Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
File:                     L77sEYtTYT4VQvM__DYRjlYtRy4.mft (raw, json)
Hash identifier:          K7wupmScKaZe5gP6SjSBLw+5/JBYm6jB1uBu5YvgxxI=
Subject key identifier:   CC:7E:92:D9:7F:03:F0:D2:BD:D4:33:D6:A8:B9:03:94:24:BB:15:F0
Authority key identifier: 2F:BE:EC:11:8B:53:61:3E:15:42:F3:3F:FC:36:11:8E:56:2D:47:2E
Certificate issuer:       /CN=A91E8556/serialNumber=2FBEEC118B53613E1542F33FFC36118E562D472E
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
Manifest number:          2D
Signing time:             Fri 17 Apr 2026 08:33:11 +0000
Manifest this update:     Fri 17 Apr 2026 08:33:10 +0000
Manifest next update:     Fri 24 Apr 2026 08:33:10 +0000
Files and hashes:         1: L77sEYtTYT4VQvM__DYRjlYtRy4.crl (hash: pwXRzh0ybg+gUzNT1ph0W3ctDQWOos/vswPcxJPKO1k=)
                          2: C4618A34188D11F1A1D836EC3D3D8C67.roa (hash: AWHLDSg6pyqywfPLPVxknZ3rJC83UYzL4w3oK5CODzc=)
                          3: 63C8FE7A276D11F1856D09ECC3833773.roa (hash: +N8rEdDBNm2Ede84xuQaXFbGn8t9c41nF9epibXXQ5Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.crl
                          rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8556, serialNumber=2FBEEC118B53613E1542F33FFC36118E562D472E
        Validity
            Not Before: Apr 17 08:33:10 2026 GMT
            Not After : Apr 24 08:33:10 2026 GMT
        Subject: CN=69e1f047-d0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d9:fc:8f:9a:0a:ab:74:61:1a:e7:ce:7a:b8:
                    a6:14:d8:9f:b8:51:2b:b3:3c:14:a6:32:38:ca:a2:
                    51:39:76:20:21:66:0e:2f:ee:6e:b1:f4:60:eb:1d:
                    14:f0:ca:c3:01:79:77:6d:3f:d0:36:a1:94:5f:95:
                    6b:e1:e2:ef:7b:97:a7:c2:62:9b:d7:d3:7b:ec:23:
                    c7:87:30:24:e8:2d:fb:17:ac:b5:a9:8e:d7:21:99:
                    1e:af:96:df:26:cc:ba:06:13:d7:d9:5c:65:4c:7f:
                    8e:9f:08:41:ac:5a:1c:16:58:8d:78:9f:0d:16:6e:
                    86:47:e2:be:ab:c1:eb:34:f9:55:20:93:83:c8:d4:
                    75:da:e1:70:d6:88:2e:f5:ad:d6:f4:e0:75:eb:96:
                    f8:84:60:27:41:98:80:72:ad:3e:df:11:75:9f:41:
                    cf:c0:66:a3:de:58:3e:49:e8:28:8a:3a:15:1c:15:
                    91:e9:0a:41:93:9d:f6:02:98:92:0d:89:56:0f:b6:
                    c8:ec:21:40:77:73:f0:c7:b6:56:44:85:c6:f2:fc:
                    60:5b:e5:c7:d1:7d:97:5d:da:e1:b0:64:08:aa:43:
                    3b:41:86:92:bf:84:d6:fa:79:7c:dc:c6:32:f3:78:
                    3f:02:c4:6f:c3:9d:e5:cf:29:db:8b:aa:f5:26:ea:
                    f8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7E:92:D9:7F:03:F0:D2:BD:D4:33:D6:A8:B9:03:94:24:BB:15:F0
            X509v3 Authority Key Identifier:
                keyid:2F:BE:EC:11:8B:53:61:3E:15:42:F3:3F:FC:36:11:8E:56:2D:47:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:56:2c:f4:50:c3:c6:73:e2:c7:c7:57:d5:83:a2:1e:fa:be:
         27:be:04:a0:59:c5:08:ef:db:3b:30:39:3a:e0:9d:70:49:ef:
         0f:e0:9d:e8:75:59:19:e3:4d:71:83:ec:9f:42:2b:dd:a6:c7:
         18:12:66:22:ec:a8:64:79:6d:1c:01:9e:50:e0:14:3d:2d:f9:
         f2:2f:9b:d6:92:3e:86:ef:0f:88:2b:93:ac:be:ce:93:0d:52:
         9d:b2:88:c1:6a:39:79:ad:e0:16:5a:ef:b8:61:0c:b3:60:a9:
         96:99:fd:40:f7:a9:f7:c1:c2:9b:bb:db:9b:c4:9c:da:29:3c:
         85:bc:8a:8c:08:08:9e:df:3c:c4:b9:d9:dc:20:1d:0c:6c:5a:
         03:8d:a9:4a:e0:00:d3:a8:87:e9:a4:48:c5:64:8d:ac:3a:cc:
         ee:92:08:2a:fd:a9:77:60:12:1e:96:8d:77:c2:58:c0:93:64:
         91:a1:22:af:3d:b3:ab:9b:22:c3:2e:ca:7a:3a:05:2e:dd:a1:
         59:b6:cf:d8:8e:f9:78:f5:43:a5:f5:fe:f3:46:e9:ea:df:10:
         a8:0c:fc:4e:6f:a5:14:8a:29:2d:93:e6:a3:77:53:1b:6b:bf:
         30:ca:40:ae:3a:92:4e:ec:25:12:8c:8a:10:19:43:68:02:8b:
         ac:1d:d3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:36 2026 by rpki-client