Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
File:                     mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json)
Hash identifier:          F/VOglKaq+g8pv3jTCszzzLueRJprpjCgSFjXMn0RQo=
Subject key identifier:   69:45:78:F5:1A:B1:2F:EE:15:81:52:64:0F:F3:E3:DA:CD:AA:2E:7B
Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
Certificate issuer:       /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Certificate serial:       0354
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
Manifest number:          034A
Signing time:             Sun 05 Apr 2026 00:43:31 +0000
Manifest this update:     Sun 05 Apr 2026 00:43:30 +0000
Manifest next update:     Sun 12 Apr 2026 00:43:30 +0000
Files and hashes:         1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: UD/Nyw9yg6uIVoSEyayoi0qP+cXmB3cVEpHTNAmDdU8=)
                          2: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: RLoDGqQrLMN8RtNfib91dVRLKMKiKWs7GUo1oIVrybg=)
                          3: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: Nz0DVL+CvZ5dT8akmCAjwfXowXzmBOEn4Hxk/rEQ7LY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
                          rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852 (0x354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57C9, serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
        Validity
            Not Before: Apr  5 00:43:30 2026 GMT
            Not After : Apr 12 00:43:30 2026 GMT
        Subject: CN=69d1b033-6625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:01:02:ab:59:e8:86:fd:3f:20:b6:5a:81:ee:
                    54:09:b0:c9:89:b3:be:39:b7:ab:a2:80:3f:bc:97:
                    52:6c:01:64:78:1c:a2:44:ae:73:c2:86:e4:06:30:
                    dd:05:60:a8:ed:03:0d:9c:ef:39:8c:39:ad:6b:32:
                    40:fa:98:dd:22:71:f8:86:45:22:fe:b1:9a:02:9c:
                    8e:1d:c5:f7:5c:de:a2:a5:e2:14:1b:58:38:11:4a:
                    4f:5d:33:e0:33:70:ac:ed:24:67:54:ef:49:69:13:
                    4e:0e:57:84:fc:c9:a8:7b:43:00:4a:72:1c:d8:0b:
                    67:a7:a7:92:c5:d7:d3:4c:02:49:0c:ab:4d:0c:ff:
                    10:21:27:95:23:eb:54:2e:9d:f6:3f:73:0b:e2:8d:
                    35:be:1d:93:9f:2f:29:9b:92:cf:e4:25:8d:f2:55:
                    bc:eb:c9:08:94:d8:d8:f4:f6:db:c1:e3:72:c6:58:
                    4b:ae:8e:fc:3d:fe:01:d3:14:cd:b9:72:f4:19:27:
                    39:85:8d:42:92:4e:7b:ec:e1:07:e8:34:ad:3b:05:
                    b7:d8:a9:df:06:32:f2:eb:3a:de:0d:52:0d:ce:59:
                    ca:55:1e:7d:20:d1:12:9d:06:38:49:6e:d8:6e:7f:
                    c9:46:5d:a1:5e:1d:c8:be:21:31:df:46:e6:ca:0b:
                    1b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:45:78:F5:1A:B1:2F:EE:15:81:52:64:0F:F3:E3:DA:CD:AA:2E:7B
            X509v3 Authority Key Identifier:
                keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:40:45:06:d4:85:b4:8a:71:da:0e:73:6c:bb:13:d8:e9:cb:
         de:d5:7e:6a:06:15:dd:42:13:43:b3:31:4f:26:f3:a6:ea:0f:
         f5:1d:c0:c3:39:54:9c:0b:53:1a:23:ff:33:da:01:c0:ab:29:
         3c:cf:5b:0e:17:79:be:88:cf:80:ea:0f:b1:f3:32:f6:2a:6b:
         8b:91:76:76:f1:ae:2c:6d:8d:23:4f:77:0e:dd:8c:ae:a9:20:
         ed:96:d9:78:fb:d4:73:1d:7e:80:2a:9b:e5:1a:ad:33:49:69:
         d6:d5:6c:1f:00:15:b0:e4:b8:00:8c:5a:0e:82:38:b8:46:a4:
         69:d5:3a:24:06:4e:20:c9:76:90:ae:c6:91:65:4c:9a:69:0c:
         61:6a:10:d9:17:95:e3:4b:f4:a6:8e:52:c3:d5:f5:8f:69:a5:
         4c:38:d6:7c:1b:18:58:b0:e8:5b:01:90:e5:dd:35:95:84:e3:
         9a:23:98:83:46:2d:b2:e3:a1:e7:52:79:aa:3c:bd:85:80:51:
         5f:14:b1:0e:26:88:40:71:21:7d:2f:ec:da:98:be:ad:34:46:
         89:39:75:8b:74:a6:11:5b:74:dd:d7:a5:7c:31:88:da:d4:ec:
         55:74:94:ec:e3:3b:42:ef:c0:5e:63:67:1a:27:5d:fd:09:a6:
         8a:52:a9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:28 2026 by rpki-client