Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
File:                     RWr15WZ94kipzwzrkMbRs9Ptb6g.mft (raw, json)
Hash identifier:          9Ps6d2LzodoaObM5BTssX16uAVl5nKnpXYR1NCwHCH0=
Subject key identifier:   F3:5B:0C:18:30:4E:EF:11:48:73:75:4E:98:DF:82:10:70:A9:BA:B7
Authority key identifier: 45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8
Certificate issuer:       /CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
Certificate serial:       029D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
Manifest number:          0285
Signing time:             Mon 27 Apr 2026 01:53:50 +0000
Manifest this update:     Mon 27 Apr 2026 01:53:49 +0000
Manifest next update:     Mon 04 May 2026 01:53:49 +0000
Files and hashes:         1: RWr15WZ94kipzwzrkMbRs9Ptb6g.crl (hash: KY8uHuHlaKb0wXo1HwWbxtm50g9RqR7zVLt4JjFBDWE=)
                          2: 5AFFB9E48C2211EDAE44DD87C4F9AE02.roa (hash: 56OWJIaGJbU897Qsu8EsYt1ihb4Vo/hHqb3TZGrUjxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl
                          rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 01:53:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 669 (0x29d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8903, serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
        Validity
            Not Before: Apr 27 01:53:49 2026 GMT
            Not After : May  4 01:53:49 2026 GMT
        Subject: CN=69eec1ad-020f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:32:46:80:a8:bb:88:84:36:a0:70:6d:f5:3a:
                    8b:57:ec:3d:2a:63:f1:6a:b1:e7:aa:e1:15:cc:8d:
                    de:f6:9b:8a:7f:11:73:58:a0:c1:5e:a2:d6:02:b6:
                    cc:6c:52:60:7b:6f:93:60:9c:6d:41:8e:ee:f9:ea:
                    d7:0c:b2:78:c7:05:67:0e:fa:26:24:a7:55:f7:d3:
                    30:21:73:e3:5b:ef:82:33:53:bc:ea:8d:ab:fc:ae:
                    a6:41:db:62:1d:ad:bf:7c:d5:87:4a:16:5e:d9:ee:
                    b4:3f:48:95:8b:b6:41:b0:fd:13:85:9a:cf:40:a1:
                    c7:01:7b:4b:68:27:c9:41:eb:61:29:0a:e2:59:14:
                    45:ee:17:95:8f:3d:39:0a:15:df:33:99:53:70:8e:
                    a3:1b:e9:a0:4a:00:d1:6a:ac:1b:80:be:28:b9:87:
                    0a:e2:65:af:1c:76:36:4d:06:d3:72:5e:65:0a:83:
                    c5:3c:5b:69:6f:15:7b:41:74:22:3b:ad:a6:dc:46:
                    6b:e0:e7:6f:58:18:62:04:5c:78:21:a7:f4:b8:11:
                    f4:77:ab:e9:b6:c9:f9:15:3e:88:d8:ec:ed:94:17:
                    e4:b7:db:9e:84:93:c7:f3:15:07:b2:c0:5c:c1:ed:
                    07:ce:e6:c3:d7:5e:7a:67:66:ba:4e:87:c5:cf:93:
                    0f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5B:0C:18:30:4E:EF:11:48:73:75:4E:98:DF:82:10:70:A9:BA:B7
            X509v3 Authority Key Identifier:
                keyid:45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a5:22:d9:d4:ff:bb:d1:d1:29:9f:f3:49:f5:d8:4b:a0:58:
         7c:5b:c0:33:49:45:fd:97:22:6e:c4:20:06:d8:7f:e8:7c:b2:
         ff:b4:6c:48:0f:5e:c3:88:e8:29:a2:b8:56:cd:7a:e4:75:db:
         eb:78:70:27:8c:97:83:a7:19:d9:a4:4b:5c:a2:54:ec:f3:09:
         6f:23:0d:fa:e1:bb:7b:fa:28:d7:01:2b:6b:c6:5b:e7:a1:5d:
         66:47:f3:9d:bc:34:36:2c:9d:e7:02:c8:86:dc:57:ca:30:65:
         b4:5c:36:e3:56:20:47:72:19:15:1b:10:cd:bb:8f:df:29:c8:
         60:a8:1c:a7:87:a6:4d:fb:36:82:4e:98:4b:75:b4:e0:24:45:
         44:5f:a4:65:72:2a:7a:0c:aa:43:a3:40:30:17:d3:86:ef:97:
         7f:0c:96:c4:bc:63:36:da:ae:e0:b8:35:69:3a:d7:38:3b:eb:
         8c:f5:f0:30:7f:f5:6d:90:32:92:29:ea:c8:47:e6:86:f6:21:
         6f:5c:95:cc:84:9c:f0:23:a6:14:70:83:91:af:80:10:f9:13:
         b4:bf:39:bf:a8:7c:d9:e9:8e:ec:9b:9e:d9:64:69:b2:fd:d7:
         37:5a:e6:a2:f5:e1:0a:44:27:8e:ff:a9:d0:f0:5e:60:4c:53:
         f5:29:d8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 07:24:16 2026 by rpki-client