Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft
File:                     0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft (raw, json)
Hash identifier:          TA6rLNmfzFzqxshigIp5kFEjAAo9sWtCk5nnnJ0pqlA=
Subject key identifier:   70:6A:20:49:A1:8E:77:CF:CE:5A:7B:6F:55:A4:B9:59:15:23:DD:17
Authority key identifier: D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29
Certificate issuer:       /CN=A91C9019/serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929
Certificate serial:       02B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft
Manifest number:          02B7
Signing time:             Fri 17 Apr 2026 01:20:18 +0000
Manifest this update:     Fri 17 Apr 2026 01:20:18 +0000
Manifest next update:     Fri 24 Apr 2026 01:20:18 +0000
Files and hashes:         1: 0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl (hash: GqbGKHcVwVgDD47oEOkQn4IBlJ/Tfuw2j0OIvq+EaS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl
                          rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695 (0x2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9019, serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929
        Validity
            Not Before: Apr 17 01:20:18 2026 GMT
            Not After : Apr 24 01:20:18 2026 GMT
        Subject: CN=69e18ad2-41df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:93:d5:10:ec:4d:f8:21:71:9f:7f:eb:c2:26:
                    0e:99:38:ed:24:92:4b:5f:1b:c2:85:e9:e5:39:db:
                    d6:f9:28:6d:4f:4c:2d:4b:22:25:82:d3:70:24:34:
                    a8:ef:de:cb:16:31:b2:27:59:c7:26:12:e7:b7:69:
                    5e:a7:c4:ad:f6:98:79:4a:95:73:7f:c4:7b:aa:7e:
                    19:81:17:ef:10:5a:8e:2b:3c:d3:cd:84:3a:33:7d:
                    7e:74:1a:bc:f3:70:79:1f:53:82:37:51:9e:9f:35:
                    8d:40:9f:f3:43:83:ec:e0:91:92:ab:e7:c5:19:6d:
                    3c:b6:8b:80:bd:5a:c0:d8:60:0a:38:3e:d4:1c:11:
                    0e:36:99:d8:e3:ac:2b:15:38:a6:7a:b7:59:ee:39:
                    3c:45:d5:9e:5e:fd:f8:6b:92:1c:15:05:78:c9:89:
                    e7:54:46:fd:7f:14:93:81:6d:34:61:ee:71:8f:bc:
                    85:ad:24:0e:79:c0:13:b7:f6:cf:de:48:a2:b0:29:
                    d3:6e:ff:ca:0f:01:5f:41:df:28:af:5c:5b:27:d7:
                    bf:d0:cd:35:de:c4:7c:d8:65:08:09:65:ed:0f:d8:
                    2b:aa:31:7d:e9:6e:0a:23:15:30:52:49:3c:b1:a1:
                    80:2c:5a:25:e2:e0:bd:75:9c:08:4c:59:97:6b:8e:
                    3d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6A:20:49:A1:8E:77:CF:CE:5A:7B:6F:55:A4:B9:59:15:23:DD:17
            X509v3 Authority Key Identifier:
                keyid:D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:58:85:a5:18:e8:d7:63:58:b8:8f:7f:a3:54:e4:0b:04:21:
         e7:13:70:9a:82:61:24:51:78:e7:13:9a:6f:5b:a1:b2:c3:21:
         6a:76:d3:80:ac:9d:e4:84:65:49:e9:00:f9:71:53:3d:ec:ab:
         cb:fc:04:8e:8b:a4:65:aa:f6:33:5c:1c:ff:05:01:c1:c4:90:
         7f:4a:7a:25:95:bd:7d:d3:bd:89:9a:3a:48:00:f1:83:45:f7:
         e9:44:c6:fa:ab:0b:95:12:bd:93:d0:90:a3:47:ba:fc:f9:0e:
         8d:78:e2:d9:5a:50:fa:53:a0:ee:f2:c6:1f:2e:f9:01:91:bb:
         68:eb:cb:8b:0b:81:44:87:84:2a:7b:d0:b6:15:e2:b2:89:2f:
         eb:a8:6b:21:b2:46:7f:17:7c:5a:b1:35:3b:d3:a5:51:bc:7c:
         65:95:cf:91:21:45:19:82:59:39:16:2f:71:43:90:78:06:28:
         b1:55:df:0f:9b:5a:f4:17:4a:b7:c3:cf:be:93:ab:a3:a8:51:
         06:a9:aa:5c:2c:3b:d0:1d:52:60:95:29:81:7f:01:12:84:74:
         dc:e3:32:0f:68:ca:ea:da:43:5c:dc:f8:7e:2d:44:aa:db:84:
         09:88:9f:72:e0:0e:bd:bd:55:7f:9b:f8:b2:2d:97:4d:72:65:
         7f:11:73:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:03:25 2026 by rpki-client