Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
File:                     7vvGU2P1cW1yTBF81UIh5BLZI8w.mft (raw, json)
Hash identifier:          t/fm16nEYMp+JqoBe8kuuGOaFK9cHe8P0995JiFs36E=
Subject key identifier:   C5:35:57:A6:69:70:38:66:84:41:FC:0B:D2:3C:2F:15:35:F8:E0:84
Authority key identifier: EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC
Certificate issuer:       /CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC
Certificate serial:       038E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
Manifest number:          037A
Signing time:             Fri 17 Apr 2026 00:43:08 +0000
Manifest this update:     Fri 17 Apr 2026 00:43:07 +0000
Manifest next update:     Fri 24 Apr 2026 00:43:07 +0000
Files and hashes:         1: 7vvGU2P1cW1yTBF81UIh5BLZI8w.crl (hash: u2UmhN8AsGI8mboiYh9rfsNPqeR4taZJjS8dYetVRwQ=)
                          2: AD08F946E93C11ECA5406975C4F9AE02.roa (hash: q03Ejlk17UMDXNKB6PRUfzS21ZUkRHDF9xysrb5Vn0Y=)
                          3: 01C04C52FB8D11ECABCA1D0AC4F9AE02.roa (hash: wVi55QmlKiR6g81xw7+LKHIS1HR3abLW6EfNfGynUpA=)
                          4: ABF61020E93C11ECA5406975C4F9AE02.roa (hash: de3QFlqBVgHbXKWssjUYqwjj3Ae5EkAMqGV17DFZdzU=)
                          5: ADBF1F6EE93C11ECA5406975C4F9AE02.roa (hash: I/I1leE2cUDiG0z+BMnnMFfBTjv2txjfGBtcX6l9bhk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl
                          rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910 (0x38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2A41, serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC
        Validity
            Not Before: Apr 17 00:43:07 2026 GMT
            Not After : Apr 24 00:43:07 2026 GMT
        Subject: CN=69e1821c-1b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:79:66:a5:2a:8b:4f:90:66:a7:a8:51:7f:d2:
                    5a:98:15:3a:0a:1a:e6:b2:42:e5:a7:63:79:f5:06:
                    16:55:35:5a:77:8a:a1:f4:25:d8:38:68:35:b8:b4:
                    4d:20:a6:b0:c8:a9:64:00:fa:55:53:a4:c6:bb:11:
                    51:f4:d6:91:27:05:af:e3:16:54:73:32:0c:8e:56:
                    1c:42:d3:0b:e1:a1:c9:9b:af:4d:c9:60:12:8a:63:
                    9c:e3:36:1f:a1:b6:45:b1:11:65:71:72:09:b4:f1:
                    12:ad:38:6a:33:70:01:0e:60:28:e2:45:e6:03:f1:
                    36:70:b6:18:a3:da:9e:ae:8f:eb:87:69:c4:e7:33:
                    32:40:2c:18:ce:15:d9:d9:3f:ea:6c:e9:4f:63:3e:
                    10:45:17:c9:c1:b8:e0:cb:60:f7:04:7d:a8:ca:fa:
                    ee:30:48:a6:be:9d:43:74:33:01:b4:30:af:79:fb:
                    54:03:78:92:3b:0f:7c:3e:51:70:42:c1:e6:a5:1a:
                    8d:40:9a:33:b6:5f:c3:92:b0:0a:a0:23:58:53:f0:
                    49:3a:7a:b3:e0:6c:fe:2a:9c:fa:6a:49:d9:f9:42:
                    3b:d3:e5:a4:84:45:54:7e:7f:e8:e0:3e:07:28:22:
                    f2:48:b2:1d:62:ad:0a:4e:25:ca:97:45:f8:61:ab:
                    6f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:35:57:A6:69:70:38:66:84:41:FC:0B:D2:3C:2F:15:35:F8:E0:84
            X509v3 Authority Key Identifier:
                keyid:EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e5:4b:6c:19:e9:82:b2:db:53:1b:e4:e4:a7:97:0f:45:f1:
         1b:b6:49:91:76:45:38:57:da:d9:c3:89:dc:16:c7:f0:9a:7b:
         24:e4:8a:87:3e:95:44:16:a4:35:da:3d:08:e2:ca:e3:5e:e3:
         25:87:47:18:ec:52:87:58:14:a4:98:bd:6b:05:dc:87:1f:a2:
         39:de:f1:27:08:0d:23:01:10:09:09:70:1f:f8:34:16:28:e8:
         69:a9:bc:a5:90:49:b3:3f:88:2f:f7:a2:ac:7a:c6:86:d7:31:
         b9:ce:61:7a:3c:17:67:a0:5b:5e:99:12:77:c4:bc:a6:b6:63:
         f7:42:bc:bf:94:d8:98:f5:df:c1:e0:82:22:b1:75:90:2c:ae:
         79:f9:b1:8e:a0:99:3c:a0:eb:22:82:ce:ab:f1:58:b0:e6:5e:
         11:d5:7e:1c:79:3c:be:69:a4:e9:af:c8:77:ba:f6:31:26:35:
         a7:36:ab:87:20:5d:41:3b:61:a7:91:73:f0:a5:d3:97:88:20:
         71:00:ac:e6:06:14:b9:7c:20:8a:6c:40:50:3d:2a:22:37:d8:
         82:af:ce:88:a9:1a:ff:6d:77:75:95:b3:30:36:a9:fb:0e:a0:
         bb:6b:db:a1:77:0d:a5:5a:2f:79:88:7d:b3:56:d3:c9:20:7e:
         5e:06:e7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:27 2026 by rpki-client