Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
File:                     1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft (raw, json)
Hash identifier:          7fuJZjt9ZJiUn42M8SK06BLpWI/1jAa/7bxZQlf43UQ=
Subject key identifier:   FC:32:3B:64:9F:D0:D8:74:A1:BE:40:B0:E5:73:EA:C4:30:7D:93:E6
Authority key identifier: D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02
Certificate issuer:       /CN=A911F5B7/serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802
Certificate serial:       0237
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
Manifest number:          0D93
Signing time:             Thu 16 Apr 2026 19:05:49 +0000
Manifest this update:     Thu 16 Apr 2026 19:05:48 +0000
Manifest next update:     Thu 23 Apr 2026 19:05:48 +0000
Files and hashes:         1: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl (hash: 4ubJY1nhF43fc3N9YaVV09v0Cjut5ooYVJZmoeRzf20=)
                          2: 21980772889311F09BCDF026C4F9AE02.roa (hash: bV3VCAOcVbgdSch/nYusz9I52dpCIoj+s37MruAcxdM=)
                          3: 751E90665BAB11EFB9769A80C4F9AE02.roa (hash: sDV1SEKZeGbsy9FSAAPLIsIKO+rn3pYirqFdSzqZ8rU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl
                          rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F5B7, serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802
        Validity
            Not Before: Apr 16 19:05:48 2026 GMT
            Not After : Apr 23 19:05:48 2026 GMT
        Subject: CN=69e1330c-0012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d4:d7:35:08:f3:08:13:bb:70:fb:f0:be:a5:
                    e5:30:b1:79:c9:bc:2c:c5:89:d1:9e:0d:68:58:53:
                    60:7b:8b:72:92:6a:36:b8:f3:8f:92:0a:68:0a:35:
                    0b:37:5c:3c:4e:5f:97:e5:05:76:e6:6a:d6:86:40:
                    88:b7:81:78:dd:26:67:76:04:8b:2e:92:86:43:df:
                    70:63:62:5b:38:50:fe:20:4d:33:08:15:a6:ff:4f:
                    b9:13:1c:c2:c5:52:75:7f:e2:6d:70:05:35:00:39:
                    f8:ff:d4:29:22:94:23:f1:43:6a:a4:00:a3:8a:4f:
                    ed:51:ca:32:3e:6c:b0:7d:61:54:c9:a1:a7:88:97:
                    c5:66:96:10:f5:bf:ae:33:f7:e0:1c:c6:23:1b:ac:
                    31:cf:06:d0:a0:38:6a:33:af:86:ef:dc:00:f7:c0:
                    a2:c0:8f:c0:95:53:94:fa:10:14:81:19:8d:5d:ff:
                    9b:c6:2a:50:a3:30:29:76:cf:17:0c:31:b8:9a:b3:
                    c9:f1:04:7f:af:37:db:c2:b0:b7:54:30:a1:3a:f3:
                    5e:e9:cb:d3:98:a7:29:42:b7:9c:c6:f8:a6:2e:d7:
                    80:04:58:4c:d8:00:6f:59:f8:de:c0:e2:6f:2b:05:
                    a5:63:44:51:44:55:f8:2f:bb:34:a5:9d:c6:d1:27:
                    90:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:32:3B:64:9F:D0:D8:74:A1:BE:40:B0:E5:73:EA:C4:30:7D:93:E6
            X509v3 Authority Key Identifier:
                keyid:D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:12:d9:ef:2f:62:11:8a:eb:8a:2e:b4:3a:03:3b:a2:c4:7d:
         aa:af:2f:4f:14:40:90:8f:6b:93:08:68:3c:c4:e0:39:22:89:
         49:b4:c2:fe:ab:6c:e2:f4:3f:c9:b0:08:ed:23:c6:91:63:ab:
         af:4d:a7:97:dd:19:fb:d3:96:11:4e:a6:11:e0:57:0a:cd:1a:
         20:be:27:e2:33:46:51:5d:5a:2c:ec:90:eb:9c:8c:16:4f:8b:
         28:5d:ad:3a:7a:72:b1:5f:4f:8c:c2:4d:88:f0:39:83:bb:ae:
         23:63:a3:f0:cc:87:2f:85:81:a4:bc:96:61:f1:1e:44:a7:57:
         45:5c:08:3c:b6:27:59:8b:96:5e:32:e9:a6:32:58:a2:d8:3a:
         75:9d:96:af:27:e7:56:41:49:eb:72:75:85:bc:80:a3:9c:93:
         16:16:67:a2:b3:2c:f1:5b:f5:ac:2f:35:de:a6:bd:87:d2:cd:
         7f:75:07:44:f4:4f:e4:c2:4b:c7:35:30:17:b1:e9:ea:56:bb:
         8a:ec:e5:76:e8:8e:a1:79:19:ea:74:5d:a0:62:a2:7a:c2:9f:
         9e:fc:f4:0c:24:25:f6:4a:38:c8:d5:14:a0:d2:0f:b9:61:21:
         d2:90:92:de:e3:6a:4a:cd:35:16:6c:7d:93:28:3c:44:83:22:
         54:41:a8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:12 2026 by rpki-client