Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
File:                     asd5dN_kUIBzXNuQZqfiRpYEkrc.mft (raw, json)
Hash identifier:          gECkxWHTrT9I8GKGQCSyJAZXQcdAA13NKa9FXBBAlsg=
Subject key identifier:   CD:CB:EF:2A:1F:DB:00:4C:A3:E0:7E:2B:DD:F1:3C:15:FB:8C:6C:11
Authority key identifier: 6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7
Certificate issuer:       /CN=A91F31A7/serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7
Certificate serial:       10F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
Manifest number:          10EC
Signing time:             Sat 04 Apr 2026 17:10:47 +0000
Manifest this update:     Sat 04 Apr 2026 17:10:46 +0000
Manifest next update:     Sat 11 Apr 2026 17:10:46 +0000
Files and hashes:         1: asd5dN_kUIBzXNuQZqfiRpYEkrc.crl (hash: Hs64tcbNExxq6IomiY/5FT7JE9VkiRriR3LFylTaj50=)
                          2: DDEC8C2A39AA11E9B0166376C4F9AE02.roa (hash: 8aCMHKssPdN319TEwBaL3NJec+4ceW9OeNk+s6B7p4M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl
                          rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4341 (0x10f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F31A7, serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7
        Validity
            Not Before: Apr  4 17:10:46 2026 GMT
            Not After : Apr 11 17:10:46 2026 GMT
        Subject: CN=69d14617-00ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fa:27:31:ef:16:1d:e5:7d:df:bd:09:31:a1:
                    8e:39:67:36:fd:52:0a:31:e2:16:9b:fc:1b:bc:ae:
                    1c:ed:3b:a6:e7:e1:1b:52:f9:d1:5c:4e:c9:4f:9a:
                    a1:50:5d:af:9c:5d:27:90:39:2e:c5:b4:cc:97:a5:
                    52:0e:3b:bb:c5:2b:3d:66:4f:a7:34:02:3b:b2:4e:
                    90:63:d2:78:86:f0:fd:25:44:13:79:94:19:13:d7:
                    9d:09:5b:ff:c9:f1:29:79:b6:4c:7b:be:c6:0e:69:
                    05:3e:81:c7:78:ad:d9:43:2e:80:87:97:b8:a1:2b:
                    1c:62:ba:67:26:86:90:c7:bf:d7:09:91:09:5d:2a:
                    34:8c:8c:8c:89:dc:27:fb:b1:1c:13:90:bd:de:7e:
                    e8:00:e7:2b:5b:b6:6a:1b:97:38:b2:9b:05:bb:1c:
                    10:d9:e1:19:c3:98:c9:26:e1:6b:8e:e5:c5:6d:62:
                    02:12:0b:34:91:82:3b:81:7c:15:63:a2:81:9d:25:
                    9c:5f:19:47:39:64:e3:b5:07:64:2f:8f:de:15:e5:
                    02:7b:c3:a2:24:82:15:63:ca:ce:aa:3a:02:13:c9:
                    d0:26:a7:7b:2b:92:57:e4:7c:05:97:24:cb:88:5f:
                    2d:41:71:0c:37:fa:e2:76:f6:34:ee:f9:18:9a:7a:
                    0c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CB:EF:2A:1F:DB:00:4C:A3:E0:7E:2B:DD:F1:3C:15:FB:8C:6C:11
            X509v3 Authority Key Identifier:
                keyid:6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:bc:72:b4:57:9e:cb:f6:02:50:1e:25:4b:e5:af:ff:32:73:
         a2:3e:c9:5a:2b:88:a7:ae:6a:f9:23:69:f7:66:5a:a5:f7:fe:
         8c:08:a8:71:0c:9e:eb:46:64:03:e5:3c:69:0f:3e:9f:ee:bf:
         d8:0e:ad:ae:99:2e:c9:12:da:0e:c5:79:0e:b7:e7:bd:f8:70:
         ae:7c:bd:f0:33:4e:bd:e1:79:03:7c:5f:ba:c9:9a:95:eb:d8:
         63:a6:41:14:81:70:3e:78:8f:4e:e3:1b:2b:a2:f8:7d:5e:73:
         01:b2:8d:1e:af:63:7e:16:cf:41:45:23:25:5a:d1:33:fd:f0:
         66:f5:c9:15:2f:1e:f0:59:34:ca:db:fd:fa:e4:1b:4d:2a:cd:
         ce:d8:0c:e0:67:07:0c:c8:3a:e9:60:14:94:59:6b:ec:20:42:
         f8:25:e6:fc:e2:18:5d:e9:84:95:a2:ba:45:24:3a:c2:e9:a3:
         26:76:0d:d9:33:db:25:32:56:f1:aa:b6:ff:f3:dd:86:30:4a:
         91:90:ea:48:7c:fd:2d:a2:46:0b:19:ba:4b:2a:6d:81:45:05:
         c5:d7:d9:5d:1f:e8:82:d5:9e:ad:30:f9:26:6e:8e:d6:52:81:
         ef:04:54:02:c1:d9:9c:3a:18:67:ff:d1:12:6e:c5:a6:3f:40:
         14:bd:36:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:17 2026 by rpki-client