Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
File:                     msuAZmP7D89uvEPAELk14FIU_J8.mft (raw, json)
Hash identifier:          4APnWtLzYBzYE22X9qShEYyqpXh+U8udIiE1l7dAquo=
Subject key identifier:   63:82:AD:38:B6:E0:95:E5:63:5E:95:6B:F3:62:B4:0B:23:34:AC:9C
Authority key identifier: 9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F
Certificate issuer:       /CN=A91C7B68/serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F
Certificate serial:       01A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
Manifest number:          0BA1
Signing time:             Thu 16 Apr 2026 19:58:00 +0000
Manifest this update:     Thu 16 Apr 2026 19:57:59 +0000
Manifest next update:     Thu 23 Apr 2026 19:57:59 +0000
Files and hashes:         1: msuAZmP7D89uvEPAELk14FIU_J8.crl (hash: 31Opp1P3eZ+vbCfDdcaHZHw8FqPBapyUElM/8yymQYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:57:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B68, serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F
        Validity
            Not Before: Apr 16 19:57:59 2026 GMT
            Not After : Apr 23 19:57:59 2026 GMT
        Subject: CN=69e13f47-db5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:c0:1e:d9:a8:18:1e:44:ea:44:48:cd:a8:
                    e6:62:5e:ba:2d:cd:a6:e5:b9:63:26:04:7d:c5:70:
                    72:cd:c5:6f:5a:0c:26:d6:91:22:b2:50:2e:a2:f0:
                    ce:62:24:64:ec:fa:3e:6b:e3:a7:e9:bc:eb:f3:56:
                    f4:6d:3a:d5:de:12:81:56:f3:c5:68:c3:79:08:2c:
                    ca:4a:9a:78:42:8e:bb:ad:a4:27:bf:2c:5e:64:7d:
                    a6:88:83:38:98:bb:3c:a4:1f:03:73:85:4f:e4:71:
                    60:1f:2f:95:99:dd:2f:57:77:c6:65:78:08:f1:9a:
                    fd:0b:36:ef:6d:a6:62:87:d7:f7:72:66:71:23:07:
                    3d:5b:01:b1:25:a5:32:21:38:b4:4b:df:e4:14:dc:
                    f4:d5:74:b0:5b:af:30:c9:05:2c:c8:d1:fa:42:a6:
                    4a:52:eb:4a:52:9e:8f:07:8d:af:3f:87:15:3b:f3:
                    e2:9e:dc:eb:7d:74:ba:49:c5:c7:1f:36:30:ff:98:
                    b6:d5:b3:54:7e:6a:0c:fe:65:c3:91:f0:98:9b:2a:
                    e7:d1:3f:cf:80:c0:03:5b:18:e7:03:4f:d2:3a:55:
                    82:3b:2c:3c:27:3c:4a:b3:ab:16:38:d5:e3:17:86:
                    eb:a3:57:63:7d:3a:5a:a9:48:d4:6c:7f:71:1c:71:
                    06:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:82:AD:38:B6:E0:95:E5:63:5E:95:6B:F3:62:B4:0B:23:34:AC:9C
            X509v3 Authority Key Identifier:
                keyid:9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:54:97:12:4a:af:1c:1c:0c:df:68:37:bc:f0:0b:e3:eb:de:
         f7:af:9c:e6:ce:18:38:60:31:13:40:24:c1:4a:1f:4f:cc:43:
         6b:10:fc:96:30:ba:97:80:83:7f:2d:8d:35:7a:f3:7e:8a:c9:
         e0:62:62:bf:24:8e:14:5d:d1:e6:16:be:33:7c:8a:40:d6:b9:
         05:0a:21:e3:14:25:17:78:66:fa:46:70:8d:11:74:f9:8b:36:
         64:09:7f:4a:85:43:4b:ef:58:99:37:c7:d8:11:6e:87:ad:41:
         df:50:44:f4:50:6f:4d:70:89:be:dd:d8:e8:bb:cc:36:b1:71:
         68:50:20:aa:99:7b:a3:36:33:e3:38:00:ae:0e:10:25:1f:9c:
         b5:6d:6f:bd:99:a5:49:3e:91:34:b2:f9:65:c1:49:0a:9a:fa:
         9b:89:94:21:47:31:3f:d0:35:c8:8f:96:71:a9:7f:52:27:c6:
         e8:01:ab:33:f0:eb:98:26:41:cf:2b:ac:0c:14:13:a9:b9:df:
         24:eb:17:c7:c7:e4:7c:a8:5f:93:68:8f:72:51:6b:a6:70:72:
         82:4f:b6:79:20:e0:74:a8:1e:e4:5b:e8:e2:ea:ac:db:75:8f:
         6a:b8:2c:f8:db:a1:78:08:87:61:7a:4d:ef:02:5c:3a:b8:31:
         04:55:3a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:49:16 2026 by rpki-client