Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
File:                     E7lE6lgzzbdBH9TsaqHJYs87CIA.mft (raw, json)
Hash identifier:          r0zB03rprrkswM0JqBtarBqi4pGzVlROZAxlilAAEU8=
Subject key identifier:   95:A1:3E:C9:77:0F:1A:51:81:C0:6F:57:E6:31:33:45:BB:5B:81:7E
Authority key identifier: 13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80
Certificate issuer:       /CN=A91FCF44/serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
Manifest number:          0105
Signing time:             Fri 17 Apr 2026 05:07:58 +0000
Manifest this update:     Fri 17 Apr 2026 05:07:58 +0000
Manifest next update:     Fri 24 Apr 2026 05:07:58 +0000
Files and hashes:         1: E7lE6lgzzbdBH9TsaqHJYs87CIA.crl (hash: qSH7BhYW3oKz+NRg0HlHyXHllaoGlj9rqAQFQ4iTxYo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.crl
                          rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCF44, serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880
        Validity
            Not Before: Apr 17 05:07:58 2026 GMT
            Not After : Apr 24 05:07:58 2026 GMT
        Subject: CN=69e1c02e-1fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0f:ec:87:ed:c1:6a:90:13:42:d3:62:94:0a:
                    8b:ca:d9:53:6f:50:18:b2:44:78:93:6c:7d:52:f0:
                    d9:4a:9f:0c:81:ee:c4:b7:22:23:a6:82:56:ec:82:
                    f6:e1:62:c6:ec:b1:03:e4:54:ec:4e:43:00:de:42:
                    a2:ac:7b:47:2e:77:99:50:a5:76:ce:8a:8b:92:a7:
                    ef:ee:ed:90:ea:c8:53:2d:94:5e:70:87:47:cc:b6:
                    c8:85:ee:81:80:64:67:51:a9:13:4a:d5:13:10:d0:
                    e8:56:e2:99:39:3d:2b:92:2a:fc:93:4b:47:32:d4:
                    c1:ff:58:81:38:22:68:c7:9c:10:b6:7c:9a:04:42:
                    31:8b:5c:f6:8b:a9:b9:0b:d5:7a:9f:45:05:b7:a4:
                    d1:ae:da:44:c9:b3:29:bc:6e:3e:6c:f4:30:00:3d:
                    4d:3a:c5:13:ea:e6:66:49:e0:58:0e:ad:65:a1:03:
                    99:8b:f6:e5:06:70:65:ba:91:ad:c8:2f:9f:f4:fd:
                    0c:ba:26:68:24:bb:c1:1f:28:06:d4:46:bd:f0:df:
                    3b:2b:9d:70:8e:85:9d:e6:48:ff:48:d0:65:4c:04:
                    47:84:9b:d3:cf:5c:43:44:88:76:8c:50:ab:b9:9b:
                    b8:b3:78:dd:bc:ba:7c:07:9d:56:6a:af:73:7a:01:
                    23:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A1:3E:C9:77:0F:1A:51:81:C0:6F:57:E6:31:33:45:BB:5B:81:7E
            X509v3 Authority Key Identifier:
                keyid:13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:79:b5:7a:38:a7:3b:8f:a5:16:35:78:c8:7b:e8:22:6c:da:
         31:67:c8:62:32:ed:e9:f9:ed:32:7e:74:69:01:de:32:18:ed:
         d5:58:e6:94:bb:ef:3f:aa:d9:a5:93:2d:97:a5:8d:d7:35:90:
         6d:6a:7b:98:9f:15:6c:af:60:ac:13:12:f1:58:90:fe:f2:7e:
         32:e4:a1:a1:56:e7:14:23:a5:71:da:d4:d8:69:17:ed:a1:e2:
         f9:8e:3b:9d:c6:ef:3d:77:8c:1b:ea:25:e0:bc:63:68:c5:d6:
         0a:4d:73:26:48:04:ec:6b:c7:48:d0:e5:2d:ca:58:79:46:b0:
         62:ef:d8:72:52:59:d9:26:f8:22:04:e3:9c:58:84:64:53:9a:
         67:85:c8:50:c6:8f:0a:b2:22:5f:e6:a5:74:55:91:58:88:da:
         5d:cf:71:9e:2e:6c:9d:b9:46:a6:96:a3:c9:99:7e:a9:7d:87:
         43:e9:71:7b:b4:30:b1:b7:30:36:e2:74:af:b0:e3:e0:6d:b9:
         97:d2:e5:bb:6a:7a:3e:09:14:4c:05:c7:1e:bb:a6:82:b8:10:
         19:d6:a0:e0:8d:52:ee:93:6f:ef:bd:6a:31:e9:c2:62:d4:e1:
         f8:84:cb:cc:77:09:0f:dd:2c:2f:a1:c8:24:da:06:46:c1:20:
         de:e9:9a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:37:16 2026 by rpki-client