Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
File:                     7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft (raw, json)
Hash identifier:          B0DdKtwD+WFfc/mMzJJxcECV+8aq8wQvyXY5fIVxyzA=
Subject key identifier:   E1:4B:66:90:C8:4B:EA:9E:A0:E4:11:5C:BE:BE:EA:7F:63:BA:2B:06
Authority key identifier: ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C
Certificate issuer:       /CN=A91BAA24/serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
Manifest number:          C3
Signing time:             Mon 11 May 2026 07:04:42 +0000
Manifest this update:     Mon 11 May 2026 07:04:42 +0000
Manifest next update:     Mon 18 May 2026 07:04:42 +0000
Files and hashes:         1: 7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl (hash: 70m5kM4oasaYLZ4dJlJEcoVwYWxooNOLYFEHdaYcfNU=)
                          2: 28C2D6002BCB11F0A99C1E60C4F9AE02.roa (hash: wZY9Z53hRF1cqshdzTDBoy+lSHOx94QEX/gy6wO+8wM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl
                          rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAA24, serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C
        Validity
            Not Before: May 11 07:04:42 2026 GMT
            Not After : May 18 07:04:42 2026 GMT
        Subject: CN=6a017f8a-2ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5d:71:9c:ab:62:cc:7c:5d:33:08:d9:d5:bc:
                    4e:6c:dd:76:99:ee:38:3f:07:00:98:04:00:8d:78:
                    1f:3b:a3:69:3f:08:09:75:8f:1b:88:de:a4:23:a0:
                    f2:30:0e:21:32:25:9a:f6:03:63:bd:fe:de:dd:a0:
                    d5:74:25:e7:ae:c9:7f:35:9c:89:aa:cc:7f:4e:c7:
                    80:01:4a:3a:22:b6:da:5e:19:1a:a6:9c:59:e5:6f:
                    2f:44:60:a3:e4:20:46:56:58:4b:78:d4:7b:a6:ca:
                    d5:97:a9:22:b0:bd:28:a3:eb:f5:a9:bf:07:b6:0e:
                    99:4c:f7:68:1d:7c:50:51:48:b0:e5:82:d8:df:7f:
                    b6:1f:0a:9b:68:53:75:24:4b:48:20:e9:2e:a0:53:
                    e5:b5:66:be:40:c1:85:6c:0e:0e:0e:47:45:8e:a2:
                    cf:fc:06:08:db:b3:c3:62:8c:38:c3:11:4f:65:e9:
                    72:ab:4c:b7:fb:3e:70:70:3e:5b:b4:31:0e:56:cd:
                    12:f5:fb:1c:26:5d:eb:63:65:6e:7a:1a:06:13:ce:
                    8e:bb:47:c1:f1:a0:13:56:fe:59:a1:a5:8e:0e:6a:
                    71:fc:08:91:33:24:e0:e3:ef:3e:80:3f:0b:1f:ed:
                    70:7e:2d:57:a6:fc:08:90:d6:55:c0:e4:55:28:57:
                    d7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4B:66:90:C8:4B:EA:9E:A0:E4:11:5C:BE:BE:EA:7F:63:BA:2B:06
            X509v3 Authority Key Identifier:
                keyid:ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:69:f8:90:65:44:ff:a7:b8:b0:45:20:fe:60:fc:c5:9e:29:
         99:ed:3c:57:75:ac:ea:f1:af:45:93:aa:3d:0e:38:50:a7:34:
         0a:06:08:d8:2e:9e:b0:19:97:14:bb:5c:84:c5:26:5b:d6:16:
         6b:7a:e2:08:31:73:ee:21:1c:43:ff:b3:ac:ed:71:02:f8:57:
         92:ac:3b:40:72:74:77:31:08:8c:65:d4:a0:30:47:a2:0f:71:
         58:2f:50:87:b3:03:85:6b:88:cc:d4:3e:4f:40:cb:b0:a2:b1:
         d8:5c:61:29:60:6f:89:05:55:f5:1b:cb:c3:5b:c4:83:d5:6c:
         8b:29:a3:bc:cd:fa:bd:a3:ef:f0:57:ab:98:ec:3e:f7:51:fe:
         97:74:3e:dd:7b:f7:29:e9:22:07:ff:2f:7d:5f:8c:0c:03:d7:
         21:b6:dc:5e:0d:5c:80:23:bc:73:c3:c0:5a:4e:b1:53:4d:6e:
         fc:ba:ee:9f:cc:86:04:2e:03:7e:02:23:b1:0a:2f:99:0e:48:
         a5:1e:44:a8:45:f4:b2:15:3c:c6:d1:f1:30:ef:1e:7e:98:e8:
         85:34:52:99:33:53:ea:4d:13:b8:f0:76:8a:cb:5b:78:c0:7d:
         20:d6:44:60:0f:67:d9:29:9f:c2:e6:2c:92:01:6d:a9:2b:bf:
         75:dd:6f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:36:42 2026 by rpki-client