Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft
File:                     7w5JMvxot1LjQokiqT5mq-MfNDE.mft (raw, json)
Hash identifier:          AxvyZeRVxqAn8WbMr9JVaeAbQhgKf1ny9sXs5qgx/64=
Subject key identifier:   56:02:78:4E:99:6A:9D:C1:83:11:E7:84:92:34:95:FE:B2:7B:79:F9
Authority key identifier: EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31
Certificate issuer:       /CN=A91B4B33/serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431
Certificate serial:       0167
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft
Manifest number:          0161
Signing time:             Fri 17 Apr 2026 04:37:00 +0000
Manifest this update:     Fri 17 Apr 2026 04:36:59 +0000
Manifest next update:     Fri 24 Apr 2026 04:36:59 +0000
Files and hashes:         1: 7w5JMvxot1LjQokiqT5mq-MfNDE.crl (hash: POKenjacUs0Q2fXcdgBuuEaK5YchlUXqUku3A+Z4NEU=)
                          2: 80741B04221F11EF92A42E1AC4F9AE02.roa (hash: XvV3KrQU+/AFsqX/bmWV7hZZ/sXJVuTdbUfgIHDhAFY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl
                          rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359 (0x167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4B33, serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431
        Validity
            Not Before: Apr 17 04:36:59 2026 GMT
            Not After : Apr 24 04:36:59 2026 GMT
        Subject: CN=69e1b8ec-ea2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:49:a2:dc:b5:c4:2c:80:4d:6a:b2:54:f8:07:
                    60:12:26:5a:1b:bd:4b:f8:5c:8c:ca:12:8b:96:5c:
                    de:76:9a:93:11:eb:19:79:e8:19:45:67:61:f1:01:
                    af:e7:35:34:e0:04:52:8e:c0:f8:54:2b:f2:09:1e:
                    88:ea:3c:dc:27:5c:d8:24:e6:ab:f8:74:29:44:28:
                    d3:40:04:4f:22:6a:85:f0:76:ed:6b:d8:56:76:f1:
                    5f:0b:9b:cf:ad:c7:c8:d4:5b:2d:e2:c5:cd:b9:ab:
                    e4:d5:d4:75:57:b4:61:94:2d:24:c8:28:b4:e6:c5:
                    f6:d7:a9:6d:e0:8b:96:42:5f:93:9f:d9:79:5b:b1:
                    52:a1:17:d3:6f:03:1d:7a:be:0a:c4:15:4f:81:33:
                    d2:f3:b6:17:91:7a:b1:97:00:5a:54:ae:47:fe:88:
                    1f:f0:eb:f4:fc:14:8a:f1:82:76:a3:ef:04:5c:d3:
                    dd:04:2d:4f:9f:ad:1e:88:fb:88:d5:ce:96:b3:68:
                    9d:3e:86:d3:7c:4d:58:79:5a:eb:4a:c2:97:8b:1a:
                    5b:0d:5b:97:1e:eb:84:74:d7:0f:6e:25:41:a2:fd:
                    5a:e0:dd:13:e1:2f:ad:46:bd:8c:f5:42:f2:1f:89:
                    5c:6c:5d:61:c7:52:04:93:50:b2:83:53:07:8b:fc:
                    3c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:02:78:4E:99:6A:9D:C1:83:11:E7:84:92:34:95:FE:B2:7B:79:F9
            X509v3 Authority Key Identifier:
                keyid:EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:81:be:c8:2c:76:82:23:f1:01:ab:d8:eb:c2:88:30:f8:b9:
         7c:27:00:6a:96:63:a3:80:0a:0e:06:4f:92:11:7d:3a:6a:e3:
         a6:47:cc:2d:f4:9f:9d:04:4c:2e:fd:6d:cc:9b:17:06:cf:8d:
         39:10:bf:e7:e1:ee:b2:f6:26:0a:05:fd:22:9e:8b:18:66:23:
         d4:ae:7c:44:d5:c0:fa:3b:b6:c9:08:2d:cf:de:eb:a9:d0:15:
         21:b2:35:18:f9:b9:fe:f4:5c:7e:dd:8a:2d:f2:32:b2:be:f0:
         f0:e0:1b:97:b1:f7:9e:d2:ab:b6:54:80:3e:30:41:d0:9c:cf:
         26:0d:24:90:79:f9:a0:ce:34:da:b0:7f:f5:02:ba:f8:d2:1c:
         90:a0:6f:a5:9f:f0:bd:c6:54:4f:35:bf:97:a9:16:cc:58:c2:
         e5:91:cb:99:fa:ba:a6:d8:dc:84:2c:ab:6e:0d:c0:86:72:87:
         5b:de:10:5a:65:4b:54:ee:c3:ee:e8:2c:52:4f:6b:6a:6b:dd:
         da:7e:52:76:83:78:9b:1a:a7:d2:89:d4:80:03:bd:f3:a9:e8:
         28:23:40:06:e5:42:bb:42:21:76:96:2b:8f:a8:f7:92:a4:fd:
         b3:b8:01:ab:fd:e0:3e:2d:07:b9:11:8b:82:8d:0e:d2:ba:eb:
         8b:0c:42:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:11:55 2026 by rpki-client