Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
File:                     Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft (raw, json)
Hash identifier:          kF1PVpkZPOGebkv7h7z/P6gczxxn5v1WoSGqvg87TCY=
Subject key identifier:   2C:D8:15:5A:7F:76:61:7F:41:41:1A:03:70:0B:6E:89:B6:84:4B:DE
Authority key identifier: 0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E
Certificate issuer:       /CN=A91F0C45/serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
Manifest number:          7F
Signing time:             Sun 19 Apr 2026 07:21:39 +0000
Manifest this update:     Sun 19 Apr 2026 07:21:39 +0000
Manifest next update:     Sun 26 Apr 2026 07:21:39 +0000
Files and hashes:         1: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl (hash: sDFKKSNG498sbwpKGmsB52CSPY1acBonO3lAmxt/RaA=)
                          2: 8A80B8D69A1011F0AC6E9127C4F9AE02.roa (hash: Dpuua3C8HF/TzJDPbTHc748WAwDZUWGv1xbXjI6Ri+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl
                          rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 07:21:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0C45, serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E
        Validity
            Not Before: Apr 19 07:21:39 2026 GMT
            Not After : Apr 26 07:21:39 2026 GMT
        Subject: CN=69e48283-87ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6f:ff:6b:82:ad:01:42:5f:f9:fe:0f:a3:e0:
                    ab:14:a8:d9:f6:be:58:a4:b0:d4:be:de:d1:d3:08:
                    a3:55:71:72:ed:64:21:6d:7f:c1:64:b6:c6:7d:de:
                    3a:43:ee:91:7b:df:80:19:b2:7f:5d:d8:88:2a:8c:
                    3e:13:84:f9:9c:ae:8b:c3:8f:28:b1:3f:71:00:0f:
                    66:be:f3:3a:be:bd:ec:f9:fa:5d:e0:03:e0:b4:19:
                    75:3e:3b:33:cf:01:42:9f:52:92:eb:6a:1b:07:86:
                    3d:f9:68:7c:8c:11:d6:0b:93:2e:d8:97:b2:fb:57:
                    12:d1:51:3a:67:4a:5a:de:74:39:c1:2e:d3:08:0e:
                    81:0d:af:23:9e:e9:bc:72:1e:ad:c5:c9:bb:cc:32:
                    a4:1d:aa:8e:ae:5b:97:32:dc:eb:15:87:a8:05:ec:
                    9b:db:c2:6d:e2:f2:09:ea:0b:17:db:2a:b9:0f:37:
                    a9:8d:69:b2:63:cb:06:7f:ca:02:5c:03:d6:d6:6f:
                    9d:1c:1a:b4:e5:99:a7:1a:7a:9c:97:d2:39:5c:14:
                    34:74:d7:c8:76:54:c7:6a:b3:cb:94:c6:35:cf:7b:
                    e5:7b:56:eb:3e:73:2b:73:4f:62:9c:91:33:0b:85:
                    28:6f:62:e9:c1:e1:ad:63:d3:9d:35:76:58:cc:6e:
                    d2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D8:15:5A:7F:76:61:7F:41:41:1A:03:70:0B:6E:89:B6:84:4B:DE
            X509v3 Authority Key Identifier:
                keyid:0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:69:cd:91:4e:b4:ce:12:bd:0b:c1:56:c0:80:89:a0:2e:33:
         11:46:90:a4:51:5f:0e:02:8a:27:27:77:cd:0a:6a:14:00:a2:
         3f:73:23:fd:52:03:78:24:49:4d:ed:5f:c3:35:a6:f3:ad:1b:
         38:02:7e:c0:69:9a:db:93:83:b5:62:91:f8:73:7d:b1:2c:c2:
         2e:dd:58:fc:dd:46:a3:31:22:51:52:8e:c5:d1:c5:55:ef:36:
         8f:aa:fb:18:5d:58:ce:7f:14:80:75:b4:8b:24:64:8a:0f:c6:
         85:95:09:b5:72:b5:9a:78:10:1c:4a:b5:f3:74:9b:fa:db:9c:
         0e:62:e2:a1:83:02:85:f0:da:09:c7:a0:ff:14:9d:2d:ae:53:
         50:7e:ec:90:7c:45:4d:40:97:9d:33:27:92:fb:6c:4f:ed:f1:
         83:0a:89:ef:5a:d0:0b:40:81:6b:04:d5:9a:e8:75:ac:c0:e9:
         d0:96:f3:9a:dd:3e:ec:18:d7:1c:75:2c:1c:82:b4:90:56:17:
         20:9d:ed:bb:ad:5d:1e:cf:58:3d:68:0d:90:73:91:92:24:30:
         f8:e7:75:8d:0f:9f:f3:e1:4d:5a:8f:30:a9:d7:44:d4:ab:5c:
         e9:fd:dd:a5:b4:42:45:e8:d0:6d:b6:a6:ad:79:ea:ba:63:0e:
         57:dd:53:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 08:27:45 2026 by rpki-client