Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
File:                     dxIwqC7bwncWqz3GqC_FrsRe72c.mft (raw, json)
Hash identifier:          +GmtG55vyUGloPyp2dPRvKw7SDCpKErOFBA8ZQ1zo+4=
Subject key identifier:   65:2B:97:BD:9F:8E:05:DA:02:E8:86:09:AB:81:20:A4:B1:E8:A2:BF
Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
Certificate issuer:       /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Certificate serial:       0D16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
Manifest number:          0CDB
Signing time:             Mon 20 Apr 2026 18:27:32 +0000
Manifest this update:     Mon 20 Apr 2026 18:27:32 +0000
Manifest next update:     Mon 27 Apr 2026 18:27:32 +0000
Files and hashes:         1: dxIwqC7bwncWqz3GqC_FrsRe72c.crl (hash: PX3KmqqHWpwJhbgvZhxGPzpfVWw2ivqQNpfJ51jBzHc=)
                          2: 6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa (hash: T30sMzZH4Abydwi4UNKY0/Wj2XuOOa+/JM841poURBU=)
                          3: C1C279D6997C11F0BDB1853FC4F9AE02.roa (hash: DQkRppQNbZeDMwk1/8d30BRcsAk9mGpTFMUfz2amNfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl
                          rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 18:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3350 (0xd16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4463, serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
        Validity
            Not Before: Apr 20 18:27:32 2026 GMT
            Not After : Apr 27 18:27:32 2026 GMT
        Subject: CN=69e67014-947d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:da:26:83:58:09:ad:3b:c3:21:c3:90:ba:72:
                    00:92:dc:eb:b3:6c:e4:42:e3:6c:09:7f:c0:6f:19:
                    18:f8:b4:b6:98:70:cf:70:34:7a:90:82:ce:a0:2b:
                    f1:63:45:27:44:dc:7b:8a:a8:0c:a5:8b:de:5e:cd:
                    ee:a7:1f:18:10:fd:1b:0f:99:24:39:ee:60:64:06:
                    1f:c6:3e:71:2e:5d:2e:fd:a2:ee:23:78:97:2b:96:
                    34:c1:2b:e5:a3:47:02:e4:30:ce:6f:a3:71:08:5f:
                    d1:be:81:94:7f:7c:e4:30:67:f2:ff:86:c2:71:f1:
                    23:0e:95:74:35:3e:0f:14:99:4e:6b:c4:16:99:94:
                    8c:58:7c:fa:97:c5:fc:a0:ed:b5:95:f8:bf:d3:fd:
                    92:5e:5e:2b:ba:5c:d0:65:29:1e:44:66:3e:6e:65:
                    2a:89:e8:7f:15:a1:cf:a3:bf:b9:fb:b9:72:1e:e1:
                    ba:ed:ce:62:9f:a6:d7:2f:b6:de:0d:df:6e:84:34:
                    68:f0:63:44:27:d5:04:62:9f:7a:81:b8:f6:7b:2d:
                    33:82:b7:87:73:62:02:40:b5:a2:87:7a:0d:eb:d1:
                    05:1f:7e:e3:a1:5a:32:ac:8a:73:f6:fc:40:50:ee:
                    f6:6c:20:27:a1:c9:85:f3:32:5a:99:29:54:78:fd:
                    3f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2B:97:BD:9F:8E:05:DA:02:E8:86:09:AB:81:20:A4:B1:E8:A2:BF
            X509v3 Authority Key Identifier:
                keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:a0:47:1e:5d:79:9a:9f:7d:86:c4:17:9a:3c:2f:33:67:1e:
         bb:81:1e:2e:06:90:93:c4:65:a7:b5:3b:8a:6e:72:33:ad:9a:
         f5:18:8c:fc:90:b3:06:61:47:01:e1:f7:e4:9c:e0:e4:47:00:
         d8:fb:4c:0d:9a:58:b3:cf:b6:03:e1:fe:dd:e6:79:52:98:2b:
         d3:f1:1e:5a:cd:6b:a6:a6:89:36:af:c4:10:78:b4:4d:2f:ed:
         4a:9c:85:09:cd:b8:ce:7d:64:16:da:68:87:6d:1a:ad:0f:73:
         ea:46:e8:d7:e2:25:af:56:98:69:84:67:cb:f2:67:b6:af:8a:
         52:8a:91:8e:dd:6a:6c:99:26:bb:dd:37:d1:ad:5e:db:26:a2:
         9f:3a:d0:86:99:3a:bb:d0:14:6a:97:c0:3e:20:5d:eb:57:cf:
         38:a3:b0:fb:2d:ed:38:b5:ea:86:4a:1d:6c:f9:65:ad:7c:9e:
         e4:f8:98:51:82:32:3a:b6:6c:2e:ee:07:80:6a:c3:09:37:bc:
         2a:1e:0e:fd:2d:c3:7e:ef:26:a7:37:99:c2:9f:1a:9a:fd:86:
         30:9e:a9:68:20:3c:75:09:c1:b4:66:0a:41:38:a7:21:22:1e:
         ea:9b:75:5f:5a:eb:1b:a8:64:2d:5e:69:db:cb:7f:e8:97:d6:
         0d:11:dc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 10:27:00 2026 by rpki-client