Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
File:                     7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft (raw, json)
Hash identifier:          AJ/oi6FNUSshtFMZ/jjV/ARPUmD4oEEexYMXvReoNHo=
Subject key identifier:   93:C4:5E:37:77:A5:E2:52:F5:7C:30:54:18:21:F9:C2:54:EA:8C:29
Authority key identifier: EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C
Certificate issuer:       /CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C
Certificate serial:       0C33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
Manifest number:          0C2B
Signing time:             Sat 18 Apr 2026 18:39:36 +0000
Manifest this update:     Sat 18 Apr 2026 18:39:35 +0000
Manifest next update:     Sat 25 Apr 2026 18:39:35 +0000
Files and hashes:         1: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl (hash: IM4GeKqt4+hpTSLIjeqCAejpjG8ZqmV9Gveq9nRWTCw=)
                          2: 001209082A2111EAB1BF9C2EC4F9AE02.roa (hash: W9bk7BWbjWm31paj/e25NULQ5EVlnx3DxH5iP28fphw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl
                          rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 18:39:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3123 (0xc33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9F87, serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C
        Validity
            Not Before: Apr 18 18:39:35 2026 GMT
            Not After : Apr 25 18:39:35 2026 GMT
        Subject: CN=69e3cfe7-8607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:df:f2:88:75:da:04:03:19:82:fb:cf:3e:4e:
                    e1:9d:e1:97:4c:ff:e9:b5:93:9e:50:ab:aa:1a:b4:
                    57:a1:10:70:c0:23:c6:b2:d0:cb:66:22:33:bf:a2:
                    b5:98:eb:8c:37:7f:6b:98:bb:c8:f7:68:d1:e5:17:
                    2b:bd:bf:5e:e6:a5:2b:6a:57:06:3c:30:d2:a3:24:
                    d8:5e:14:c5:1d:c2:c7:69:1a:92:e0:02:14:9c:0d:
                    00:14:51:b3:b9:a8:ab:6c:86:be:7f:83:72:38:bf:
                    12:58:42:04:ed:78:ad:10:c6:64:1f:11:f5:eb:09:
                    ad:08:ec:d1:7c:01:c1:ad:20:a1:84:65:07:fd:20:
                    57:80:42:4f:a9:d5:a9:01:40:7d:58:1a:c7:0f:05:
                    ad:5f:0f:b2:a4:40:f2:6e:37:91:5f:e6:fd:0a:01:
                    ba:ba:2b:9b:31:b6:ad:68:36:16:0a:df:4f:56:33:
                    a4:76:f0:69:f3:85:34:77:2b:d7:e1:33:e7:0b:18:
                    02:4f:54:56:df:87:9e:45:ee:7d:93:ba:05:6f:db:
                    db:c1:4e:5c:fb:98:99:d0:fb:7e:9d:df:f9:b1:2f:
                    69:c2:3f:e2:55:5b:80:c8:c1:28:a7:2a:e0:94:10:
                    12:f7:76:42:50:e3:6e:0e:dd:9e:40:4a:da:f3:0a:
                    59:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C4:5E:37:77:A5:E2:52:F5:7C:30:54:18:21:F9:C2:54:EA:8C:29
            X509v3 Authority Key Identifier:
                keyid:EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:1a:bf:be:85:48:ac:75:a0:c0:c3:c2:20:98:13:35:8c:65:
         16:77:c5:5f:9a:1d:a8:87:c0:3e:e3:90:0b:12:c0:54:30:0d:
         96:d1:c4:2a:27:5d:af:da:21:f0:8f:4a:6d:3e:1d:f0:14:7a:
         3f:84:d8:9c:97:c5:d7:78:c7:a8:11:20:16:df:ed:e2:de:fe:
         e5:83:f0:b4:b7:a5:7e:fa:84:73:7c:cd:bd:16:09:4d:05:60:
         fb:62:0c:2f:58:a6:cb:4d:53:8d:ab:18:28:5c:47:67:fc:f2:
         2f:e5:c8:e4:62:82:06:e9:86:28:dd:c3:81:5e:1b:1c:85:8f:
         cb:c6:30:98:42:ae:e1:ef:d9:e8:68:64:f6:2a:b6:86:b2:15:
         1a:ed:29:27:c1:e8:c3:5f:09:bb:e8:62:c6:00:49:97:f3:b8:
         a0:41:bb:f7:19:a9:0d:dc:3d:32:7e:7d:97:e0:c5:ac:87:34:
         52:ae:1c:8c:1f:6d:da:2f:72:38:87:cd:24:d3:d0:65:70:24:
         67:c9:73:7e:0c:a4:5d:af:98:7d:0d:e1:7e:ae:13:88:f1:5e:
         08:36:0e:63:0a:52:75:d6:48:d9:1a:72:14:b7:97:d5:4d:d2:
         17:6f:65:cf:6f:ac:e1:17:41:12:f8:da:fa:f1:36:51:0a:d4:
         3f:df:83:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:44:08 2026 by rpki-client