Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft
File:                     1RZ7lweHQQlX4l2fh1CFYPAFd24.mft (raw, json)
Hash identifier:          ygvGziW9ljzbYv+JnJsoID2N4+qIZDOlFTM4WjkoVrM=
Subject key identifier:   6D:8A:4C:F5:8A:B5:B6:AB:82:7C:BD:EC:83:2C:9C:0D:A3:18:9C:5F
Authority key identifier: D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E
Certificate issuer:       /CN=A91B9011/serialNumber=D5167B970787410957E25D9F87508560F005776E
Certificate serial:       0664
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft
Manifest number:          065D
Signing time:             Thu 16 Apr 2026 22:33:17 +0000
Manifest this update:     Thu 16 Apr 2026 22:33:16 +0000
Manifest next update:     Thu 23 Apr 2026 22:33:16 +0000
Files and hashes:         1: 1RZ7lweHQQlX4l2fh1CFYPAFd24.crl (hash: sSH1iHL3APbwJRaRDMDFFqrUbjfufwChGnvCU+9f5HQ=)
                          2: 438893AC55BE11EDBDE51983C4F9AE02.roa (hash: gL7cp7BTVKF8NZn2TWA67vSTXMDPVWx2RqBEPS0dmPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl
                          rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:33:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1636 (0x664)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9011, serialNumber=D5167B970787410957E25D9F87508560F005776E
        Validity
            Not Before: Apr 16 22:33:16 2026 GMT
            Not After : Apr 23 22:33:16 2026 GMT
        Subject: CN=69e163ad-ab37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:06:91:af:d9:2f:20:32:ae:86:ca:5c:f0:2f:
                    2f:19:1b:a6:c2:15:0e:df:01:10:ea:9e:b4:67:3a:
                    5e:54:90:85:fa:b9:5e:a8:4f:66:eb:eb:be:bf:5e:
                    05:e7:43:74:df:4b:2d:b4:f0:5a:b3:b4:cd:34:6e:
                    86:9d:e6:af:ad:85:42:70:bb:ed:c1:3d:42:37:c6:
                    32:92:bf:a6:bb:41:55:9f:0d:0c:64:48:b5:73:53:
                    22:3f:80:50:4d:62:7d:64:ef:1b:2f:f0:30:f6:7b:
                    c5:f7:5a:b1:a9:85:86:1d:ed:ea:7f:f7:23:00:cc:
                    31:5b:7e:88:e3:2d:88:ec:13:4c:51:5d:73:be:cf:
                    ec:4b:12:fe:ee:b3:cc:ad:f3:d0:13:33:4a:bc:0c:
                    48:25:4b:f5:dd:27:b5:39:18:2d:85:2b:18:6f:a0:
                    b9:9d:74:1d:1f:31:ce:ad:10:ec:c9:06:c5:fb:e2:
                    31:d0:07:fc:a3:5b:24:87:87:9c:1c:1c:0c:8e:f4:
                    69:cd:4c:41:12:f5:37:3e:3c:4f:50:11:f5:65:c5:
                    ea:98:80:bb:d8:10:6d:d8:a8:8e:a3:34:8c:09:61:
                    f7:5e:c8:f4:c8:93:1c:9c:dd:a7:37:63:cf:45:67:
                    fc:bf:eb:7f:a8:40:d1:cd:cd:64:68:38:52:e3:62:
                    e4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8A:4C:F5:8A:B5:B6:AB:82:7C:BD:EC:83:2C:9C:0D:A3:18:9C:5F
            X509v3 Authority Key Identifier:
                keyid:D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:cb:fc:0a:6c:11:c0:ce:af:d7:c3:5d:a7:ee:e9:43:87:bc:
         d7:ec:48:cb:bf:4d:e3:f5:ed:6f:78:07:64:03:71:f6:d1:6f:
         cc:dc:69:a4:86:00:79:56:d5:41:bc:89:f8:f1:b3:f7:ce:a8:
         08:a5:87:02:f8:c0:00:33:1f:35:be:b4:f7:05:ed:63:fa:81:
         5e:93:d2:9a:3c:7f:41:47:43:62:19:24:2e:f2:af:8c:7b:c2:
         52:ef:86:d6:b5:84:6e:52:26:dc:e4:3f:43:76:43:4b:c9:09:
         6b:2a:24:23:d4:84:bb:9c:2e:45:8e:fc:b1:5c:b9:95:72:7f:
         0c:12:7a:67:83:31:b8:c4:d8:7d:a0:b0:0f:b1:21:fb:31:ff:
         eb:ab:34:a0:c5:23:ef:e8:1e:7a:d3:a6:05:25:4d:cf:57:1d:
         7c:b0:cc:37:1a:28:ff:80:4c:fc:08:4d:56:6a:fd:96:38:9c:
         e5:4c:f1:d4:01:bc:19:79:08:b9:a1:e8:fc:62:85:a1:66:af:
         a8:d6:f0:ba:4a:29:ba:04:08:56:e9:b5:04:a9:b9:91:4a:f8:
         4e:d7:c3:1d:af:11:99:ca:03:13:0c:f1:b4:7c:db:96:8f:67:
         b5:8c:4d:4d:c0:b3:4c:c8:9f:02:f4:fc:61:d3:37:0a:e3:70:
         3f:3e:b1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:45:34 2026 by rpki-client