Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
File:                     X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json)
Hash identifier:          t94HY0X2YDkeJQC/hFmdGmJs4I+6ahp6jOcs17MDL10=
Subject key identifier:   D7:89:67:5B:F4:FE:BE:85:05:6D:F0:83:8C:F1:2D:23:F7:E9:01:7E
Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
Certificate issuer:       /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
Certificate serial:       1EE0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
Manifest number:          1E4E
Signing time:             Mon 20 Apr 2026 16:02:44 +0000
Manifest this update:     Mon 20 Apr 2026 16:02:43 +0000
Manifest next update:     Mon 27 Apr 2026 16:02:43 +0000
Files and hashes:         1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: VyzfaYYbCxHuCrqIohXE3DwYeGvKNiK2XparkYNUEnU=)
                          2: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: +XxRxDW4o+0vEop8el6czS1WqjL0cfJHtX8rBUhX9uE=)
                          3: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: B88B8lhDuyvlqii7Vxfu2GVrdnxyOhGHMfrl63G06so=)
                          4: B8BA4E603B5211EAA0D53F12C4F9AE02.roa (hash: srVyFBKN0Q9HWcfKgMQOmFLq/c+Rn8Jh5edzm7vxdco=)
                          5: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (hash: hBNhJd1RE1CKp6fZPq7DAXxvhGg9uUgn9HcytzOG94E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl
                          rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 16:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7904 (0x1ee0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
        Validity
            Not Before: Apr 20 16:02:43 2026 GMT
            Not After : Apr 27 16:02:43 2026 GMT
        Subject: CN=69e64e23-b5cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f9:1d:6f:fb:b2:24:c3:32:d7:73:fa:e7:d6:
                    f1:35:f2:5e:90:f2:f7:cd:d6:31:df:50:d6:4a:ed:
                    fe:b7:d8:09:0d:ce:c1:ef:d8:14:ce:c6:be:38:61:
                    e8:5b:c1:41:6b:93:8c:8d:74:a0:f6:ce:6a:c1:3e:
                    3a:79:1f:68:3f:e9:5c:dd:9f:e2:8a:a6:c3:d3:55:
                    ea:f9:15:3b:3b:67:e1:ba:fa:db:41:b5:41:92:c3:
                    16:ca:0f:03:40:3f:78:63:93:29:f6:71:77:5a:cb:
                    2f:4d:6c:8a:52:0f:40:df:5e:39:08:e3:48:e0:97:
                    14:e7:11:07:51:12:67:b1:af:66:4b:16:ce:5e:6d:
                    db:35:93:39:8d:c5:3b:22:d6:da:b6:92:40:85:19:
                    01:eb:b2:3c:65:d9:5e:77:98:6d:4e:cd:a2:df:cd:
                    a2:33:14:4e:c0:49:9f:5a:85:df:9b:ee:43:1b:af:
                    aa:03:6f:14:75:27:28:74:17:f9:c0:1a:e1:3b:06:
                    b9:a4:16:b2:be:7b:9d:9d:b7:49:9f:5b:15:f4:ba:
                    dd:da:5b:24:24:91:01:64:03:33:44:04:3b:37:80:
                    d8:a5:f2:49:ea:f8:6d:84:bd:34:ff:fa:51:d8:c5:
                    0d:f0:28:98:8d:f2:d6:37:89:b5:63:fb:2f:08:b5:
                    d2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:89:67:5B:F4:FE:BE:85:05:6D:F0:83:8C:F1:2D:23:F7:E9:01:7E
            X509v3 Authority Key Identifier:
                keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d7:b0:be:ba:ce:90:48:3b:42:a1:a9:6f:6f:68:7f:ab:1b:
         44:51:45:90:7c:71:b8:75:ca:d1:29:7d:b2:72:71:7e:c5:e9:
         53:24:18:02:6a:65:17:e6:48:f8:08:f4:6a:1f:2b:61:f6:54:
         6c:03:23:8e:b2:ee:47:5a:16:0b:69:66:f3:74:18:dd:b3:95:
         23:f3:ce:35:ee:a0:df:d5:d6:59:44:d2:f8:fe:1d:6a:d1:b5:
         f1:37:f5:ec:b2:7b:b5:3f:4a:1a:46:34:6e:12:78:1b:be:90:
         4a:4b:06:90:36:58:ec:02:74:91:9d:03:32:ef:80:a9:62:8a:
         d1:54:08:0b:28:6d:fc:01:7e:39:b6:3c:1b:d8:e5:33:0f:bd:
         ee:e2:3e:77:96:2a:f5:c9:a5:a9:b7:82:68:ab:1e:ca:9b:f4:
         46:69:38:b4:31:b1:80:35:51:b1:93:fa:ee:c8:ca:2f:4b:10:
         8d:90:89:36:6e:fa:a1:64:18:0c:1e:94:96:c5:70:72:bb:86:
         59:89:43:d5:3a:0d:a1:64:40:f3:b7:da:90:8a:e5:97:69:e3:
         8c:e3:35:0e:97:6c:b7:a2:2f:e3:d4:d0:68:b7:ce:3a:fe:26:
         42:2e:1b:a4:66:d3:ce:32:27:4d:72:14:9b:fb:ff:8b:b1:6d:
         a4:ef:c9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 06:33:53 2026 by rpki-client