Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft
File:                     7NpzBwy2x3kNxguGn7sEMdln3k4.mft (raw, json)
Hash identifier:          tNRM2dUOs60HBEArOK1GXFK4XYKAhgR49q+4saqGjeo=
Subject key identifier:   43:5B:AB:D7:38:3A:AF:9F:7C:65:95:BD:BA:D5:AD:E7:23:77:B5:D3
Authority key identifier: EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E
Certificate issuer:       /CN=A91A5C43/serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E
Certificate serial:       07A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft
Manifest number:          0791
Signing time:             Tue 24 Mar 2026 21:16:56 +0000
Manifest this update:     Tue 24 Mar 2026 21:16:55 +0000
Manifest next update:     Tue 31 Mar 2026 21:16:55 +0000
Files and hashes:         1: 7NpzBwy2x3kNxguGn7sEMdln3k4.crl (hash: nYbTLgViWrZAVxZyB1RwQs8z0qZO0Ps/9ONQmjorCb0=)
                          2: 69482E56075411EFB23BE380C4F9AE02.roa (hash: v0xqswgei3klkM48UKau+ZFSqGoqNY8ubfB94GPpoto=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl
                          rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1952 (0x7a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5C43, serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E
        Validity
            Not Before: Mar 24 21:16:55 2026 GMT
            Not After : Mar 31 21:16:55 2026 GMT
        Subject: CN=69c2ff48-4495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:7b:08:1e:2e:c1:e6:5e:20:72:94:d2:ce:
                    e6:14:dc:8e:22:70:2b:c9:e9:a1:f4:7d:8e:a2:43:
                    f5:fe:32:99:4f:16:8c:84:ef:17:3e:ae:b0:1c:e2:
                    3f:1f:20:be:7a:03:64:1f:9f:ea:57:0c:77:9a:bc:
                    1e:c0:ff:03:c1:7e:af:bf:92:5c:cd:58:c7:10:ea:
                    8f:16:2d:d3:3f:a8:01:9d:47:26:69:37:50:93:c3:
                    86:f9:86:b9:2b:c8:ea:ef:04:ff:ef:86:e4:3d:03:
                    5b:ed:15:23:9e:3e:78:a4:ef:72:df:25:67:78:4c:
                    3f:f4:08:54:5b:5e:03:52:7a:5d:f2:ea:2b:9a:cf:
                    b9:59:9a:8c:51:91:78:1f:65:c7:0c:41:f6:96:c6:
                    e1:61:7f:0a:6b:00:63:af:e7:55:4e:ef:0c:c7:3f:
                    3c:47:19:96:60:89:19:aa:42:99:2e:33:40:71:94:
                    72:2f:a1:59:f4:5a:00:70:71:7c:f1:35:a9:c9:16:
                    c6:3f:e1:76:ee:77:7c:8b:75:5a:4f:92:84:28:ed:
                    79:37:95:4b:2f:45:10:f1:63:f9:ed:a1:83:b0:ba:
                    93:c4:77:b6:88:c3:af:b1:c0:67:bd:9f:03:07:9a:
                    28:f4:f3:3c:39:95:79:c0:2b:6b:4d:8a:cc:0f:d5:
                    bf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5B:AB:D7:38:3A:AF:9F:7C:65:95:BD:BA:D5:AD:E7:23:77:B5:D3
            X509v3 Authority Key Identifier:
                keyid:EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:a0:17:13:c9:a8:df:ee:8d:70:bb:85:6b:2f:18:7b:a0:61:
         72:e3:be:b6:9b:dc:21:f6:68:f9:c8:54:d7:cb:59:43:a1:dc:
         e4:21:0e:f3:24:03:21:39:67:17:d0:a1:0d:07:2c:84:ac:d2:
         25:57:28:5f:7d:88:39:3d:57:52:ed:cd:5d:09:f2:09:66:8d:
         9b:9b:fa:8e:40:2a:92:51:71:ee:c7:9c:68:96:8d:c5:4a:38:
         50:6b:c6:9e:ab:8c:17:0e:a1:01:a7:d8:a4:0a:21:e2:75:18:
         a2:90:05:63:63:3e:23:e2:d0:a6:33:84:6b:5e:41:af:b7:98:
         ca:b2:c8:64:be:e0:ab:85:05:89:35:fc:3b:2e:ad:f9:10:13:
         62:c5:fc:d6:f3:b1:14:c9:24:03:17:1b:6a:d1:54:40:bf:2b:
         51:22:27:50:03:e2:35:0c:cf:db:d8:56:f2:ef:fd:02:49:1b:
         1c:6e:ee:17:1d:88:7a:65:28:6a:89:5d:d4:63:5c:13:b6:79:
         04:58:12:56:2b:55:61:d7:54:1d:49:69:06:e7:23:49:e6:f4:
         6f:1e:a0:f4:67:57:6b:44:3a:02:5e:2a:aa:65:49:51:bf:78:
         b2:be:cb:71:81:2b:b5:dc:64:db:2c:82:9d:22:44:68:1d:c1:
         40:26:3f:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVDNDMxMTAvBgNVBAUTKEVDREE3MzA3MENCNkM3NzkwREM2MEI4NjlGQkIwNDMx
RDk2N0RFNEUwHhcNMjYwMzI0MjExNjU1WhcNMjYwMzMxMjExNjU1WjAYMRYwFAYD
VQQDEw02OWMyZmY0OC00NDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuEN7CB4uweZeIHKU0s7mFNyOInAryemh9H2OokP1/jKZTxaMhO8XPq6wHOI/
HyC+egNkH5/qVwx3mrwewP8DwX6vv5JczVjHEOqPFi3TP6gBnUcmaTdQk8OG+Ya5
K8jq7wT/74bkPQNb7RUjnj54pO9y3yVneEw/9AhUW14DUnpd8uorms+5WZqMUZF4
H2XHDEH2lsbhYX8KawBjr+dVTu8Mxz88RxmWYIkZqkKZLjNAcZRyL6FZ9FoAcHF8
8TWpyRbGP+F27nd8i3VaT5KEKO15N5VLL0UQ8WP57aGDsLqTxHe2iMOvscBnvZ8D
B5oo9PM8OZV5wCtrTYrMD9W/HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFENbq9c4
Oq+ffGWVvbrVrecjd7XTMB8GA1UdIwQYMBaAFOzacwcMtsd5DcYLhp+7BDHZZ95O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM0My84OUUzNkU2QTRC
MkMxMUVCOTExQkFENzBDNEY5QUUwMi83TnB6Qnd5Mngza054Z3VHbjdzRU1kbG4z
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdOcHpCd3kyeDNrTnhndUduN3NFTWRsbjNrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NUM0My84OUUzNkU2QTRCMkMxMUVCOTExQkFENzBDNEY5QUUwMi83TnB6Qnd5Mngz
a054Z3VHbjdzRU1kbG4zazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB6AXE8mo3+6NcLuFay8Ye6BhcuO+tpvcIfZo+chU18tZQ6Hc5CEO8yQDITln
F9ChDQcshKzSJVcoX32IOT1XUu3NXQnyCWaNm5v6jkAqklFx7secaJaNxUo4UGvG
nquMFw6hAafYpAoh4nUYopAFY2M+I+LQpjOEa15Br7eYyrLIZL7gq4UFiTX8Oy6t
+RATYsX81vOxFMkkAxcbatFUQL8rUSInUAPiNQzP29hW8u/9AkkbHG7uFx2IemUo
aold1GNcE7Z5BFgSVitVYddUHUlpBucjSeb0bx6g9GdXa0Q6Al4qqmVJUb94sr7L
cYErtdxk2yyCnSJEaB3BQCY/9A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:29:44 2026 by rpki-client