Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
File:                     MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft (raw, json)
Hash identifier:          lJdXoRP2raUrbCioruKKWzdsHKC7RYPPb/Br2T1F2MU=
Subject key identifier:   D1:20:F0:8C:B0:81:6B:31:FC:F0:D5:19:B5:FF:49:F7:A5:1A:10:F1
Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
Certificate issuer:       /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Certificate serial:       0CD3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
Manifest number:          0CC4
Signing time:             Sat 04 Apr 2026 18:17:10 +0000
Manifest this update:     Sat 04 Apr 2026 18:17:09 +0000
Manifest next update:     Sat 11 Apr 2026 18:17:09 +0000
Files and hashes:         1: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl (hash: +Y+txhCA1qZtEM3FANQzzfnGufe8vEKqJZxOhcEppKY=)
                          2: 1794902224E111EF97BA8F42C4F9AE02.roa (hash: Yq+GDOgPjYfjlCH3DOObesHj7a3fvejOrl/4IRRx/CI=)
                          3: EA903484DBE011EF8B7B8868C4F9AE02.roa (hash: qYrHqLo6UNCs7hu1fqjRiYyLDCXIk6/ZaenYZLihdqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3283 (0xcd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
        Validity
            Not Before: Apr  4 18:17:09 2026 GMT
            Not After : Apr 11 18:17:09 2026 GMT
        Subject: CN=69d155a6-2c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1e:6a:fa:f4:d1:08:d6:fd:c0:2e:a2:31:fe:
                    ac:50:94:0c:d5:1a:05:9c:e1:93:05:12:9c:44:dd:
                    32:2f:ca:62:8d:1b:f9:23:87:59:8f:04:a6:8e:cc:
                    a3:ed:24:d0:da:d2:a2:45:f9:08:b7:3f:b6:b0:ba:
                    67:e1:b1:ec:07:1b:a5:81:c0:9f:91:71:51:e6:88:
                    82:ae:80:68:e4:8d:5c:d4:5b:55:22:75:85:f4:68:
                    2d:e5:22:b4:70:67:91:34:1e:fa:7b:46:9b:ce:13:
                    96:6c:97:af:46:86:17:f3:88:67:d6:b2:7d:e5:be:
                    d7:98:48:95:44:cb:32:cb:5f:3e:6a:34:12:42:31:
                    7a:54:82:47:81:c0:d8:03:d6:29:ef:88:c6:ff:90:
                    f3:bd:01:42:85:2c:d3:01:ce:87:59:2b:db:a3:d7:
                    eb:ce:94:b8:f1:2e:7c:3b:b4:7a:82:fe:c7:2f:e2:
                    a8:c3:31:67:4a:0c:b3:68:4e:32:d7:fc:eb:df:b9:
                    7f:08:87:1f:21:a6:31:89:ff:bf:1c:8a:4f:a8:34:
                    24:03:0d:e9:39:51:9f:e0:b4:d2:b2:59:51:d5:dd:
                    b0:9c:4a:1f:4c:5e:a6:c8:a0:a0:3b:d8:53:66:48:
                    e5:72:66:82:6b:e1:fe:46:14:ff:9c:40:e7:81:27:
                    dc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:20:F0:8C:B0:81:6B:31:FC:F0:D5:19:B5:FF:49:F7:A5:1A:10:F1
            X509v3 Authority Key Identifier:
                keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c4:5d:1c:3e:5c:42:bc:76:b1:e3:33:32:a7:22:61:f5:03:
         46:9b:6e:25:05:7e:4a:a7:0f:89:87:14:fd:1c:58:6a:ce:3b:
         cd:a3:82:f6:a5:cd:ca:46:46:89:8c:bc:43:31:26:d1:07:19:
         ee:92:c1:fd:e1:c5:77:5e:83:85:ab:8a:5f:13:c0:26:0d:74:
         38:94:f4:87:81:97:59:e5:52:57:7b:0b:7f:78:1b:8c:94:60:
         b7:34:d9:0b:6e:36:45:5a:7f:0a:b2:84:8c:31:16:7e:13:7c:
         8f:bc:a5:da:22:ba:1d:ee:2c:a5:a5:c4:69:4d:1f:ce:c1:b8:
         6a:36:82:64:4f:ba:24:c9:7e:0c:cc:26:a3:aa:39:fe:aa:16:
         8d:67:bf:33:e0:63:99:0e:e6:a5:10:3f:9e:61:b8:10:be:1d:
         8e:1a:ea:49:df:14:77:39:54:5c:3d:a9:90:5e:ff:3d:0b:4b:
         04:59:59:81:89:09:a2:bf:4e:04:9f:6a:9a:24:5c:ec:ff:c2:
         de:22:46:eb:1d:88:37:66:0c:4f:ed:9c:de:9d:ef:6e:3f:11:
         b7:5c:a9:82:74:d6:4c:78:af:2e:63:06:7f:9b:77:ec:0b:29:
         7d:b7:1d:c2:13:14:59:ad:ff:af:68:d4:54:4d:f7:c9:67:4e:
         7b:34:95:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:40:50 2026 by rpki-client