Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
File:                     Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft (raw, json)
Hash identifier:          8Tb1sVFI71b3NvlLX/4Iifj118U6I6a1/Sq9TMw4uHY=
Subject key identifier:   E9:72:81:93:8C:C9:41:05:E9:91:60:11:DB:20:6F:52:1E:1B:DF:38
Authority key identifier: 49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
Certificate issuer:       /CN=A91FDE13/serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
Manifest number:          C2
Signing time:             Mon 27 Apr 2026 06:53:24 +0000
Manifest this update:     Mon 27 Apr 2026 06:53:23 +0000
Manifest next update:     Mon 04 May 2026 06:53:23 +0000
Files and hashes:         1: Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl (hash: N1JEJepP8lDXtVnZF+RFwBmLD6HIOrUbTo1RuKmRYpM=)
                          2: 189D8FCE565D11F0B381417EC4F9AE02.roa (hash: V0jiGWcisCYeYKJhJdPZNpTEwuLUAeBQE/p7M60AP1w=)
                          3: 5B45D97C2A5611F0B7C8BB20C4F9AE02.roa (hash: ZAcnv2B2glJNz/amDzlP0oQS8f8IykGzbvOZt8DAQOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl
                          rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 06:53:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDE13, serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
        Validity
            Not Before: Apr 27 06:53:23 2026 GMT
            Not After : May  4 06:53:23 2026 GMT
        Subject: CN=69ef07e4-9e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a4:37:fb:e7:c8:df:a8:f3:83:29:48:81:22:
                    93:35:6b:25:80:04:67:49:21:e7:1a:40:cf:1d:8b:
                    5b:30:db:a0:77:02:32:31:a2:dd:af:c3:18:b0:91:
                    e7:41:44:08:f8:70:a9:55:3b:d7:41:ff:3d:54:c8:
                    63:b9:c9:48:25:c9:9c:a4:cf:73:1b:e6:b9:c9:99:
                    db:c1:d3:c6:b2:60:0e:a2:60:d5:10:40:82:2d:35:
                    5e:6a:c4:e8:e5:f5:1e:5f:2b:45:33:40:59:0f:34:
                    be:f0:fe:fa:65:8f:39:16:41:ca:f8:cf:46:a3:aa:
                    2e:ed:67:d0:5d:56:16:b0:76:14:e9:0a:74:12:0b:
                    99:bd:b5:10:c0:7d:52:00:36:e2:8a:cc:45:8c:2a:
                    37:60:d5:1a:96:45:28:4f:8f:f4:1e:a0:ba:f9:27:
                    7e:7a:1a:ea:d7:89:7a:f1:80:6f:1f:76:46:4c:fc:
                    64:62:99:10:3f:cf:e2:cf:2f:18:f6:3d:02:af:22:
                    96:56:14:10:47:39:d4:ff:45:82:b3:f6:a7:27:17:
                    5f:2b:d1:51:26:a5:48:23:eb:26:b4:d5:cd:eb:42:
                    55:37:fc:33:6e:40:4b:67:ec:43:61:b1:38:dd:bc:
                    b5:23:d9:e7:fc:7f:fc:3c:b5:20:14:7c:e9:09:8f:
                    c1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:72:81:93:8C:C9:41:05:E9:91:60:11:DB:20:6F:52:1E:1B:DF:38
            X509v3 Authority Key Identifier:
                keyid:49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:67:2f:f9:b4:5d:df:92:42:d5:5b:6c:7e:82:5c:78:60:94:
         9a:73:d9:b5:a6:28:79:48:24:cb:28:9a:33:96:ee:86:38:58:
         df:e0:1f:ad:3a:a7:b3:0b:7e:22:01:ee:46:ef:20:8e:f1:5f:
         4e:36:e2:1d:e2:1d:29:8f:f0:5f:34:e1:e5:86:bd:6d:c5:a4:
         da:51:98:19:8e:98:48:43:be:7a:3b:35:d2:84:43:44:d9:31:
         25:e1:7a:7a:47:0f:e5:f0:f9:75:79:2b:67:8d:bf:24:22:fb:
         87:ca:38:9b:1e:16:67:db:15:e3:ff:0e:e5:a1:6e:d7:80:4e:
         6f:bd:5e:1c:b4:f5:aa:2a:ad:e2:e2:5a:9b:17:7a:c2:fc:b2:
         c0:66:2a:6d:15:50:5d:0a:d8:a6:32:33:e7:b8:b3:c9:40:3f:
         1c:1c:26:83:e1:d9:00:78:0c:f0:df:bf:d5:3a:2d:5f:8a:39:
         74:d7:32:66:67:85:02:db:6d:a1:d5:a5:c6:98:8b:82:32:bf:
         6c:a9:aa:57:f7:d3:db:3d:75:40:2e:25:4d:d5:b4:28:f1:0e:
         f2:f3:a6:74:d2:66:4b:f4:0d:b3:ac:1a:05:95:3c:de:f3:50:
         9d:70:ae:11:91:99:b0:ae:c9:0f:eb:c2:31:30:66:5e:cd:51:
         25:62:36:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:02:00 2026 by rpki-client