Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
File:                     e3T7MiZmknZU8foeyLcJwwU1UOM.mft (raw, json)
Hash identifier:          FLJGajQXqBWT3u43go0uziUhwnQWZqJRfG2CR+Jn+Gs=
Subject key identifier:   0C:1B:27:9C:5A:CB:FB:51:4C:60:F2:F5:92:57:C9:2A:00:EA:48:B8
Authority key identifier: 7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3
Certificate issuer:       /CN=A91F1451/serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
Manifest number:          4E
Signing time:             Tue 21 Apr 2026 08:06:35 +0000
Manifest this update:     Tue 21 Apr 2026 08:06:34 +0000
Manifest next update:     Tue 28 Apr 2026 08:06:34 +0000
Files and hashes:         1: e3T7MiZmknZU8foeyLcJwwU1UOM.crl (hash: ZeRTNtT2mLhzzW+G9eIBCeyJYHX6P7T/rau63nXvj0o=)
                          2: AC465D48D02211F0A5535D5AC4F9AE02.roa (hash: CPLpp/+FM2b54xSn6vuECW27aWUXXJQyS5P46Daeh1M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl
                          rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 08:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1451, serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3
        Validity
            Not Before: Apr 21 08:06:34 2026 GMT
            Not After : Apr 28 08:06:34 2026 GMT
        Subject: CN=69e7300a-9430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a5:c0:35:40:ca:76:75:79:4c:7d:ad:ef:8a:
                    1e:3e:21:5a:7f:1d:b3:d7:25:dd:d6:40:1b:67:22:
                    af:8b:d0:52:98:55:07:4b:a6:c5:e8:d8:29:f1:86:
                    ae:8a:7b:72:b0:7e:64:59:ec:c9:c9:5c:eb:35:93:
                    4d:6b:09:46:d6:18:84:3b:70:fa:12:91:c4:a2:1d:
                    af:3a:86:a9:1d:00:9b:71:22:8b:bd:4d:08:68:f7:
                    db:8a:42:c4:e7:b0:82:6b:0f:a0:02:a9:e5:09:ce:
                    1e:f4:b0:24:ec:37:ae:78:74:59:2c:f5:66:56:b0:
                    8e:9b:26:42:2a:6a:79:43:24:75:f9:4a:16:f9:47:
                    0e:1b:db:9a:e8:a2:22:53:40:5f:e7:67:b9:80:64:
                    cd:4f:03:d0:f0:87:58:e3:72:22:5c:a8:ff:d0:12:
                    7f:60:8c:bf:78:cc:45:91:cb:a0:d9:d5:e8:66:bc:
                    f0:38:3e:24:53:82:be:5e:ea:e4:4f:89:0d:c5:85:
                    48:4e:b8:a9:c9:2f:1f:86:36:e5:a8:55:86:de:e7:
                    47:0e:34:fc:f0:02:a8:02:43:12:89:d7:8c:95:b5:
                    00:97:52:a9:a1:42:8b:88:b0:cd:d8:14:bc:bb:d5:
                    8d:e4:cc:be:bc:1c:cd:cd:28:1e:75:a9:62:83:4e:
                    df:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1B:27:9C:5A:CB:FB:51:4C:60:F2:F5:92:57:C9:2A:00:EA:48:B8
            X509v3 Authority Key Identifier:
                keyid:7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:76:e0:5e:3b:68:e1:3a:6a:82:45:a8:ea:8f:ab:8e:1f:73:
         ed:48:d1:8a:70:c6:1b:e4:d3:27:98:e1:b9:89:f1:ab:9e:be:
         b9:30:cb:6d:86:1f:ea:b4:b7:83:3e:86:a3:09:12:a9:ce:9d:
         ca:67:fd:12:f6:bd:ec:91:4f:78:38:e1:f5:31:37:01:df:e9:
         07:02:f1:6e:63:c0:b5:46:9c:d4:ed:a7:cc:6a:68:9a:b1:d0:
         47:94:e7:17:e8:a7:42:43:ce:34:6e:63:40:10:3f:6f:e5:01:
         98:bd:22:64:7d:c1:cd:48:16:c0:d7:3b:60:a4:39:7f:64:91:
         69:23:cb:76:18:86:69:d4:12:fa:af:bc:49:36:4a:56:6c:ad:
         28:8a:b0:0d:bf:f9:8a:88:99:0a:27:df:a3:22:fd:ac:bb:20:
         97:7a:c5:fc:ea:59:34:14:4d:34:b2:70:fb:b0:38:06:ae:81:
         c9:2a:09:f8:19:bd:ca:5b:4f:a9:b0:7c:fd:b6:5b:a4:fe:8d:
         cf:e7:67:42:ec:8d:7d:95:98:5f:52:79:62:03:94:54:d1:3c:
         42:c6:bf:e0:48:e8:84:ce:64:97:cf:45:e5:3b:6c:fb:39:bb:
         b2:e7:47:63:44:3e:26:24:1d:c5:1f:fb:4f:5f:57:f6:4c:26:
         e0:a7:b1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 13:48:11 2026 by rpki-client