzXAtF5mUXtQi4NRY.mft (raw, json)
Hash identifier:          yTmcbgXXBWOSbr4ZUar/rDWlp8SpJhDlHB7Ri+oCW5M=
Subject key identifier:   EA:CC:E1:3F:E6:8D:BA:7B:8B:E0:97:13:BB:87:E8:51:91:DE:6B:F7
Authority key identifier: 82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16
Certificate issuer:       /CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
Manifest number:          0154
Signing time:             Tue 21 Apr 2026 04:53:30 +0000
Manifest this update:     Tue 21 Apr 2026 04:53:30 +0000
Manifest next update:     Tue 28 Apr 2026 04:53:30 +0000
Files and hashes:         1: grTScd4hLgYzXAtF5mUXtQi4NRY.crl (hash: Rnxe9dZVwS294f228x2I31D4tyklSnDtgXZls3z1jss=)
                          2: 621428CE3CFB11EFB0BF040BC4F9AE02.roa (hash: w49yHIqbKO5UQXgKCrDZvpiyw+EK/7buhVnIPU9D8V8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl
                          rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 04:53:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E379F, serialNumber=82B4D271DE212E06335C0B45E66517B508B83516
        Validity
            Not Before: Apr 21 04:53:30 2026 GMT
            Not After : Apr 28 04:53:30 2026 GMT
        Subject: CN=69e702ca-99e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:27:3e:45:b6:99:69:f5:72:85:cc:b7:34:d8:
                    e5:07:e9:f5:2b:24:cb:b8:78:6f:93:a0:d0:33:17:
                    61:5f:0b:04:10:70:6a:b3:27:63:1a:e2:6a:d3:b4:
                    13:f2:7c:0a:b7:76:1c:07:06:f3:09:14:da:65:a5:
                    7c:b6:fc:70:5a:1a:48:49:7f:f8:89:a4:ce:21:a3:
                    46:d1:a1:a5:d1:bb:79:9c:3e:02:bf:b1:c7:0c:a4:
                    2b:73:0d:88:69:96:82:59:87:38:7f:f5:e8:5c:e3:
                    23:46:f5:c3:8e:c9:ae:9e:38:47:bb:58:7b:14:65:
                    21:96:3e:3f:7e:a2:c8:e2:d4:31:d4:72:10:dd:20:
                    d4:62:c1:2a:f0:dc:14:f6:1b:0a:d8:33:af:a8:2d:
                    0a:e3:28:e8:01:f4:80:2b:3d:e9:a4:9f:db:f0:b8:
                    75:b2:ca:92:5d:a0:7a:61:8a:7f:3d:3e:04:b3:ff:
                    d1:79:d3:a4:cf:51:15:f2:97:75:b7:03:a5:35:49:
                    7a:5b:85:83:28:fc:4e:2a:19:87:cf:a9:60:e4:21:
                    3e:ea:c8:97:5f:ff:b0:78:ac:c1:9a:e1:18:93:3d:
                    70:1d:35:53:77:62:02:87:fa:7a:5a:e8:0b:4f:73:
                    0d:e9:bd:9f:ab:a0:14:07:78:2b:10:83:32:0a:1f:
                    4c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CC:E1:3F:E6:8D:BA:7B:8B:E0:97:13:BB:87:E8:51:91:DE:6B:F7
            X509v3 Authority Key Identifier:
                keyid:82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:4e:c4:1b:e1:37:e4:d9:1f:dc:1a:0b:89:1d:9b:5f:0c:b7:
         3f:6e:3a:90:35:cd:fe:4a:55:b3:47:54:92:e4:84:da:39:62:
         be:a2:8e:47:c9:fb:c2:3c:d3:48:3a:31:87:04:91:65:50:df:
         9f:bc:a6:05:dc:77:f2:47:e5:75:a9:02:85:fb:fd:42:f0:fc:
         d7:f9:f5:2c:30:c3:fe:1a:87:02:b0:29:af:5e:ed:cd:55:ee:
         41:ba:a4:63:c2:24:1e:85:5a:65:69:31:07:24:26:a2:83:e9:
         f3:e5:6c:e9:4a:c1:c5:c3:6b:37:d7:4c:d6:ba:ce:88:15:6e:
         d2:e0:3f:b2:45:d5:33:5f:be:9a:c3:8b:b8:7e:98:b1:02:6a:
         48:5a:2e:83:65:de:ec:8f:77:ae:fb:c6:71:4f:b7:20:ae:5b:
         c3:c7:5f:6b:bb:dc:34:d2:8c:6c:f7:3a:eb:b8:af:9e:71:42:
         2e:53:f7:b6:25:1e:5b:c5:8d:16:d4:7c:b2:93:55:55:d6:db:
         c5:55:97:63:15:9e:54:14:ea:e6:62:c7:3a:76:04:6c:19:90:
         ab:e5:f1:9a:75:18:33:7f:c9:0b:39:fe:52:fb:13:70:db:5e:
         c0:fb:4b:ce:b5:a5:aa:08:12:64:d4:79:16:eb:41:3f:0f:65:
         c1:7c:0d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:21:05 2026 by rpki-client