Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
File:                     aq89m8Pfo6ElCCll2P8zuBKPKR8.mft (raw, json)
Hash identifier:          bngem5M22Y/Btf6BIGo4QrDGlpp1VfOREvJ6YiVaEVg=
Subject key identifier:   7C:E1:64:2C:1D:43:70:D3:28:0B:67:82:BB:45:13:A3:39:98:3A:BA
Authority key identifier: 6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F
Certificate issuer:       /CN=A91476E2/serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F
Certificate serial:       0103
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
Manifest number:          F7
Signing time:             Wed 15 Apr 2026 05:54:01 +0000
Manifest this update:     Wed 15 Apr 2026 05:54:00 +0000
Manifest next update:     Wed 22 Apr 2026 05:54:00 +0000
Files and hashes:         1: aq89m8Pfo6ElCCll2P8zuBKPKR8.crl (hash: /ctU/Qg3Qxboaz9TobEvR1bPzJ82sDP/K1C/QdjeJ5o=)
                          2: 79E40530CB5A11EFA1C64B62C4F9AE02.roa (hash: HG74SSnFpVc9cW3sd7L9piB9ZAlq596CN6u14507KWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl
                          rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 05:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91476E2, serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F
        Validity
            Not Before: Apr 15 05:54:00 2026 GMT
            Not After : Apr 22 05:54:00 2026 GMT
        Subject: CN=69df27f9-9fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:3c:63:ae:42:b2:81:30:75:8b:9a:2f:23:
                    65:51:25:4b:c7:97:56:8c:b7:cd:b3:51:d7:d8:d5:
                    fc:32:f5:19:08:cf:3f:18:6c:53:31:d3:a8:68:73:
                    14:9a:84:2a:83:11:e8:af:a1:4c:20:c0:71:e0:8d:
                    18:e5:4f:33:63:c3:79:0c:22:3b:1d:b8:63:50:a0:
                    54:df:25:b8:c7:3a:6c:17:0f:96:f0:97:82:c9:c4:
                    f7:15:94:b6:90:c1:1b:e6:a9:07:07:cb:ed:11:9b:
                    09:c0:66:ae:08:a2:77:12:07:dc:9b:7d:23:9f:c0:
                    d5:6f:ca:41:5c:45:63:e9:c6:4f:14:08:b3:81:ae:
                    75:12:c4:9a:42:5c:3f:f3:be:51:10:f4:81:b8:7e:
                    0d:91:8b:1f:43:50:7e:cd:6f:f8:66:b5:ea:23:d6:
                    8c:a6:99:09:12:38:69:f4:69:67:bd:2b:17:c2:01:
                    77:b3:d9:46:7a:ff:1d:d7:14:08:02:93:c0:12:38:
                    2e:57:5b:5f:63:ac:fc:73:8c:96:be:42:87:09:91:
                    52:37:0e:d5:2d:f4:62:0e:8e:f3:2a:0d:35:30:48:
                    83:f1:9a:fa:01:7d:f2:e0:20:21:72:f3:33:c2:9a:
                    38:5e:59:e0:3b:a7:9c:23:65:bb:ac:65:72:c7:01:
                    fe:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E1:64:2C:1D:43:70:D3:28:0B:67:82:BB:45:13:A3:39:98:3A:BA
            X509v3 Authority Key Identifier:
                keyid:6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:33:17:2b:8e:6a:bf:78:fd:25:b2:2b:0b:d0:27:60:03:38:
         68:fa:48:b8:0d:0f:01:f2:30:7c:f0:2d:7c:b9:56:4b:e9:37:
         f0:0e:9a:a2:7d:ed:6f:c8:a9:1b:b7:02:d0:e3:48:10:2e:e8:
         ed:9f:96:f9:48:75:eb:f6:7d:ba:3c:80:d8:c3:56:7d:ff:cb:
         7c:8a:06:04:88:bd:f6:8e:e3:54:cf:4d:4a:8b:05:9c:7c:e4:
         4e:f6:fc:6d:d1:ef:0c:7b:1a:4b:02:9d:f8:f9:36:ca:fe:c7:
         d0:ff:b2:83:f8:af:a3:6b:79:76:eb:b7:be:73:57:5b:89:74:
         f7:83:b2:b1:22:a3:2f:ee:a3:30:f5:c2:c4:d6:82:3c:53:e1:
         69:3c:10:e7:73:c3:04:3d:61:4e:ea:37:22:8a:10:63:df:a7:
         bb:09:f2:4d:fa:20:87:87:4a:18:c7:f2:bc:8d:62:19:af:ea:
         33:a2:9f:0f:d6:a5:5e:91:f4:55:4b:1c:1f:61:18:f8:68:1b:
         3c:c1:0c:c4:52:da:10:73:aa:4b:38:81:01:3b:c8:0c:17:0e:
         74:b5:80:5c:99:1e:f9:dc:8a:5e:74:5b:a4:34:f3:bb:46:94:
         af:d7:e2:7a:79:ae:6f:8c:71:4b:35:7b:56:0b:38:f6:b1:b6:
         29:da:44:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:33:08 2026 by rpki-client