Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
File:                     7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft (raw, json)
Hash identifier:          5GJP+4bwbl5phg7ws0JJJzs1Kky2gI6k7DrTaa9NPhE=
Subject key identifier:   02:B2:63:FC:AD:DD:86:C0:49:92:1A:C0:83:09:11:95:E2:37:41:16
Authority key identifier: EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96
Certificate issuer:       /CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
Certificate serial:       0BBD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
Manifest number:          0BAB
Signing time:             Tue 24 Mar 2026 18:53:27 +0000
Manifest this update:     Tue 24 Mar 2026 18:53:27 +0000
Manifest next update:     Tue 31 Mar 2026 18:53:27 +0000
Files and hashes:         1: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl (hash: JOMlzY46bTqlsGbt0+XIy/YkLuJIy54XzKVIZZFoR1k=)
                          2: 34492F3A13A011F0B2541067C4F9AE02.roa (hash: O+Nxart/msHPIUG+f5HL+a0YYfI1EPFP2HyqAxZNDXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3005 (0xbbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCB3A, serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
        Validity
            Not Before: Mar 24 18:53:27 2026 GMT
            Not After : Mar 31 18:53:27 2026 GMT
        Subject: CN=69c2dda7-4f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:64:28:12:4d:e7:35:0c:82:05:f0:9d:25:22:
                    77:c3:f5:d7:15:84:c5:b2:4b:e4:3e:17:a5:2c:be:
                    57:a9:e0:de:dc:55:92:fa:35:ae:db:a3:3b:6f:31:
                    9f:1f:ae:2e:b8:37:be:fd:95:e5:ea:88:41:fd:eb:
                    a9:60:a8:62:94:e9:6b:92:20:df:fc:2a:50:ca:07:
                    dd:18:f6:dc:40:d6:38:e0:b5:d5:b9:d7:77:08:0b:
                    47:c3:c1:41:0d:42:fe:e8:9b:ab:8f:38:86:ef:fb:
                    19:75:d3:0d:db:e9:e5:b1:f6:8d:13:4c:50:65:53:
                    3d:8f:ab:45:65:85:c6:2a:34:e5:36:39:30:38:67:
                    07:79:d1:b3:c1:81:25:fd:21:bf:98:c5:9e:83:12:
                    55:43:59:bc:5f:89:70:55:d3:b8:18:78:c4:37:1c:
                    95:19:26:26:3d:18:f5:7f:98:a5:6b:2c:a1:5c:5c:
                    f3:65:cd:a5:47:f7:87:2c:bb:99:ac:18:c5:ae:5b:
                    dc:39:91:97:a9:54:0d:15:d4:92:69:75:5f:18:ec:
                    be:de:64:5b:60:bc:22:36:67:aa:a1:c8:4f:5f:ae:
                    74:78:ae:c5:dd:c9:bb:6d:22:61:06:c8:bc:89:88:
                    0b:26:b8:6a:20:48:5e:1f:87:6d:93:68:64:5c:4f:
                    9e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B2:63:FC:AD:DD:86:C0:49:92:1A:C0:83:09:11:95:E2:37:41:16
            X509v3 Authority Key Identifier:
                keyid:EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:58:d2:13:aa:bd:a3:71:66:a0:1e:d9:a8:12:23:a2:eb:ef:
         f0:a7:e8:34:76:b6:ec:03:b7:49:1b:cd:36:f3:37:1e:cc:03:
         8b:25:61:78:8e:5e:1d:90:03:c5:15:af:99:54:2b:15:fc:ba:
         92:e4:84:d7:33:0d:2e:2e:85:7d:34:b9:10:1c:41:d7:7d:df:
         e2:85:32:ed:28:6a:62:03:21:9a:7b:c0:3c:8c:90:57:ae:af:
         7f:d0:0a:87:61:79:0a:d6:26:c1:b8:f3:c1:d3:76:14:3a:60:
         4b:94:81:5b:8c:d1:32:6d:70:db:40:67:87:c9:60:27:eb:10:
         55:ef:b0:44:e8:93:39:da:ff:69:0a:c0:43:0b:a8:d7:03:1e:
         e6:9c:84:76:88:36:93:0f:32:8c:a4:b9:9e:cf:b5:dd:cd:7f:
         47:e1:05:3b:a8:38:01:16:4a:bf:dc:22:42:33:e4:15:d0:65:
         7c:1d:07:f4:98:9c:77:dc:a3:8d:b6:63:3f:73:6b:6f:22:d2:
         ff:72:c5:c6:d8:98:9f:0f:d8:a9:a4:e2:6c:c5:de:ef:20:e3:
         a8:7b:9f:f2:65:02:6b:3f:fc:71:c4:b2:15:75:cb:77:a3:c3:
         29:b7:c4:7b:19:d2:93:64:3f:b0:e3:d3:0a:2b:50:b5:f6:0b:
         18:ca:23:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:19 2026 by rpki-client