Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft
File:                     0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft (raw, json)
Hash identifier:          ocbGcMIuVyy3sSDVXJkCtf+5XZIWsCO8ahfBZMPXDHE=
Subject key identifier:   59:CE:26:55:51:10:D6:55:65:54:88:28:45:5C:2F:2F:4C:BC:B3:D7
Authority key identifier: D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3
Certificate issuer:       /CN=A91EEA4D/serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft
Manifest number:          14F8
Signing time:             Sat 04 Apr 2026 18:55:33 +0000
Manifest this update:     Sat 04 Apr 2026 18:55:32 +0000
Manifest next update:     Sat 11 Apr 2026 18:55:32 +0000
Files and hashes:         1: 0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl (hash: wzwcsc+WRUTnpip/BdAiVIbuZ2Pf4PvX4UnFwdKYE7M=)
                          2: 6B6060E445A311F093AEF324C4F9AE02.roa (hash: Z080oakKu17Se776qqpj5LDNBkfUF0Gst+D+v6MAhg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl
                          rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:55:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEA4D, serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3
        Validity
            Not Before: Apr  4 18:55:32 2026 GMT
            Not After : Apr 11 18:55:32 2026 GMT
        Subject: CN=69d15ea4-b1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:13:0e:6a:c0:a4:09:6b:5b:14:57:23:d1:f2:
                    13:f5:bf:eb:a8:ad:53:cf:7d:0c:40:30:d7:71:74:
                    72:1a:89:6d:4f:74:17:f7:0b:54:f7:65:1e:a8:b0:
                    29:30:2d:20:b5:82:68:22:4d:56:51:b0:30:1d:18:
                    d2:eb:2a:a9:0b:92:d8:d2:3e:b1:09:56:f0:4e:e1:
                    f6:73:df:d3:ad:5d:fe:82:60:33:f0:4d:5b:83:0d:
                    65:d6:1a:93:f2:b9:85:5f:b8:f2:de:c7:ca:a3:48:
                    bc:06:2d:ff:30:1a:de:6a:c6:76:8b:f9:33:5f:62:
                    e2:4d:31:8f:7f:29:cd:3f:fc:e8:84:c3:0e:e7:63:
                    45:a1:5f:97:ea:e8:57:d6:9f:5a:4d:a1:16:f7:2e:
                    1a:58:fe:ba:d7:01:55:35:d4:9d:70:96:f9:0a:17:
                    b7:ca:fb:9c:b8:75:fe:ab:b1:94:81:1f:24:2f:ef:
                    2e:5e:d6:09:d9:b0:23:47:74:62:05:71:6d:5c:d9:
                    9e:0c:96:5f:7b:1c:b1:0f:f2:09:80:2d:c2:90:98:
                    f4:06:b3:ae:2a:df:be:01:44:f6:71:db:a9:00:2f:
                    15:41:de:74:a1:01:b2:72:84:d5:e2:2a:46:b3:9b:
                    d2:57:38:0e:18:82:f4:24:fe:11:80:ed:f0:2f:fe:
                    f0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CE:26:55:51:10:D6:55:65:54:88:28:45:5C:2F:2F:4C:BC:B3:D7
            X509v3 Authority Key Identifier:
                keyid:D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:b3:17:1a:88:72:56:ab:25:c9:9d:5e:c1:d7:ca:28:82:f5:
         73:72:c8:31:c4:0e:a8:27:f6:92:e6:db:a0:8e:1e:6a:be:9a:
         9c:93:af:c6:47:20:6b:ac:7d:2c:7e:5b:82:96:50:a7:0e:73:
         8b:72:7d:e7:bf:a5:37:56:50:da:12:63:02:27:50:b3:e6:17:
         28:ad:c2:28:a0:5c:3b:25:5d:43:f9:41:43:45:2e:6d:fa:ed:
         3b:8f:40:c7:f2:57:96:f9:fc:37:63:f0:11:e6:33:7a:7e:6b:
         93:10:d5:87:95:6c:47:3d:aa:ec:2d:d5:d8:b9:88:7a:28:19:
         0e:6e:a9:ef:cb:73:f2:05:24:4d:cb:22:9a:b7:73:ec:ba:0e:
         4f:a4:77:bf:8c:75:85:10:90:20:a6:69:59:f0:d9:42:4e:13:
         93:57:02:b8:bb:d8:d4:c1:7a:ac:b9:c9:99:d7:b4:e6:2f:1e:
         af:b7:f8:30:bf:43:fe:87:5e:39:3b:a9:54:60:c3:84:1d:98:
         34:4b:e1:cb:d3:8c:7c:82:e2:5b:d6:25:f6:b3:56:79:af:b2:
         65:4d:37:c0:ef:e8:bc:72:03:15:2f:b7:89:96:f5:e8:b0:6a:
         02:28:39:a1:3c:93:05:0c:56:78:43:e4:cc:40:cc:32:68:4c:
         94:70:79:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:36 2026 by rpki-client