Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft
File:                     7HnRemDtVw7Ge1EWFitgi2C5zUE.mft (raw, json)
Hash identifier:          ZCWwgmWV9u/VQ5aLkBp/840WoymAlhnfC9mOkbXTUro=
Subject key identifier:   AD:6E:AF:5C:16:D7:C3:78:C6:0F:5D:6F:A4:C5:02:0D:E9:44:B9:EC
Authority key identifier: EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41
Certificate issuer:       /CN=A91C309F/serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41
Certificate serial:       0750
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft
Manifest number:          0748
Signing time:             Thu 16 Apr 2026 21:38:24 +0000
Manifest this update:     Thu 16 Apr 2026 21:38:24 +0000
Manifest next update:     Thu 23 Apr 2026 21:38:24 +0000
Files and hashes:         1: 7HnRemDtVw7Ge1EWFitgi2C5zUE.crl (hash: D4QON3OQnuGvess+eHS1fmUVpzHWDfZNJbGo6QuGz0U=)
                          2: C144C89ADCF311EC80AD955EC4F9AE02.roa (hash: j9gI0YuOlNLMFqeyvr/nJ9hL4WV9jhQUtzj3HCuyTu0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl
                          rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1872 (0x750)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C309F, serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41
        Validity
            Not Before: Apr 16 21:38:24 2026 GMT
            Not After : Apr 23 21:38:24 2026 GMT
        Subject: CN=69e156d0-fc49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7f:30:4e:f0:35:3a:d0:f1:d5:b2:d1:46:f2:
                    56:a0:aa:9b:7e:59:8a:b4:61:e6:77:f9:cc:a5:a3:
                    7a:46:02:e8:03:35:c4:8a:37:49:51:85:ad:58:ad:
                    da:99:e3:77:ef:f9:d7:b3:9f:53:3c:d5:99:7a:23:
                    1b:1d:36:c2:e2:97:20:fc:9d:f1:dc:3b:a1:09:04:
                    8b:b8:3c:93:cf:9d:ee:a2:dd:8f:fa:30:c2:9e:68:
                    bc:60:35:f9:85:64:b3:aa:69:39:18:aa:dc:8d:d2:
                    8f:5d:95:9c:2f:2e:28:22:3f:3d:e6:89:89:f4:3a:
                    8e:51:8c:63:16:3f:d0:e5:50:fc:63:c2:4b:99:a7:
                    ea:f9:a7:9c:e9:ec:dd:fd:c6:b4:e0:18:cc:71:cd:
                    95:97:68:45:16:68:37:be:53:1d:d8:89:20:e5:fb:
                    8e:00:b6:a9:02:50:c2:54:95:82:a3:4d:a0:b0:c6:
                    6f:61:86:47:40:ae:56:88:f6:b8:84:cc:18:e1:ef:
                    31:57:c6:db:12:05:b6:87:46:1b:9e:61:e1:26:1e:
                    d5:9a:a1:37:4f:f1:03:1f:7d:d9:89:7c:96:59:e2:
                    94:e3:1c:36:ae:17:7c:80:1d:a8:88:21:3d:9f:fd:
                    89:5d:f1:c5:9c:40:85:ae:d7:53:1d:98:b6:8a:1d:
                    a9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6E:AF:5C:16:D7:C3:78:C6:0F:5D:6F:A4:C5:02:0D:E9:44:B9:EC
            X509v3 Authority Key Identifier:
                keyid:EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:40:ea:4c:64:79:65:4a:39:a6:b7:1a:af:65:82:10:85:9d:
         fd:45:2b:16:04:79:77:a2:90:94:3a:5e:1e:6a:2e:c4:e2:33:
         52:09:7b:b3:0f:18:e9:84:07:65:eb:3b:cd:c0:5c:11:01:7b:
         60:1b:2a:2c:a9:3d:d7:03:5d:3c:9b:39:39:b3:99:a8:b5:22:
         fd:73:00:e6:bb:ed:c5:28:33:8e:3a:5d:a3:b2:96:5f:3a:c5:
         c1:ce:ed:22:27:b5:2a:7f:0a:3c:b3:3e:62:9a:ef:26:44:36:
         21:f2:37:b9:d0:7d:5b:a5:1c:9c:58:06:3c:d7:aa:98:bc:19:
         02:80:29:65:99:75:7f:f7:50:9d:eb:05:ff:70:58:18:cd:9a:
         f7:fd:0d:2e:f1:ce:f2:6c:04:16:40:66:d6:ee:6a:f5:a7:fa:
         13:dc:f1:80:7d:8c:72:45:4c:94:75:d8:24:8e:4a:1a:f8:73:
         dd:86:1e:8a:11:20:98:cb:d2:5a:86:39:09:76:bc:d2:dc:fa:
         ab:65:f0:d9:c8:10:e5:41:cd:44:fc:22:d1:f3:31:35:c7:00:
         99:9c:85:ff:9f:37:13:9a:d1:d1:2b:bd:05:62:d1:24:bc:2e:
         c3:37:9d:b9:f7:13:1d:d3:7f:99:de:f4:1f:db:f4:c1:ea:4d:
         3c:ea:92:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzMwOUYxMTAvBgNVBAUTKEVDNzlEMTdBNjBFRDU3MEVDNjdCNTExNjE2MkI2MDhC
NjBCOUNENDEwHhcNMjYwNDE2MjEzODI0WhcNMjYwNDIzMjEzODI0WjAYMRYwFAYD
VQQDEw02OWUxNTZkMC1mYzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzH8wTvA1OtDx1bLRRvJWoKqbflmKtGHmd/nMpaN6RgLoAzXEijdJUYWtWK3a
meN37/nXs59TPNWZeiMbHTbC4pcg/J3x3DuhCQSLuDyTz53uot2P+jDCnmi8YDX5
hWSzqmk5GKrcjdKPXZWcLy4oIj895omJ9DqOUYxjFj/Q5VD8Y8JLmafq+aec6ezd
/ca04BjMcc2Vl2hFFmg3vlMd2Ikg5fuOALapAlDCVJWCo02gsMZvYYZHQK5WiPa4
hMwY4e8xV8bbEgW2h0YbnmHhJh7VmqE3T/EDH33ZiXyWWeKU4xw2rhd8gB2oiCE9
n/2JXfHFnECFrtdTHZi2ih2pDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK1ur1wW
18N4xg9db6TFAg3pRLnsMB8GA1UdIwQYMBaAFOx50Xpg7VcOxntRFhYrYItguc1B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzA5Ri8xREI0ODNBNDY5
REMxMUVCOUUxNjA5MUFDNEY5QUUwMi83SG5SZW1EdFZ3N0dlMUVXRml0Z2kyQzV6
VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdIblJlbUR0Vnc3R2UxRVdGaXRnaTJDNXpVRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzA5Ri8xREI0ODNBNDY5REMxMUVCOUUxNjA5MUFDNEY5QUUwMi83SG5SZW1EdFZ3
N0dlMUVXRml0Z2kyQzV6VUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANUDqTGR5ZUo5prcar2WCEIWd/UUrFgR5d6KQlDpeHmouxOIzUgl7sw8Y6YQH
Zes7zcBcEQF7YBsqLKk91wNdPJs5ObOZqLUi/XMA5rvtxSgzjjpdo7KWXzrFwc7t
Iie1Kn8KPLM+YprvJkQ2IfI3udB9W6UcnFgGPNeqmLwZAoApZZl1f/dQnesF/3BY
GM2a9/0NLvHO8mwEFkBm1u5q9af6E9zxgH2MckVMlHXYJI5KGvhz3YYeihEgmMvS
WoY5CXa80tz6q2Xw2cgQ5UHNRPwi0fMxNccAmZyF/583E5rR0Su9BWLRJLwuwzed
ufcTHdN/md70H9v0wepNPOqSbQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:08 2026 by rpki-client