Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft
File:                     _7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft (raw, json)
Hash identifier:          cDBbQFPzJ+4cCVOK/X6LC7Af8B0UkJG2Lec6wpOaW/o=
Subject key identifier:   89:25:87:2E:1B:DC:5B:A1:A0:51:6E:06:31:40:E9:C9:6C:BC:5D:FE
Authority key identifier: FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF
Certificate issuer:       /CN=A91168FD/serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF
Certificate serial:       2214
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft
Manifest number:          2209
Signing time:             Thu 16 Apr 2026 15:50:51 +0000
Manifest this update:     Thu 16 Apr 2026 15:50:51 +0000
Manifest next update:     Thu 23 Apr 2026 15:50:51 +0000
Files and hashes:         1: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl (hash: bhLNPCLL0wyrrOBBqUn48EeJdSfVghdKQl3sNtiJpis=)
                          2: D07411B6661211ECBCD61A65C4F9AE02.roa (hash: rHC43FVwk8ATnBb6I6PL5ONQ1jxQI6Zs5uXakToizww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl
                          rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8724 (0x2214)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91168FD, serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF
        Validity
            Not Before: Apr 16 15:50:51 2026 GMT
            Not After : Apr 23 15:50:51 2026 GMT
        Subject: CN=69e1055b-0607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a1:cf:95:5f:7f:79:cb:ff:c8:fe:8e:6a:f4:
                    4a:5c:c6:d6:0d:53:8f:e3:a0:81:79:71:1b:53:23:
                    7c:50:07:f8:55:e0:6b:56:66:08:c0:41:ef:a8:0f:
                    1d:83:fb:b8:c3:8b:42:9f:77:2c:b8:23:e9:cf:f9:
                    5c:5c:fc:4a:c4:1c:f0:97:d4:d0:7b:f5:60:22:13:
                    7f:7f:33:54:d5:9f:c1:f7:f3:91:e7:61:6d:83:b0:
                    3f:f7:24:51:60:98:81:54:b1:57:db:b1:a7:24:be:
                    a8:17:8a:48:ad:88:6e:47:d0:14:f6:1b:f9:7b:58:
                    b8:5c:4f:08:da:95:ef:de:4d:ac:da:b1:6c:f2:16:
                    32:0a:fc:9c:86:19:69:08:97:09:5a:8a:fe:52:48:
                    66:26:1c:8b:08:33:20:7c:b1:7c:74:9a:e2:37:36:
                    98:33:4e:2a:db:54:52:be:c9:32:ba:d8:a9:78:1e:
                    01:72:c2:6e:5e:b2:02:d9:63:1b:90:1b:85:ca:84:
                    33:31:89:c1:3b:de:c6:b3:b5:c1:86:cb:44:63:76:
                    6c:3b:c8:c8:f7:e2:97:90:24:93:fb:ec:dd:46:28:
                    c4:7b:08:ea:5d:fc:84:fd:8f:09:58:df:8e:d3:b6:
                    7c:fa:6c:72:58:6a:3b:27:23:cd:da:8a:06:c5:1a:
                    a8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:25:87:2E:1B:DC:5B:A1:A0:51:6E:06:31:40:E9:C9:6C:BC:5D:FE
            X509v3 Authority Key Identifier:
                keyid:FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d6:2f:c6:02:15:60:35:47:80:1e:e9:a8:29:32:40:dd:be:
         36:d5:0b:4b:ee:51:37:6d:63:3e:7c:aa:91:fb:49:79:82:dc:
         85:00:13:e2:b4:dd:55:27:55:28:e5:6c:04:2e:a0:6d:41:69:
         17:d9:d2:41:68:34:29:cf:23:d1:18:c9:b0:f0:0f:43:25:55:
         4c:cd:2e:8a:b2:b2:95:4b:b5:1e:fb:83:43:98:fa:4e:2d:2b:
         a5:5d:fd:d8:66:db:a6:49:9e:46:de:91:02:f1:bf:93:62:b7:
         68:bd:1c:71:b1:9b:f6:bf:66:73:c8:92:4e:a0:8b:9d:fe:b0:
         90:32:21:c2:fa:bd:ff:c1:5c:89:81:41:8d:37:32:42:0b:61:
         5f:b8:45:1c:5e:23:4e:94:a1:45:9c:77:05:de:ab:af:f5:ed:
         26:b1:28:3f:e8:3c:cc:c5:41:6c:72:53:79:84:1b:d8:4f:f3:
         af:29:92:8f:fc:43:49:61:11:97:45:4e:e9:bc:2d:8d:0d:13:
         38:bf:71:e2:87:70:e0:e1:b3:8d:fa:d8:40:bb:bb:12:0e:4f:
         95:f0:c5:bf:4f:15:df:d5:df:c0:ef:c9:72:72:b3:ba:89:2f:
         b0:9c:7b:76:57:1f:28:0d:88:1e:02:e2:2b:0b:72:77:75:59:
         6b:10:82:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:52 2026 by rpki-client