Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
File:                     -6D4tMTQWqlqqvV6OUQDcbyNBDc.mft (raw, json)
Hash identifier:          lsHoSjVYaX2xmWEhQ0Z9SJneXC0XKiUi651Tv2fiC6c=
Subject key identifier:   83:43:2D:2E:EC:B4:6A:BB:0C:B3:C6:7D:B6:A9:41:A0:01:42:15:4B
Authority key identifier: FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37
Certificate issuer:       /CN=A91F9ECA/serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437
Certificate serial:       05DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
Manifest number:          05D5
Signing time:             Sat 04 Apr 2026 22:47:29 +0000
Manifest this update:     Sat 04 Apr 2026 22:47:28 +0000
Manifest next update:     Sat 11 Apr 2026 22:47:28 +0000
Files and hashes:         1: -6D4tMTQWqlqqvV6OUQDcbyNBDc.crl (hash: xjUD2rxjYrWrQNPYefpojeIn0W9Yfy6OhnOnFMKz5IA=)
                          2: 9F2BA98AF90611EBB8E0C27FC4F9AE02.roa (hash: 0tDqDY+24oh3Yf+5edA9cxJIl1tQumHOlR9sg5V4+cU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl
                          rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:47:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1499 (0x5db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9ECA, serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437
        Validity
            Not Before: Apr  4 22:47:28 2026 GMT
            Not After : Apr 11 22:47:28 2026 GMT
        Subject: CN=69d19501-82de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:85:c0:22:84:4b:a1:38:0c:9e:ce:d5:4c:72:
                    0f:95:10:1b:d3:00:73:15:92:79:e4:3b:fd:59:c9:
                    45:4c:50:12:2a:c4:15:c1:ed:17:c2:1f:d4:95:d7:
                    a8:34:f5:54:6e:26:df:e2:78:39:01:d3:fa:20:e2:
                    f8:03:68:cb:48:cc:33:0b:73:27:b7:0f:54:80:99:
                    66:88:7d:fb:54:cc:28:02:bd:b7:6e:15:f7:ce:49:
                    ab:d9:67:e4:07:c9:37:e4:9f:53:d5:5d:a5:9e:4b:
                    34:95:1b:f7:bc:ff:e2:70:20:51:9b:c3:70:67:33:
                    bc:44:e3:64:7b:e0:d1:37:0c:fa:ac:f3:0d:fc:69:
                    23:bd:b1:c5:39:c6:6b:b6:80:49:56:88:3a:a5:9c:
                    f8:a6:a2:b8:12:e7:90:32:ae:4d:cd:14:6e:2d:2c:
                    d6:2f:24:f7:4b:83:21:5b:d5:fb:6a:7a:1f:56:58:
                    69:6e:74:ff:0c:5a:ef:d2:df:9e:b1:6e:04:be:46:
                    75:24:44:50:f3:20:1f:95:8b:a4:18:63:9d:ca:d6:
                    ac:7a:61:69:a9:51:f0:d1:c6:c9:4e:09:8d:77:61:
                    b2:97:26:c4:34:c5:ad:12:94:38:58:55:8d:01:66:
                    19:c7:a6:6f:9b:06:29:55:23:23:f6:03:3c:96:55:
                    0e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:43:2D:2E:EC:B4:6A:BB:0C:B3:C6:7D:B6:A9:41:A0:01:42:15:4B
            X509v3 Authority Key Identifier:
                keyid:FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:71:01:38:18:eb:41:15:c8:bf:72:63:78:74:8f:0d:c8:8d:
         e6:8e:42:e8:c4:2b:e2:d8:da:be:d8:68:c7:0b:96:11:86:e5:
         a8:24:7e:81:92:35:2b:3d:2d:a3:8d:35:16:a0:9e:d7:07:61:
         f9:0b:2a:08:44:2a:69:90:11:d7:09:ae:27:74:8f:49:a6:d7:
         43:02:09:17:d0:72:96:ea:96:64:e1:54:b1:18:d6:46:85:d7:
         fd:f5:63:9d:4f:11:34:75:9a:e0:b2:8d:03:ec:33:c2:d7:9f:
         dc:af:53:b4:ef:84:b9:c7:ab:b5:a2:48:9f:c4:6e:78:db:09:
         cc:3f:21:ce:cc:f2:c5:08:90:ff:0b:75:6f:9c:5f:59:f5:23:
         2e:b2:df:05:19:95:d0:c8:e2:ff:1a:dd:2a:02:e5:4d:e4:62:
         0f:23:46:74:03:4f:29:71:f9:4d:72:12:d5:00:42:67:78:86:
         f8:41:4a:2e:02:1c:41:e6:13:8d:5e:87:dc:28:81:b9:13:7f:
         df:e2:e0:5f:13:9e:e1:87:c4:0b:c5:42:4c:9b:97:e8:5a:35:
         3d:03:90:ba:1a:f4:a6:6d:ed:7e:4d:35:ed:fa:51:93:e3:e7:
         ff:2f:48:c8:66:4a:d3:80:69:2e:4c:63:73:22:c9:3f:fd:32:
         9e:16:cf:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:11:00 2026 by rpki-client