Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
File:                     F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft (raw, json)
Hash identifier:          fl5TDpptYJE31ZdGDPktkjtQoJlcnVpYcfW33tyCI0Q=
Subject key identifier:   79:74:FD:B1:0F:C0:D6:2F:1F:44:57:BD:14:DE:5F:CE:4B:F9:DF:74
Authority key identifier: 17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D
Certificate issuer:       /CN=A91ED17F/serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
Certificate serial:       0890
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
Manifest number:          0874
Signing time:             Sat 18 Apr 2026 20:36:22 +0000
Manifest this update:     Sat 18 Apr 2026 20:36:21 +0000
Manifest next update:     Sat 25 Apr 2026 20:36:21 +0000
Files and hashes:         1: F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl (hash: 9gr4CZNtE+KUxU7ItdodSXhAfE6C6k1ow1ANn8VkilQ=)
                          2: 42BB5BC2CB8A11F089E0C00EC4F9AE02.roa (hash: ffFlZZGQ0iwDML1pEzeR++cufgSgn2eJebqm0V7/KKc=)
                          3: 70F65056CDB911F0BDBD9948C4F9AE02.roa (hash: +r2m4LZBOfeFC8llerWWOPpo5aVgzOjABbJBM71Zx6w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl
                          rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 20:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2192 (0x890)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED17F, serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
        Validity
            Not Before: Apr 18 20:36:21 2026 GMT
            Not After : Apr 25 20:36:21 2026 GMT
        Subject: CN=69e3eb46-b50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0b:88:16:be:92:16:89:97:cf:76:6a:cd:46:
                    6f:88:53:5a:82:3f:7d:57:c0:5d:40:9c:a2:95:62:
                    8b:16:7d:48:5e:a7:27:67:61:cc:76:85:f8:0d:2a:
                    97:61:75:25:c9:1d:93:21:fe:29:2b:e9:74:1f:8c:
                    88:74:92:3b:91:5e:74:fd:df:f7:b9:71:f5:ce:77:
                    4e:12:08:60:e5:26:82:12:2d:30:db:ef:e8:a6:37:
                    4a:09:5c:8d:50:a9:54:94:24:a9:b8:0d:82:ee:02:
                    45:9b:ff:41:09:d9:bb:34:3d:8a:d2:d9:15:22:a8:
                    8b:4e:9b:7c:81:91:4b:7b:0f:a7:f1:39:30:55:48:
                    df:af:52:bb:fb:f4:60:c3:1d:98:31:42:40:73:a7:
                    5e:c8:18:e1:be:be:c7:9d:52:96:76:72:fb:9b:e7:
                    f9:bb:cd:0f:74:2f:33:c4:01:e4:08:b4:6f:56:3d:
                    0b:72:6d:36:3b:a5:0a:44:ac:a8:1d:ad:ee:34:14:
                    bc:f0:9a:d2:9a:92:93:dc:74:d9:53:a0:94:d2:8f:
                    ff:2c:96:c4:48:3f:f5:28:a6:90:37:fb:55:12:03:
                    4a:fe:ea:59:42:41:57:16:d6:20:2c:fe:0d:f8:23:
                    21:9a:d4:f3:dd:80:96:4b:ac:1f:df:70:d5:47:9b:
                    de:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:74:FD:B1:0F:C0:D6:2F:1F:44:57:BD:14:DE:5F:CE:4B:F9:DF:74
            X509v3 Authority Key Identifier:
                keyid:17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:16:f8:26:44:a5:86:0c:e2:e7:91:92:af:b9:08:61:e3:0c:
         86:b1:44:ee:7c:31:54:0c:13:ae:0f:12:2d:f1:c7:0f:5f:53:
         f4:67:b1:9b:27:be:b8:4a:f2:b5:33:0d:29:1f:a3:51:4f:25:
         a0:58:af:60:3c:c4:24:98:20:8d:56:94:76:f2:99:a9:d2:5c:
         cf:ea:22:70:f0:a2:fb:03:05:05:42:b6:6c:fc:5f:69:7a:53:
         79:b7:41:4b:c0:61:11:d2:a4:65:9d:a7:66:14:39:c5:47:67:
         85:63:5e:34:34:86:6c:55:91:5e:fb:d9:88:ff:d0:22:23:87:
         71:93:28:e0:b2:e4:4b:79:41:18:47:97:a2:df:12:ee:71:e2:
         8e:69:29:65:51:e3:f9:6d:7a:b2:d6:98:ce:2a:84:e1:b5:d5:
         dc:2f:b5:66:03:8a:82:57:d2:c4:0a:9d:35:f7:bb:6e:e2:65:
         db:7d:2c:91:6f:e1:b9:57:05:8e:32:17:83:43:55:fb:1a:39:
         72:30:8e:3b:91:ac:5d:c6:31:e3:81:84:b8:21:d2:d5:9c:e4:
         6b:ae:c0:2f:fc:24:39:2e:7d:a3:80:35:7f:48:b9:ce:85:73:
         e1:27:00:9d:80:57:5d:1e:1a:93:60:a8:34:53:5b:0b:e4:ee:
         80:59:aa:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:06:56 2026 by rpki-client