Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
File:                     4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft (raw, json)
Hash identifier:          3Nw6VKXSg91/MM8DLecXi/3eB3RRDxzIhU/S9zxdhqo=
Subject key identifier:   4C:8E:94:DC:91:C2:5D:49:D5:27:7C:72:3C:ED:BF:C0:8A:3F:27:00
Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB
Certificate issuer:       /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB
Certificate serial:       B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
Manifest number:          AB
Signing time:             Fri 17 Apr 2026 06:56:32 +0000
Manifest this update:     Fri 17 Apr 2026 06:56:32 +0000
Manifest next update:     Fri 24 Apr 2026 06:56:32 +0000
Files and hashes:         1: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl (hash: QuMT/nx83IH7rj/13UP55T5S5bvk8NB2fG9HbeZxRJU=)
                          2: F88154843B9D11F091B39D67C4F9AE02.roa (hash: WttgIko4+9s/vHPmH0/bx3r2YOermo25w+xjC3iigHs=)
                          3: 7D7F13983B9D11F08338F965C4F9AE02.roa (hash: aa37TZjw6HNm2WFQiAgnFDeT1PF+5A+xhsToPCU7ZoQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl
                          rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB
        Validity
            Not Before: Apr 17 06:56:32 2026 GMT
            Not After : Apr 24 06:56:32 2026 GMT
        Subject: CN=69e1d9a0-8284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:62:da:0e:3a:6f:98:25:17:cc:33:d4:35:c4:
                    4b:6e:17:fa:e7:66:7e:02:13:1b:cb:87:16:d8:3f:
                    77:ea:5e:ec:27:af:aa:90:28:94:7b:08:d3:7a:7c:
                    72:49:d3:0b:8e:d4:cf:55:0f:43:50:d8:4f:d2:a7:
                    13:a8:57:8f:73:34:27:fc:65:c7:1f:b2:49:7d:c6:
                    9c:22:27:7f:39:93:c4:2e:66:ba:5f:f8:b0:18:6d:
                    21:8a:c4:aa:15:60:60:b5:79:b3:f8:86:35:70:36:
                    b3:3b:c2:b1:10:fb:1c:cb:1b:93:8b:0a:f7:7f:8f:
                    1e:c4:06:02:66:7d:96:4d:aa:6a:74:8e:ef:22:0e:
                    7a:50:0c:7a:e4:92:a3:17:3f:d9:1f:68:81:ec:85:
                    ef:73:66:9c:72:fd:c3:7c:0a:26:54:42:18:e4:94:
                    f3:7c:dc:52:cf:77:f0:2d:cb:e9:10:ba:44:23:d4:
                    1e:cc:ac:ce:f8:96:a8:e4:8e:6b:78:0d:9c:24:6f:
                    2d:dc:7b:a2:5e:97:b0:9d:8b:c6:af:3d:d1:a8:69:
                    4d:6b:40:26:6a:37:7c:99:39:8e:19:15:02:b5:5b:
                    e9:5f:56:ca:57:8a:5f:e0:4e:ba:05:2e:6f:ad:6f:
                    1b:ef:7f:b1:c5:e5:80:22:df:dc:5c:c2:26:53:4a:
                    b4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8E:94:DC:91:C2:5D:49:D5:27:7C:72:3C:ED:BF:C0:8A:3F:27:00
            X509v3 Authority Key Identifier:
                keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b8:2e:35:f3:5f:ed:59:0a:9a:3e:f7:03:d2:db:28:65:a0:
         53:80:09:f2:11:d5:ef:de:1f:00:b3:01:b4:dc:7a:d5:e3:b6:
         74:41:ab:a2:73:40:78:02:e7:b0:48:c8:58:75:bf:89:9c:72:
         53:e4:c8:6b:31:4d:d1:81:57:5c:d4:92:2a:58:aa:3e:b7:db:
         51:9f:7b:5e:03:11:25:cf:9f:3a:1f:65:48:c4:29:d9:7b:cb:
         89:64:b9:1f:0a:68:31:6f:aa:c4:dc:2f:be:a0:e8:fb:42:33:
         7f:2d:e6:6f:40:e2:db:d2:58:69:0a:98:3c:63:7b:af:3e:fa:
         0d:39:7a:e7:52:06:59:c3:27:09:4d:99:67:b0:33:21:45:c3:
         ca:e1:d6:05:2f:9e:f1:a4:02:90:f5:62:4b:c6:53:66:8f:90:
         6f:b7:36:f9:4b:3f:ac:aa:90:25:88:11:dc:b5:d3:5a:09:2d:
         cb:98:b5:40:21:2f:5e:ca:de:20:2a:95:e7:ca:09:17:e3:9c:
         24:bb:f7:a5:c0:49:9d:6c:53:85:7e:b6:8b:00:f2:e1:00:aa:
         06:4e:97:1b:71:8c:fb:3b:a2:d3:53:d2:ae:79:70:db:fc:ae:
         97:4d:91:4f:6b:ec:26:e1:ba:48:90:01:b7:77:70:b4:42:bf:
         a7:bc:84:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:05:40 2026 by rpki-client