Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
File:                     v3H1vxFop4QFduAAbzu8ZfxINAs.mft (raw, json)
Hash identifier:          qDcFpYunniDRQnYneM90P3ak1LrEh6rhLbKXFIVI7R4=
Subject key identifier:   48:70:76:82:ED:FE:A1:42:EE:54:F8:5B:C6:A7:2C:95:65:58:99:26
Authority key identifier: BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B
Certificate issuer:       /CN=A91ED596/serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
Manifest number:          013B
Signing time:             Fri 17 Apr 2026 05:02:48 +0000
Manifest this update:     Fri 17 Apr 2026 05:02:47 +0000
Manifest next update:     Fri 24 Apr 2026 05:02:47 +0000
Files and hashes:         1: v3H1vxFop4QFduAAbzu8ZfxINAs.crl (hash: ybNdhelAYrEmjsw3RwoMYqiGoYRZGt8psNtPdgD4Oao=)
                          2: 8580DC705AE311EF86351430C4F9AE02.roa (hash: 4qI4Ml9uIYG2SLfkLkYCessVGIjFflva1W8j/+okM6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl
                          rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED596, serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B
        Validity
            Not Before: Apr 17 05:02:47 2026 GMT
            Not After : Apr 24 05:02:47 2026 GMT
        Subject: CN=69e1bef8-2713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d0:f7:04:8b:01:01:0e:c2:00:d6:67:2c:b0:
                    9b:b6:37:6a:12:48:ef:31:c3:22:c1:37:c1:c8:bb:
                    ec:b4:85:0d:2a:3c:0d:10:f7:2e:38:44:2e:be:cb:
                    f0:05:fc:83:e8:bc:90:19:7e:4d:3b:8b:05:67:29:
                    2c:dd:9a:66:5c:fa:45:1a:8b:96:76:05:eb:24:76:
                    f1:39:fc:67:98:bb:2c:79:e1:e8:72:ba:7c:ad:81:
                    ec:d6:73:9d:01:4f:12:a3:cb:fe:15:94:df:d9:39:
                    d4:2c:4e:16:60:61:cb:bf:8d:00:59:5d:a9:6b:45:
                    64:78:01:77:86:42:e4:2c:e2:72:71:f2:31:3a:38:
                    28:21:08:46:d6:3d:f7:78:39:02:20:2f:34:cb:3e:
                    5e:30:a2:57:4c:89:51:f6:21:e2:ae:35:63:23:eb:
                    0c:0c:55:ea:c1:ef:f1:71:8d:ab:b9:d5:51:86:4f:
                    47:7d:41:5b:b3:20:1c:49:29:44:54:8f:29:da:98:
                    87:fc:ac:b6:3c:c2:89:91:08:0f:41:b5:2b:50:11:
                    07:4c:79:bd:8d:a0:ef:46:97:c1:fd:75:ad:27:51:
                    84:72:39:95:63:ed:ec:44:40:49:a4:c5:2a:9c:e3:
                    67:66:fc:9a:4d:90:80:a4:2e:3b:eb:24:20:12:9a:
                    8e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:70:76:82:ED:FE:A1:42:EE:54:F8:5B:C6:A7:2C:95:65:58:99:26
            X509v3 Authority Key Identifier:
                keyid:BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:57:20:9d:5d:c0:aa:1d:26:b2:26:9b:91:66:c5:0e:2e:a0:
         42:ec:79:5e:84:0c:64:10:45:54:eb:cc:81:3b:28:f3:c5:d1:
         5a:58:d9:8b:98:42:41:e8:aa:0e:cf:49:02:6d:5f:18:69:91:
         24:c1:2c:ec:b1:8a:ea:04:eb:b4:b8:e1:4c:f2:ec:22:d3:77:
         a6:91:b2:97:59:dc:b9:3e:e3:63:bf:cd:27:cd:19:18:3e:fd:
         d2:fc:98:43:80:72:59:d3:da:ec:fb:9a:ba:ce:4b:d9:50:30:
         32:c0:16:00:8a:fc:40:d0:4b:d2:05:48:eb:a9:b4:6a:02:5b:
         3c:9b:eb:cf:6b:3f:81:84:89:39:24:d2:68:66:96:3f:5e:93:
         24:27:29:e7:9a:8b:00:72:69:a8:4f:fd:d6:24:c4:91:6b:ae:
         c7:75:09:56:5d:11:03:c7:00:73:49:67:2d:e9:a0:44:e7:d6:
         59:6a:bf:fc:9b:14:31:76:6a:6a:34:ad:75:c2:14:04:b6:8f:
         9c:57:db:49:84:94:9f:a6:fa:22:5a:61:0f:b5:f7:90:08:46:
         6d:88:98:a8:22:93:76:41:ee:14:ad:81:78:76:79:64:f7:b4:
         3a:91:9c:64:56:be:66:d9:b6:5d:7a:95:2c:46:ab:df:d3:14:
         70:0a:d1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:20 2026 by rpki-client