Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft
File:                     156odshIAT1wTjIDr31ghtsCx50.mft (raw, json)
Hash identifier:          n5XcP++9z+mz3Z/iWV6opH4Jm+a46PS3EyOtIL5XPGQ=
Subject key identifier:   47:C3:A3:1F:71:AE:FA:7E:DD:3D:A9:F4:86:B3:4D:FF:1D:2A:D5:AC
Authority key identifier: D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D
Certificate issuer:       /CN=A91EB7B8/serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D
Certificate serial:       03B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft
Manifest number:          03A5
Signing time:             Sun 05 Apr 2026 00:30:19 +0000
Manifest this update:     Sun 05 Apr 2026 00:30:19 +0000
Manifest next update:     Sun 12 Apr 2026 00:30:19 +0000
Files and hashes:         1: 156odshIAT1wTjIDr31ghtsCx50.crl (hash: /6cq9W0JKhKW84ja7NElwwPnHqsx6iwuwgouE9MbClA=)
                          2: BD8AAEBAD6BE11EEAAFF5049C4F9AE02.roa (hash: vZQX4t8MAHwhEYks15AvCgJPCCzogD0p8+MoFespB6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl
                          rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 944 (0x3b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB7B8, serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D
        Validity
            Not Before: Apr  5 00:30:19 2026 GMT
            Not After : Apr 12 00:30:19 2026 GMT
        Subject: CN=69d1ad1b-e0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:12:a1:32:bd:7f:dc:5e:26:56:4f:77:b5:48:
                    b1:a6:48:a8:0a:48:7e:88:17:66:d2:0f:0e:b2:a4:
                    67:aa:5c:eb:74:05:18:82:c8:fe:2f:9e:bc:1d:25:
                    b8:c3:97:9e:09:82:cc:7a:d5:88:8f:b9:8c:ab:d7:
                    bc:ba:df:15:1b:16:72:c3:17:5a:1d:78:02:fd:5c:
                    59:60:11:7e:92:19:2a:5c:28:c3:ed:4a:9d:80:6c:
                    81:85:3e:07:36:9f:42:58:63:b9:46:17:20:36:c4:
                    e6:cd:a5:49:a1:ed:03:9e:e5:ca:37:7d:bb:56:c0:
                    f3:9a:ea:6b:68:bb:be:03:3f:10:b2:07:ea:20:61:
                    4f:43:11:1f:9b:0a:d7:42:01:3a:5b:21:df:b1:34:
                    74:83:9e:e0:6b:04:da:69:bb:d3:ad:72:0f:f1:b6:
                    01:ab:ab:28:2d:92:2c:63:5a:8f:3b:7e:83:92:61:
                    82:59:d0:43:d8:60:6e:53:b6:26:cf:93:31:8f:56:
                    d5:07:07:13:92:ca:e9:88:15:36:dd:35:dd:20:39:
                    77:7d:95:eb:c8:3c:9c:de:3d:70:83:c2:57:b2:df:
                    74:d1:80:0c:ac:67:01:c9:7a:39:35:6c:04:0e:b5:
                    50:3b:46:83:e6:9c:ea:55:14:33:63:3d:2b:76:98:
                    f6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C3:A3:1F:71:AE:FA:7E:DD:3D:A9:F4:86:B3:4D:FF:1D:2A:D5:AC
            X509v3 Authority Key Identifier:
                keyid:D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:13:a2:f0:69:2c:af:c3:a7:75:91:36:93:59:16:58:b8:64:
         bb:ab:17:ee:d5:36:6e:75:59:d4:ab:6c:62:c8:50:52:d8:a6:
         e8:8f:34:76:99:f9:25:92:16:34:bc:77:2f:be:44:7e:0c:67:
         8c:c5:94:2f:51:c3:dd:d9:03:a5:15:87:f8:2d:a0:4c:01:84:
         37:4c:4b:8a:89:6f:46:6b:7f:cf:4b:29:87:7c:f3:6a:c3:8a:
         cc:9c:8b:3d:f3:13:d4:fc:82:a3:4d:a0:59:67:15:7a:d0:c3:
         c7:9c:a5:f7:73:4c:d7:a5:8b:4b:de:b2:ab:92:85:89:b4:ed:
         94:eb:44:44:ac:3f:c8:ed:ed:11:85:13:5a:82:66:94:b6:28:
         4b:bc:b6:4c:3e:7d:11:77:cc:a1:88:f4:62:b6:51:73:c5:ff:
         73:3b:fd:c1:39:9f:97:f4:7e:61:24:42:c3:78:f8:76:26:78:
         62:7d:f3:bf:88:be:4f:04:a3:18:28:3e:84:a6:f4:97:9d:51:
         d6:83:54:c4:f5:f6:1c:a1:33:d7:66:07:71:90:59:47:c0:f3:
         fd:79:af:5a:a7:1e:01:00:01:fc:25:de:98:46:4f:ac:69:84:
         a8:51:7c:f2:8c:c6:d6:f2:5c:1b:4c:19:96:03:94:e3:4c:5c:
         24:b0:fb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:37 2026 by rpki-client