Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
File:                     77aQcOLEAaX3cTPS27G6NB0X5h4.mft (raw, json)
Hash identifier:          uKpRrB1BXPoGOZ9jz+gjrovaMOAIgBlr7/uvgntfW10=
Subject key identifier:   29:47:AF:6F:BF:92:A7:44:BC:91:2E:61:2F:7E:67:69:C4:D4:50:24
Authority key identifier: EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E
Certificate issuer:       /CN=A91D359E/serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E
Certificate serial:       0CC3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
Manifest number:          0CBB
Signing time:             Thu 16 Apr 2026 18:22:00 +0000
Manifest this update:     Thu 16 Apr 2026 18:21:59 +0000
Manifest next update:     Thu 23 Apr 2026 18:21:59 +0000
Files and hashes:         1: 77aQcOLEAaX3cTPS27G6NB0X5h4.crl (hash: wYDG6c/8PqMzIdbmE16QtGy6FZcmpzofoeQQ/f1cOmw=)
                          2: 606EE7BC0DED11EA88AC0A29C4F9AE02.roa (hash: yuktOU63CUDk9dXA6PfdxxWbt+wQ/Uh1i6/oHbF80UI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl
                          rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3267 (0xcc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D359E, serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E
        Validity
            Not Before: Apr 16 18:21:59 2026 GMT
            Not After : Apr 23 18:21:59 2026 GMT
        Subject: CN=69e128c8-77d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:72:07:02:79:c5:ae:61:9b:60:19:e8:e9:26:
                    a9:5b:ff:87:c2:d7:35:35:33:75:5f:69:0c:41:0b:
                    a6:67:ea:a4:19:68:fa:c3:50:2f:5f:23:d2:35:89:
                    4b:67:a9:f9:80:6a:5e:ca:ed:ac:c5:e9:5e:a4:20:
                    7b:8f:0f:c5:dd:45:5c:db:ad:0e:23:2b:9b:01:2c:
                    4f:10:a6:dd:92:66:59:3b:e6:2c:a7:53:1c:0e:e6:
                    cd:87:2a:73:5c:2c:a9:a3:5b:62:f1:c0:42:7e:21:
                    eb:7c:5b:f5:8b:7f:fd:19:9a:01:ab:45:a3:3d:83:
                    1e:4b:ea:8f:b4:6f:43:6a:c1:3a:65:5d:ef:85:ce:
                    46:79:9a:cd:b7:c3:22:d9:57:9c:9a:f5:1c:b8:07:
                    f0:41:be:88:a0:ee:cd:55:3e:de:1e:69:71:da:58:
                    e9:09:91:5e:8c:41:69:ee:34:57:ea:18:ff:db:98:
                    9e:95:56:01:92:3a:9d:6a:8d:c4:f3:fe:12:ad:e9:
                    e3:b0:2a:fb:f6:d0:b8:e0:e0:be:a5:74:d3:d8:63:
                    2e:86:4b:d3:fa:bc:7e:4b:c8:44:5f:a5:16:86:a3:
                    81:9c:aa:76:ca:90:c3:c7:0a:34:e3:f5:9c:2a:a4:
                    e4:b9:63:e5:36:53:43:c3:2e:42:0b:31:98:22:85:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:47:AF:6F:BF:92:A7:44:BC:91:2E:61:2F:7E:67:69:C4:D4:50:24
            X509v3 Authority Key Identifier:
                keyid:EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:da:14:5d:ba:43:e1:cb:70:99:11:76:7a:0b:97:81:7c:49:
         2c:83:60:ad:98:b7:ee:e8:36:dc:c7:42:4f:43:2f:ca:b8:fc:
         dd:87:f2:32:e8:c0:c0:49:5e:71:89:1a:86:63:e9:f3:7e:58:
         af:f8:96:ff:aa:28:b6:c8:4b:5c:a7:e3:91:86:4c:b3:fb:5b:
         58:fb:33:3e:63:40:21:ef:24:d5:d6:16:cf:68:9c:32:ed:43:
         0c:7a:2b:88:df:f7:01:9f:9f:20:73:c8:55:42:4a:7d:96:33:
         6b:06:1c:18:d1:d0:22:20:65:d5:32:ff:a9:6d:26:de:14:8d:
         84:ad:01:24:98:31:9a:85:ae:00:9a:da:44:c2:83:13:8f:96:
         25:67:26:3f:58:28:96:5f:2d:0d:82:d0:b8:9e:0d:48:d7:dd:
         d8:9a:aa:d3:3e:ad:70:46:6d:f3:3e:cc:e3:be:6e:02:f3:ec:
         7d:73:92:12:dd:9c:27:0f:9c:08:d1:96:45:7d:6f:86:a0:d5:
         51:d3:9c:c2:65:b8:60:a2:63:cd:08:8a:e0:52:95:86:75:26:
         c3:b8:98:3e:81:42:d9:58:0e:1c:ff:b8:3a:85:53:68:a9:6d:
         9f:af:f7:eb:27:82:50:6f:dd:e3:70:e9:20:fd:c0:4c:62:42:
         cf:43:9f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:54:15 2026 by rpki-client