Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
File:                     Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft (raw, json)
Hash identifier:          /dUyNgUV1M9jIMXlqsf/EQmWLtqz9QJ/e1wsvEHnjCg=
Subject key identifier:   C3:04:62:05:ED:22:3D:24:6F:30:68:F0:82:6B:97:3B:2F:B2:94:6D
Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D
Certificate issuer:       /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
Certificate serial:       030A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
Manifest number:          0303
Signing time:             Sun 05 Apr 2026 00:59:57 +0000
Manifest this update:     Sun 05 Apr 2026 00:59:57 +0000
Manifest next update:     Sun 12 Apr 2026 00:59:57 +0000
Files and hashes:         1: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl (hash: 78ge0cRW01N3EPLHY9iFM7g/KZRxPfFnUN5wvNs6kMQ=)
                          2: 9682ACDE16A611ED86A3EF0CC4F9AE02.roa (hash: LqX1NYcUBpIFn4nEYWAdBnB30XYthrymeUC3YsifzY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 778 (0x30a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE0A0, serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
        Validity
            Not Before: Apr  5 00:59:57 2026 GMT
            Not After : Apr 12 00:59:57 2026 GMT
        Subject: CN=69d1b40d-3691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c2:1a:29:3a:03:5a:66:b4:69:98:72:a1:8a:
                    20:69:59:fc:95:6c:78:52:a4:d9:85:16:1a:c4:57:
                    8d:a4:0b:21:b0:25:b6:92:8b:1f:2e:97:8b:18:1e:
                    ec:43:2b:d3:bb:7c:19:22:53:25:3c:cc:1b:47:5b:
                    a0:59:c9:75:06:e1:88:94:63:80:8b:cf:01:9c:6a:
                    bb:c0:21:d6:b4:31:1b:6e:9f:68:6b:27:4c:50:2a:
                    40:49:ea:13:48:54:d9:7c:f9:71:2d:72:67:24:b4:
                    ce:ad:e1:1a:68:57:bb:a1:d3:79:4f:88:3e:53:ee:
                    d5:92:e2:f7:2e:e6:e4:ae:1b:40:ce:07:07:30:4f:
                    82:18:53:64:d0:c0:fa:e8:c0:13:06:c2:71:b5:bb:
                    89:ea:88:f3:94:23:ae:e2:f6:b4:6a:d5:2b:cf:83:
                    d8:b7:66:4d:55:70:b7:64:50:66:17:ad:e8:31:ce:
                    12:f7:68:4a:4f:07:7e:fc:64:99:1f:46:1d:f5:82:
                    ff:ef:64:79:cb:eb:04:f1:99:24:ac:74:64:dd:8c:
                    9e:e1:85:e5:26:86:1a:c7:99:67:ce:a6:2a:eb:f7:
                    d0:d9:c5:1d:40:6d:93:92:d6:ef:8b:0a:5b:b2:99:
                    bf:cb:7e:a9:c7:e0:d2:3c:e1:53:25:73:74:ca:91:
                    bd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:04:62:05:ED:22:3D:24:6F:30:68:F0:82:6B:97:3B:2F:B2:94:6D
            X509v3 Authority Key Identifier:
                keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d4:aa:e4:42:d9:f9:e2:9b:cb:41:55:7e:e1:5c:e7:9d:54:
         f9:be:b5:01:6f:dd:36:c5:70:b2:51:b9:e2:1f:3f:62:52:a4:
         65:7f:3e:50:65:0a:83:c2:41:e0:e4:8c:51:ac:f1:1f:f3:2e:
         a1:c6:0a:64:a4:b1:f6:05:6b:10:52:bb:20:70:b8:bc:33:8c:
         fc:71:75:96:e7:91:34:06:e8:3d:e3:41:df:05:b3:62:df:52:
         2e:44:17:9f:e5:e6:27:cf:e9:2f:0b:67:98:a2:43:07:2e:ca:
         38:07:75:67:5e:21:86:01:a1:59:c0:7a:3c:91:72:7c:3a:7c:
         3c:cc:a8:45:70:b9:e6:3a:63:24:7c:75:74:19:0b:25:db:4d:
         bd:a4:11:12:2b:87:30:18:a1:d6:d2:f1:84:5a:68:d9:9e:34:
         0f:40:d2:e5:9f:4d:69:cb:79:cb:f7:bf:1c:dd:c9:3c:7a:6c:
         47:92:15:cd:c8:e8:64:7a:51:78:73:01:76:bc:fb:03:77:b0:
         ee:21:07:c4:ce:8a:2a:4a:4e:f9:4c:29:89:f7:e5:86:99:69:
         91:9c:38:4e:74:97:f4:2a:f0:f0:59:04:58:5a:e5:69:59:39:
         f6:46:59:7f:f3:49:cf:8f:f2:a4:6b:20:a5:9b:e3:f7:f8:01:
         3b:42:de:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:14 2026 by rpki-client