Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
File:                     0NbEemjLQdEG6wQtcma5y7_Bpzs.mft (raw, json)
Hash identifier:          ednpzH+rwyA9+nFKov9jSSHXrzPW6zy/WXoRLone4a0=
Subject key identifier:   B2:EC:7E:D6:BE:74:7F:F5:C4:23:7C:DC:38:C7:F3:91:FE:B7:78:16
Authority key identifier: D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B
Certificate issuer:       /CN=A91EBF76/serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B
Certificate serial:       0708
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
Manifest number:          0700
Signing time:             Thu 16 Apr 2026 21:55:24 +0000
Manifest this update:     Thu 16 Apr 2026 21:55:23 +0000
Manifest next update:     Thu 23 Apr 2026 21:55:23 +0000
Files and hashes:         1: 0NbEemjLQdEG6wQtcma5y7_Bpzs.crl (hash: VouIBafLeW2eyjbQb5CCHHJB7zKYfdF2J/Ba2iDA9hE=)
                          2: 5FBDA400853011EBA1AF1D76C4F9AE02.roa (hash: 2cGQ0cYN6rxm/5CfWmmTTZtEMPdc416gyQEzwHIqQ5k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl
                          rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1800 (0x708)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBF76, serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B
        Validity
            Not Before: Apr 16 21:55:23 2026 GMT
            Not After : Apr 23 21:55:23 2026 GMT
        Subject: CN=69e15acc-d3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ea:c8:04:0d:a4:c1:68:3f:37:3f:76:35:2c:
                    fd:6e:12:ee:57:f6:d7:95:cf:58:5e:57:17:69:56:
                    96:33:3b:a4:ee:0e:a0:da:07:36:db:ff:ed:57:21:
                    1d:bf:a4:0c:3b:6b:d0:33:89:85:7d:af:a4:99:1e:
                    83:bf:92:c9:31:00:68:62:12:3e:b8:71:73:0e:11:
                    e8:67:27:fc:b8:a4:64:90:d3:47:ec:2a:5c:bd:d0:
                    98:65:c1:3a:7c:ab:a9:59:18:34:92:fc:a2:21:1a:
                    7a:a7:a7:16:9c:0b:4e:b9:1c:f4:45:b8:6f:07:a3:
                    62:26:b2:f2:6e:6f:ba:2a:b4:be:8e:94:39:34:d4:
                    14:14:ad:1b:8d:f8:72:a7:be:07:21:33:24:12:5d:
                    e4:18:ad:15:a7:50:53:4f:17:b8:5a:1e:4a:5c:68:
                    6f:b9:bf:00:a9:cb:41:9a:8d:56:19:31:42:d2:5f:
                    fd:9a:84:5f:bc:66:85:f7:03:b9:af:04:b9:47:25:
                    dc:cc:e3:f0:20:3b:00:ef:5b:13:0c:70:c4:1e:a8:
                    c3:90:9b:d7:0c:5f:d8:e3:bb:3d:7d:c6:a1:2e:44:
                    88:eb:35:a4:6f:90:2c:4f:23:cb:75:8f:42:8d:3e:
                    3f:63:8f:1a:27:b8:87:b2:2c:3b:d6:6d:75:87:02:
                    ed:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:EC:7E:D6:BE:74:7F:F5:C4:23:7C:DC:38:C7:F3:91:FE:B7:78:16
            X509v3 Authority Key Identifier:
                keyid:D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:30:2e:ac:0b:f5:a9:f0:b1:29:a2:30:17:1f:78:25:6f:8f:
         61:1c:e0:ee:98:a2:fc:db:da:65:d9:57:e9:8b:ac:cd:db:e6:
         8d:8c:29:7f:6b:0a:d4:f5:06:78:d0:08:24:95:f9:c6:7b:42:
         b4:5a:5a:8b:32:a6:45:2b:d6:fb:13:f8:ba:27:43:cf:a3:89:
         a0:0a:d3:3c:09:30:aa:40:d0:5d:cd:15:c9:c7:4f:43:d8:c4:
         45:83:0b:cb:11:3b:23:d1:8f:19:6e:3b:eb:39:d9:eb:ed:d5:
         c3:18:c4:6e:44:17:0c:28:98:ab:09:23:75:bc:76:e3:67:66:
         26:ea:ae:8e:26:a5:84:6c:c5:a7:a1:c7:f7:81:e7:65:d3:0e:
         3b:83:c1:a3:42:85:d7:67:17:e6:02:6f:39:83:41:53:b8:32:
         ac:c6:f9:d1:b8:8c:8a:f8:73:3d:3a:30:64:93:63:0c:e0:7a:
         a1:88:56:ba:a2:a8:73:ff:3a:41:a3:be:81:59:4d:e1:64:f1:
         3f:24:5d:6c:71:01:f3:0a:e1:b7:9b:94:4f:85:30:c8:7e:26:
         51:68:96:b7:f2:d1:82:e1:d7:7d:44:6b:69:1a:b7:71:8e:47:
         3e:31:87:6f:9f:ca:b1:fd:92:63:3b:d3:26:99:24:6d:b8:3b:
         a8:48:be:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:03:15 2026 by rpki-client