Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
File:                     7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft (raw, json)
Hash identifier:          PbbJm9hkKX7hd7KJC/Iz6pqVNXGVs7v3Wz2AvP9uVHc=
Subject key identifier:   27:F5:D6:F8:37:7A:33:0A:C9:FF:EC:76:8E:BD:B4:6D:68:E7:43:44
Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
Certificate issuer:       /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Certificate serial:       01A7
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
Manifest number:          0198
Signing time:             Tue 24 Mar 2026 23:28:10 +0000
Manifest this update:     Tue 24 Mar 2026 23:28:10 +0000
Manifest next update:     Tue 31 Mar 2026 23:28:10 +0000
Files and hashes:         1: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl (hash: B6D4dSCCMWuzijcJQmQ8IYXzzEM318iMBZBUb46SZf0=)
                          2: D66D72562EAB11EF9B369566C4F9AE02.roa (hash: Jpr2rdfDo4+UmyigrHHOPqRZP94BLcmyPwbnjdRwNGQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
                          rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7BDC, serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
        Validity
            Not Before: Mar 24 23:28:10 2026 GMT
            Not After : Mar 31 23:28:10 2026 GMT
        Subject: CN=69c31e0a-6a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8a:87:52:0f:bc:ad:e1:01:c6:14:f6:28:4d:
                    53:db:6f:8e:46:5b:e5:d7:52:b1:99:92:31:e1:5d:
                    05:96:c3:b9:66:b1:11:5f:3a:9a:51:4c:05:f9:29:
                    38:d9:1f:45:e2:70:45:8e:f1:5a:18:82:81:66:22:
                    77:22:78:df:d3:a8:c0:25:22:9a:a2:7d:59:55:80:
                    58:ea:67:44:9e:7a:d6:e7:c9:c1:aa:60:04:ed:2e:
                    c6:61:15:98:16:da:90:38:0a:9c:5c:f3:2f:10:3b:
                    77:e2:dd:06:e5:b1:e7:df:65:4e:a4:1d:45:9c:39:
                    e8:ec:cd:26:7e:06:b7:00:e0:78:04:94:68:df:5b:
                    b0:8f:25:2d:96:d8:83:a5:88:77:0b:6d:17:b2:89:
                    0b:e8:cf:42:12:70:9d:eb:7f:5d:ab:88:38:be:31:
                    8c:70:7d:59:6c:a0:44:5a:d2:34:a6:e0:ed:55:7c:
                    2c:29:99:df:e4:6c:31:67:fa:e4:64:b3:ee:b5:b2:
                    07:e0:02:b0:36:f8:4a:b9:62:91:bf:e1:97:50:cb:
                    b0:60:03:c4:cb:e8:89:73:ba:6e:ef:ce:67:c3:ce:
                    5a:57:6a:cf:cd:1c:09:ea:62:5c:64:85:bc:0d:5d:
                    a4:0c:65:16:96:27:77:4b:02:bf:73:e0:1b:29:f7:
                    a1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F5:D6:F8:37:7A:33:0A:C9:FF:EC:76:8E:BD:B4:6D:68:E7:43:44
            X509v3 Authority Key Identifier:
                keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:98:f5:b3:ad:ed:17:3a:ad:fa:f4:68:bc:08:75:d5:1b:6a:
         1f:51:84:97:bb:c6:76:60:3d:48:20:32:7f:f6:a2:59:a9:e7:
         7d:d1:63:05:3e:1d:8e:3e:ae:20:a7:3b:83:0e:61:af:22:b2:
         37:ed:f2:71:1f:13:a3:56:68:1f:bb:b2:74:c0:ce:32:fa:90:
         19:5c:9d:09:b2:09:55:65:63:e4:77:b5:d8:4d:72:4a:14:40:
         37:9e:50:7b:38:df:6b:cf:56:04:f4:5e:a7:c7:61:38:44:de:
         66:6d:f4:ad:e7:3a:e9:62:5c:85:ae:3f:d2:9c:a2:12:53:98:
         bc:55:97:93:8d:48:ac:73:cb:13:29:60:54:92:6d:ba:6e:1a:
         d5:f0:1b:ce:2c:f8:5f:9e:c5:34:a6:6d:65:05:0d:ee:02:6e:
         1e:d7:bf:35:0d:50:c4:00:aa:ce:29:16:1f:33:16:51:fd:33:
         0d:dc:1c:61:65:8a:9c:b1:10:2d:aa:6f:c0:f2:9c:f9:e2:28:
         8a:bc:65:8f:07:a2:25:84:b0:10:a5:63:30:e2:d7:64:31:c8:
         91:26:b4:0a:53:ee:7e:22:95:d1:af:43:f7:54:f7:e8:fe:65:
         d8:e6:5d:f3:58:d5:ec:86:07:82:e3:7f:86:eb:b6:6c:70:5b:
         cb:f4:3d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:10 2026 by rpki-client