Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
File:                     EdT02sf7qLXBIiQwBTm9xhVEXeU.mft (raw, json)
Hash identifier:          hOw1VWfRKcGfHthNoTWTGZA4RF/z1iEUyKey+iYcSnI=
Subject key identifier:   00:BC:99:8C:44:36:D4:77:77:32:36:D2:F8:CE:A7:88:61:AD:9C:FD
Authority key identifier: 11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5
Certificate issuer:       /CN=A91F79A2/serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5
Certificate serial:       0160
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
Manifest number:          015C
Signing time:             Sun 05 Apr 2026 04:27:47 +0000
Manifest this update:     Sun 05 Apr 2026 04:27:47 +0000
Manifest next update:     Sun 12 Apr 2026 04:27:47 +0000
Files and hashes:         1: EdT02sf7qLXBIiQwBTm9xhVEXeU.crl (hash: r+651EkcAsnubUdwNfaDIlyzTTEh3XQOOStyidhIyn0=)
                          2: 6B10AF52379A11F0B3AC7740C4F9AE02.roa (hash: s7GLGtp6WWZ+8tGGQw/IP17opBzX+2RCOigurVObf4c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl
                          rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F79A2, serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5
        Validity
            Not Before: Apr  5 04:27:47 2026 GMT
            Not After : Apr 12 04:27:47 2026 GMT
        Subject: CN=69d1e4c3-e481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bc:3a:5c:b7:f4:9c:d2:32:a3:4a:cc:e5:cc:
                    c6:13:4b:90:8f:b6:c2:4a:29:7e:cc:b2:63:48:32:
                    5e:92:49:77:f7:d8:60:61:80:07:19:fa:3a:e0:cd:
                    5e:99:25:5d:4a:65:ce:3d:c7:77:b4:91:66:f3:ba:
                    a7:27:c4:e2:2e:ce:9c:01:16:36:d0:b5:37:5b:fc:
                    64:fe:5f:1c:d3:f7:7f:b0:db:51:74:88:5a:46:16:
                    34:43:eb:0f:fd:a1:93:cb:e7:a1:d0:bf:e6:8e:c1:
                    91:f9:3b:ed:98:6f:5b:21:8b:14:1e:0e:3d:46:b4:
                    a9:fa:38:16:cd:76:d9:a3:1c:58:c8:16:c3:21:23:
                    7e:df:4a:15:97:7c:73:fa:48:bc:c1:d6:30:b2:d3:
                    f6:69:bd:a8:db:41:46:54:31:f1:8c:ee:ce:16:94:
                    1f:f1:55:6b:93:cd:6b:0e:9e:0f:bd:4d:31:b3:02:
                    e1:c3:1a:5e:53:a3:18:9e:99:5b:5d:a4:39:a8:eb:
                    01:9b:8d:c8:ff:84:02:78:15:7f:d4:f3:f9:8c:7b:
                    54:ed:2e:8c:81:54:54:52:28:36:44:73:bc:ca:3f:
                    6d:b5:60:f9:ea:26:3a:9e:5c:1f:97:a3:29:d1:70:
                    29:79:49:cc:bf:40:28:57:48:2b:e5:94:4a:4f:58:
                    f7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BC:99:8C:44:36:D4:77:77:32:36:D2:F8:CE:A7:88:61:AD:9C:FD
            X509v3 Authority Key Identifier:
                keyid:11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:dc:32:b7:29:a3:52:11:0f:4a:97:00:da:5b:d4:d5:a2:19:
         a0:33:fe:21:96:88:a7:ba:ae:e8:3d:9a:b0:22:8a:b5:3f:c9:
         48:dc:43:cd:c4:48:88:19:e3:00:11:19:35:4d:e5:37:97:5d:
         69:1c:f8:d3:0c:e7:53:c2:41:4f:86:34:59:fd:31:b0:9e:ca:
         d6:b4:17:4a:5d:0e:0d:93:cf:99:11:7b:f9:ed:f4:a8:be:3a:
         44:6c:5f:57:0e:97:9f:71:6c:dd:e4:d7:e9:b1:fd:af:8f:06:
         b7:31:ff:50:15:d6:f5:d5:5b:95:10:dd:96:74:e1:7a:f8:21:
         75:7c:80:9d:c2:78:8b:9e:3b:af:ef:ce:02:af:a1:b0:f2:2d:
         53:60:c2:b3:31:41:e8:f2:af:b2:c8:d7:8f:a3:69:63:75:c1:
         28:61:87:28:d3:98:90:82:07:28:13:71:bb:ba:af:cd:f4:23:
         32:8e:ff:21:6f:a4:f5:97:1e:40:41:de:26:e7:16:31:ef:61:
         e2:58:5d:cf:57:6b:b9:c4:51:9e:17:f4:8d:d1:b5:ff:7e:e7:
         af:4a:5f:51:12:cf:87:20:c9:69:40:b2:df:d5:32:08:c0:17:
         a2:de:e5:66:c2:99:74:7c:5a:f0:be:0b:e0:a2:c4:e9:b8:df:
         d3:9e:d8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:53 2026 by rpki-client