Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
File:                     H7fzr2-da5fjcg7FSsv1iTrGk2g.mft (raw, json)
Hash identifier:          kq1jL1v9LuHd4TgpOmiaRI7i0D5gkKDlI9WEb5khen0=
Subject key identifier:   76:A0:E0:71:CA:34:37:96:7A:39:63:A0:33:9B:D3:D0:B3:ED:FC:FE
Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68
Certificate issuer:       /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368
Certificate serial:       0241
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
Manifest number:          023B
Signing time:             Fri 17 Apr 2026 02:17:11 +0000
Manifest this update:     Fri 17 Apr 2026 02:17:10 +0000
Manifest next update:     Fri 24 Apr 2026 02:17:10 +0000
Files and hashes:         1: H7fzr2-da5fjcg7FSsv1iTrGk2g.crl (hash: 6tLKc0a0mhyaawM2PCKesQQCE3vP+2oObgXL8BBtvRg=)
                          2: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (hash: ojeQEJwfkmkjsjTjJi7JxC/rYMjRAxyFan+n2ZkXfIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl
                          rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117DD2, serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368
        Validity
            Not Before: Apr 17 02:17:10 2026 GMT
            Not After : Apr 24 02:17:10 2026 GMT
        Subject: CN=69e19827-86cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:09:39:7d:72:89:55:93:3f:3b:43:3a:30:86:
                    81:03:1f:b7:ec:df:67:86:e7:e1:72:09:26:45:67:
                    ab:14:6a:56:91:34:28:31:62:23:c9:95:27:0f:b3:
                    c1:e0:4f:28:27:18:f6:8f:cd:d5:48:c9:2c:f9:38:
                    46:f0:fa:de:71:67:5d:16:bf:02:ea:bf:de:d6:64:
                    4b:85:1f:08:d6:29:5c:46:f2:b7:62:72:4d:da:a2:
                    a7:4b:ce:ea:2f:22:f3:73:d0:48:26:2d:cc:f0:d4:
                    cf:8a:34:81:67:8b:90:61:74:2f:e8:b0:44:63:f5:
                    27:e2:6b:8c:9e:e9:a4:ef:c0:ab:3c:7e:50:27:7d:
                    5d:35:8f:a6:a6:1e:85:e7:d0:14:ca:a7:b7:27:3a:
                    cc:34:16:a6:04:13:b9:02:15:d0:70:05:79:dd:65:
                    b9:e1:a1:1b:35:bc:74:b5:bb:69:9b:07:87:66:cd:
                    24:59:ff:b4:de:d6:4d:d2:50:dd:5f:2e:06:17:a7:
                    7f:e3:cc:05:f9:28:72:ef:5a:47:7f:29:40:c2:43:
                    49:08:27:b1:97:f2:20:f4:e5:05:87:c8:e6:10:b8:
                    e5:ea:43:96:67:2e:d4:68:08:0c:69:12:56:fc:87:
                    d3:1f:df:95:56:96:f4:c9:96:8a:ec:12:5c:0e:25:
                    5e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A0:E0:71:CA:34:37:96:7A:39:63:A0:33:9B:D3:D0:B3:ED:FC:FE
            X509v3 Authority Key Identifier:
                keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:9b:2b:f0:86:62:43:a8:f3:3f:63:21:fd:33:b1:5f:8b:08:
         28:3a:fb:f9:26:c8:c7:80:e9:81:98:c1:e2:f6:84:48:44:03:
         fd:ba:b3:4f:67:be:45:d0:b9:3c:65:c3:cb:fd:d2:21:e4:5e:
         fc:ba:4f:36:20:61:e4:2b:2b:a5:6f:13:23:7f:42:a6:19:79:
         89:8f:2f:a0:3a:19:51:ba:f0:9b:5b:14:14:f6:b3:aa:58:1b:
         d3:43:15:eb:90:26:97:81:9f:f2:76:f1:66:dd:1a:38:4b:78:
         11:87:06:9b:41:86:fd:df:58:c7:c0:96:67:64:08:26:98:43:
         c5:cd:fb:07:f5:53:99:b6:8d:84:da:59:4b:4c:5d:78:9b:9e:
         b9:80:5f:39:89:1a:25:a5:3c:8c:71:44:9c:59:95:82:34:b8:
         ec:e9:37:52:17:a8:40:7a:24:d2:02:98:f7:47:c4:ff:1c:02:
         6c:9b:9f:5b:b6:9c:37:20:0c:d4:16:da:af:bf:b5:6b:f3:20:
         d7:96:78:f7:d4:3d:f5:08:00:d2:6b:25:c6:1a:27:c1:22:14:
         6a:d8:d2:d9:a7:7f:81:97:6c:1a:f2:76:0a:8d:50:e3:07:fd:
         11:de:55:28:78:a7:e9:4e:7c:b9:79:c1:b9:33:3e:a9:09:ea:
         d8:f3:f2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:01 2026 by rpki-client