Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft
File:                     frs7Qcl_MxP654HvYzI8SvYrj7c.mft (raw, json)
Hash identifier:          7EPudwf8pwpMGrmJJ8vAJAL9IhpH/uPLqZXoJrv4gXg=
Subject key identifier:   A2:F0:E6:6D:88:B0:A5:03:8C:E5:02:0B:A2:CD:78:EE:4A:DC:3B:1C
Authority key identifier: 7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7
Certificate issuer:       /CN=A91B777C/serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7
Certificate serial:       0695
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft
Manifest number:          068B
Signing time:             Tue 24 Mar 2026 22:12:45 +0000
Manifest this update:     Tue 24 Mar 2026 22:12:44 +0000
Manifest next update:     Tue 31 Mar 2026 22:12:44 +0000
Files and hashes:         1: frs7Qcl_MxP654HvYzI8SvYrj7c.crl (hash: Xs9Xx28DzUQZY1Yyfuekn4q9eV9l3Zn+lGSZUZEuU0o=)
                          2: 10BBF6CEB2E711EB8A61B44EC4F9AE02.roa (hash: LlAxmx0MZOZXkYDGM7WfPfc87Y4FEp6wboWMmKmjFlo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl
                          rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685 (0x695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B777C, serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7
        Validity
            Not Before: Mar 24 22:12:44 2026 GMT
            Not After : Mar 31 22:12:44 2026 GMT
        Subject: CN=69c30c5c-9c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fb:f6:0c:16:c8:cc:c4:a9:59:25:6c:df:aa:
                    2e:fc:17:34:8e:30:2e:9d:a5:d7:12:73:c1:fd:15:
                    cf:31:9a:21:38:fe:c2:52:94:d5:58:47:31:1d:7c:
                    39:dc:d2:c3:92:ad:46:bb:b2:3f:52:22:f9:45:ca:
                    21:52:08:a9:0a:2a:43:6b:bc:31:65:55:cc:28:64:
                    4c:fc:ad:c3:f9:3a:64:1a:c9:5b:ef:b2:20:39:5a:
                    82:6f:a2:50:f1:8d:dc:2c:d3:e5:55:df:8f:9f:e7:
                    d3:2e:0f:b2:28:35:e7:54:54:1f:1c:b3:40:2b:2e:
                    27:06:d6:c7:bb:f9:cd:6d:48:e5:3b:5f:45:27:01:
                    d6:98:91:56:3b:f5:43:6e:86:b3:c8:e5:0b:db:bc:
                    88:3e:87:e0:af:b2:ed:90:e7:0b:be:3d:30:35:cd:
                    3f:0a:b4:59:de:68:f1:5a:9b:ae:ed:56:04:7e:0d:
                    76:52:39:1c:e8:50:77:2f:e2:21:cc:49:56:b2:5a:
                    7d:ad:cc:f3:d8:7c:2d:a4:de:62:bd:d5:c7:53:15:
                    d4:2d:e8:07:61:96:3e:4e:ec:f8:1d:26:62:fc:ee:
                    54:5f:82:cf:01:8e:c8:0a:9c:6e:07:69:1e:b2:f8:
                    4e:2f:fa:d8:9a:89:a2:fa:9a:77:b0:26:70:34:64:
                    1b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F0:E6:6D:88:B0:A5:03:8C:E5:02:0B:A2:CD:78:EE:4A:DC:3B:1C
            X509v3 Authority Key Identifier:
                keyid:7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:69:e0:5d:d5:9b:59:1d:6f:8f:fc:7f:55:ef:94:c5:d1:c6:
         4f:76:00:36:5a:0f:47:e6:0f:c2:7d:d0:fc:c6:8b:ba:4e:ea:
         e6:a9:90:4d:d8:a8:9b:78:40:e8:fd:7e:05:9c:1d:c9:53:71:
         20:db:f5:84:c5:e2:94:3e:e6:86:f8:50:55:0b:33:d0:e9:9f:
         4e:a0:c6:b0:9d:f0:7d:bb:e9:78:fc:06:6d:33:01:b2:65:1a:
         28:48:46:a1:2d:5d:9f:6c:5a:b8:6e:5c:76:b9:7c:59:37:c6:
         d7:e0:3c:9b:2c:3b:da:64:f4:59:93:1b:2a:d6:c2:67:a2:e0:
         01:e1:25:48:73:28:a8:76:ad:46:bb:c2:5e:84:3a:64:46:ee:
         ae:e1:e6:50:f9:9b:ef:0b:c3:9c:75:da:19:fb:ac:cf:93:3e:
         13:20:47:17:97:97:fb:e0:f8:f7:9c:dc:9f:5f:e2:8c:da:9f:
         90:4c:31:8c:c4:d4:14:16:0d:b1:51:a2:ec:20:c4:a6:84:3e:
         81:3d:3c:31:77:fa:87:8f:0b:c4:29:3c:d0:d1:d0:a0:c4:69:
         83:e9:67:33:96:dd:0c:0b:78:ee:dc:17:d2:18:de:cf:27:cb:
         51:5a:f3:ff:12:34:a9:ff:4b:92:b6:c8:a6:a9:bf:6a:e4:ab:
         06:e9:0d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:48:11 2026 by rpki-client