Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft
File:                     efXtpMcOLgPpCLgYwXdY8qZpd1c.mft (raw, json)
Hash identifier:          MssE+Ajir6Wn2xM3jUL3z+LbCY/+n7/be5Zy6N/DSTU=
Subject key identifier:   0D:2C:DB:BF:4D:55:95:36:A5:42:D6:EF:65:65:3D:15:26:87:FF:F0
Authority key identifier: 79:F5:ED:A4:C7:0E:2E:03:E9:08:B8:18:C1:77:58:F2:A6:69:77:57
Certificate issuer:       /CN=A91FEB37/serialNumber=79F5EDA4C70E2E03E908B818C17758F2A6697757
Certificate serial:       D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft
Manifest number:          D7
Signing time:             Sun 19 Apr 2026 06:17:34 +0000
Manifest this update:     Sun 19 Apr 2026 06:17:33 +0000
Manifest next update:     Sun 26 Apr 2026 06:17:33 +0000
Files and hashes:         1: efXtpMcOLgPpCLgYwXdY8qZpd1c.crl (hash: GhTmPsyBl/noyPPW9GFkZLbELKxeAine+gKOkKLMSKk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.crl
                          rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FEB37, serialNumber=79F5EDA4C70E2E03E908B818C17758F2A6697757
        Validity
            Not Before: Apr 19 06:17:33 2026 GMT
            Not After : Apr 26 06:17:33 2026 GMT
        Subject: CN=69e4737e-190a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0a:86:83:fa:23:d7:bd:a0:70:e0:b6:68:2f:
                    b6:fb:fd:13:fc:2d:06:1c:1a:f5:5a:c1:43:9a:ba:
                    8f:b8:38:96:cc:1a:30:af:f9:74:93:45:cf:90:65:
                    92:82:67:93:3b:0e:38:46:19:9a:36:26:b1:a9:7c:
                    83:f9:ed:a6:bd:7f:90:7e:99:90:3b:c6:f0:ea:d8:
                    72:b3:fb:d4:4c:e2:83:14:00:55:4d:50:00:f3:1d:
                    29:8f:b2:76:7a:4c:b1:f9:42:35:f5:7a:fb:93:ec:
                    46:e9:8a:dc:53:b5:0b:67:67:20:1e:6a:07:97:73:
                    42:82:ff:c1:1b:1c:28:82:74:8b:a3:94:78:93:95:
                    ff:8b:7c:a1:92:02:ec:ce:94:9f:c9:f5:83:e5:73:
                    e8:45:c3:b4:c0:43:84:81:d7:82:38:a8:ec:1b:df:
                    b1:38:66:52:12:af:59:0e:b6:f1:3d:69:a3:e4:0f:
                    1d:24:71:5a:32:ff:11:6d:a3:1d:a7:d9:c0:42:18:
                    ab:58:e3:4c:98:f5:89:2a:91:28:9f:e4:28:49:4b:
                    0d:2f:41:70:a7:30:89:15:a9:d0:16:2f:82:6d:39:
                    99:bf:af:b5:4b:b3:f6:8e:b5:7c:96:8f:04:7c:81:
                    59:ad:44:92:18:6d:02:37:f3:2e:24:e6:91:f7:d6:
                    86:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2C:DB:BF:4D:55:95:36:A5:42:D6:EF:65:65:3D:15:26:87:FF:F0
            X509v3 Authority Key Identifier:
                keyid:79:F5:ED:A4:C7:0E:2E:03:E9:08:B8:18:C1:77:58:F2:A6:69:77:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:36:54:06:cd:af:5f:39:78:38:72:bd:b3:24:73:e4:43:38:
         86:15:c1:64:a4:45:0e:b5:fd:8c:9a:5c:2e:23:74:d6:b1:e1:
         47:79:44:df:33:c5:a8:fd:28:35:c7:fc:31:aa:91:97:b3:40:
         9f:8b:e3:65:35:ad:c9:ec:d2:64:34:50:40:85:fe:37:14:e0:
         84:06:c6:8c:0c:63:c4:97:3e:af:88:b1:91:f7:ec:8f:7d:8b:
         75:5d:a3:d1:21:d4:83:8a:02:71:bd:f7:69:d9:48:59:4f:5c:
         85:4a:60:f4:ba:57:bc:4f:f7:ce:bc:9c:54:8d:96:64:f9:65:
         ad:6d:c9:57:da:b0:e2:b6:ff:ce:04:2f:a7:55:ac:95:75:e4:
         bb:3b:cd:50:aa:a1:09:f0:0a:98:2a:64:79:98:0c:81:4d:92:
         50:ea:4a:34:e4:6e:23:b0:4f:cd:d7:b0:2f:dd:65:d4:ba:6e:
         39:8c:9f:7e:94:8f:39:dc:16:f5:3f:f9:0d:f4:7e:17:a0:f0:
         de:eb:32:fa:15:51:bd:39:d2:04:8f:5f:1e:f0:44:ea:29:12:
         45:4a:43:c2:18:34:ef:c3:3b:1d:2c:d7:e3:10:a5:4b:6a:75:
         69:de:ae:1c:79:84:5d:55:c0:12:36:a4:d4:19:bb:6c:61:7c:
         44:1a:b4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:26 2026 by rpki-client