Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft
File:                     h7LA6ClUHS71JmOF6zlGuNUpBgg.mft (raw, json)
Hash identifier:          bWadcjzD2QvN5sigGp21GBPXwUk/2LRMLGpOYThfbYw=
Subject key identifier:   E7:32:59:7D:ED:D9:40:6A:61:E3:95:40:FF:C0:AF:12:9A:2C:5B:A9
Authority key identifier: 87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08
Certificate issuer:       /CN=A911B5B0/serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608
Certificate serial:       0903
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft
Manifest number:          08D6
Signing time:             Thu 16 Apr 2026 20:23:20 +0000
Manifest this update:     Thu 16 Apr 2026 20:23:19 +0000
Manifest next update:     Thu 23 Apr 2026 20:23:19 +0000
Files and hashes:         1: h7LA6ClUHS71JmOF6zlGuNUpBgg.crl (hash: pXrN3zq/Hp1q0qxzBKzYqWDTr5i4sqTHpCWqDa4MDfY=)
                          2: 3619A9DA67B411F097A2770AC4F9AE02.roa (hash: 7njbVYsd3V87sSM3WNmywbGIw28FJJd2oN7m9l4XA/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl
                          rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:23:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2307 (0x903)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5B0, serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608
        Validity
            Not Before: Apr 16 20:23:19 2026 GMT
            Not After : Apr 23 20:23:19 2026 GMT
        Subject: CN=69e14538-7459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:c8:5b:b9:2a:fb:a7:15:9e:f5:7d:67:2c:28:
                    4b:b9:59:71:2c:23:ed:ef:f2:a5:ed:91:b1:3b:7b:
                    4d:b2:8b:77:13:77:ba:9c:43:df:29:02:b4:35:df:
                    51:d3:91:e7:5d:2b:39:20:22:50:43:e7:00:92:f0:
                    26:d8:14:20:7e:6a:3e:04:76:85:78:24:59:b4:83:
                    65:8a:49:86:c3:c1:ec:f4:4f:f5:76:3e:ba:2f:a1:
                    47:7f:5a:93:80:fd:46:6b:01:ae:1d:c7:d6:bd:52:
                    b3:b6:7c:97:75:f0:49:91:38:39:48:10:81:83:73:
                    05:a8:ef:1a:e3:c8:f8:44:c2:26:7a:6f:0f:c6:c9:
                    0a:f8:65:e2:f8:b5:55:e5:d0:7d:1b:2d:46:99:bc:
                    fc:c7:86:a5:ef:5c:5c:f6:0b:43:4e:25:6d:fa:ea:
                    7d:26:c0:08:7d:83:90:b8:c6:01:56:ae:b7:b7:fb:
                    40:70:ef:72:ff:82:1e:e4:02:83:05:e2:3a:c5:e2:
                    11:1b:6d:28:3e:30:59:79:be:93:4d:ee:45:fd:3d:
                    27:a3:1b:9e:a1:b2:0b:a9:f6:44:0a:3d:f3:33:d1:
                    5c:bf:ac:0b:af:f5:e0:cf:ee:59:e7:08:f9:ad:39:
                    44:fa:db:48:68:5b:ac:53:be:23:9c:32:a1:59:a2:
                    a3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:32:59:7D:ED:D9:40:6A:61:E3:95:40:FF:C0:AF:12:9A:2C:5B:A9
            X509v3 Authority Key Identifier:
                keyid:87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:38:5f:52:61:f4:87:b4:be:10:39:fc:e8:c0:60:38:b4:33:
         cd:bc:9b:14:5a:0d:0a:be:1c:1b:49:d0:16:86:d2:5b:44:5f:
         7f:b0:5d:0b:cd:26:6d:01:ca:ac:d0:a9:99:87:fc:76:61:93:
         8b:be:c7:83:8b:75:d9:5e:f6:02:4f:c2:b2:3c:dc:a6:f1:11:
         ec:d0:17:24:1f:1b:3b:c6:9c:19:4c:a0:c7:45:10:d9:e9:7b:
         a7:62:c0:99:0c:18:b0:b4:a4:c3:5b:04:01:d7:fb:1a:ba:78:
         b9:54:af:02:13:6b:09:6a:be:ef:2f:2e:80:22:06:bf:df:cb:
         10:ec:5a:71:bb:90:f1:40:aa:76:9e:b3:a6:1e:d3:6b:d5:e8:
         a7:52:3c:32:5f:84:b8:19:cb:fb:2c:7b:58:62:e6:6e:cb:67:
         42:7b:b0:2c:87:46:26:10:27:1d:2c:15:31:94:4b:ad:28:e7:
         62:5f:e0:79:c1:49:fc:8e:cb:25:55:58:b5:80:55:e1:b4:97:
         30:1a:a3:1f:33:c0:3f:62:39:18:ee:f7:fc:1c:fc:57:1f:ae:
         4b:4d:a4:78:30:6d:5c:6d:03:9d:6e:13:88:a2:9f:76:97:4c:
         e1:d7:99:f0:30:e4:4c:e5:48:68:29:5f:4a:d0:2a:1b:86:29:
         52:54:fb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:52:01 2026 by rpki-client