Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
File:                     MZsxRPBqjysw1BIHH-EhB3T-huc.mft (raw, json)
Hash identifier:          Z2kRju2FVvJMDk1D7R/axiz4Cg0nlmtJUFD7MAV4UQ4=
Subject key identifier:   EB:49:37:4C:87:01:3F:09:71:A9:07:C7:2B:FF:9B:88:FA:B6:93:40
Authority key identifier: 31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7
Certificate issuer:       /CN=A91971CB/serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
Certificate serial:       072B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
Manifest number:          0721
Signing time:             Thu 16 Apr 2026 15:10:40 +0000
Manifest this update:     Thu 16 Apr 2026 15:10:40 +0000
Manifest next update:     Thu 23 Apr 2026 15:10:40 +0000
Files and hashes:         1: MZsxRPBqjysw1BIHH-EhB3T-huc.crl (hash: /rUZPRgzGkvdFZ9zY0LHc4xk/yrvcPcvjGKuZlQ7Vxo=)
                          2: 27C29E5EF94411EDB4C6E91CC4F9AE02.roa (hash: dWX5BlXnJUAo9dHvNX1RgcAB0PkL/ZoFYS5PfP1NoaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl
                          rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:10:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1835 (0x72b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91971CB, serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
        Validity
            Not Before: Apr 16 15:10:40 2026 GMT
            Not After : Apr 23 15:10:40 2026 GMT
        Subject: CN=69e0fbf0-17b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c8:33:13:01:d6:e5:48:2d:33:d5:05:b5:7e:
                    05:2d:82:14:4d:c4:8e:fe:cd:87:aa:ae:0e:0e:af:
                    6d:d1:79:21:91:4d:b4:74:6c:ef:69:42:ac:9c:8d:
                    2d:23:bd:d0:f6:56:20:25:7a:e1:b2:40:61:7b:48:
                    79:8f:58:a4:07:c2:c1:f1:c5:ea:de:05:13:c7:a8:
                    21:cb:61:4a:65:02:fa:14:11:07:90:4b:32:53:94:
                    3b:17:54:0f:83:20:86:eb:dd:c9:b8:60:e7:61:8f:
                    f9:85:5b:0b:87:e1:5d:57:08:eb:d4:93:1a:d6:6c:
                    9c:bd:6c:76:84:87:e8:2a:c3:a6:0d:d9:96:06:a4:
                    99:60:4c:6e:85:e1:1f:aa:5c:fb:68:06:2d:a1:61:
                    49:1d:c7:9b:72:62:94:46:82:d5:dd:8e:09:52:30:
                    9b:6b:61:f6:be:61:9b:db:0b:b1:12:24:f9:81:c9:
                    e4:63:09:15:9d:60:ad:7e:df:51:fd:d8:4f:9f:5e:
                    2d:f3:d6:87:9d:71:12:e4:0c:fc:a2:bb:be:97:79:
                    ea:e7:ed:af:7b:e5:96:96:6d:63:7b:9d:16:3f:ee:
                    78:43:30:cf:3c:f0:f5:ef:f5:15:8d:d4:98:ac:42:
                    2b:45:8c:f0:35:73:65:f4:62:f4:ce:d4:13:2e:a7:
                    e6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:49:37:4C:87:01:3F:09:71:A9:07:C7:2B:FF:9B:88:FA:B6:93:40
            X509v3 Authority Key Identifier:
                keyid:31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:8a:06:52:c2:cd:16:4c:37:f7:50:68:a0:d4:19:f7:36:2e:
         52:72:ce:33:1a:a8:5d:61:ff:02:df:58:1f:f6:f0:63:6f:c0:
         84:66:e3:77:d0:af:9b:00:97:a4:e3:64:5b:77:24:81:17:c8:
         76:61:b4:a4:50:15:48:18:a4:2a:61:e9:cb:d0:b6:7d:5a:15:
         c3:bb:8b:10:83:53:1a:6f:55:75:6f:f9:ab:1b:61:61:49:28:
         4f:16:37:aa:a3:e6:67:6f:ae:e7:6b:e0:f9:25:bd:ef:73:11:
         f4:a4:15:1e:9a:b4:67:5a:5a:33:74:1b:8f:95:0a:28:09:b9:
         33:68:45:61:34:95:92:5c:aa:e4:4b:39:48:dc:ce:93:d5:42:
         1c:88:38:ec:8a:a6:f1:85:fe:44:5b:4a:58:f9:96:a5:5d:11:
         15:51:f7:99:1d:09:13:ca:bd:a5:ea:da:45:88:98:cd:a9:49:
         19:f3:d3:cd:87:2b:68:9e:df:60:2d:b0:72:f9:02:fd:00:b0:
         3f:b7:8f:f1:42:83:b6:50:36:77:e2:98:dc:f8:32:96:fa:6e:
         a8:11:60:4b:ab:68:d0:68:36:e2:b4:cc:6b:9c:15:e4:b2:9d:
         11:4e:60:b1:4b:75:4e:4a:47:e5:51:cf:e8:5a:2f:57:59:45:
         26:6f:21:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:05:09 2026 by rpki-client