Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft
File:                     d7TYOLfSKf0cdNVYLHNekbVnteI.mft (raw, json)
Hash identifier:          Q4JfIUpJ6WegFc3oOyFxhd38AUV20iSLcWNDMHydB4Q=
Subject key identifier:   9A:07:62:2B:D7:A8:A2:1F:9D:D0:B2:6C:9E:D2:F0:21:81:17:93:14
Authority key identifier: 77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2
Certificate issuer:       /CN=A91D9EAC/serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2
Certificate serial:       0485
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft
Manifest number:          047F
Signing time:             Tue 24 Mar 2026 23:43:48 +0000
Manifest this update:     Tue 24 Mar 2026 23:43:47 +0000
Manifest next update:     Tue 31 Mar 2026 23:43:47 +0000
Files and hashes:         1: d7TYOLfSKf0cdNVYLHNekbVnteI.crl (hash: cIu+sXWT96+2hKoUvhD/v3hZpFonQ+qahsbdU9q1sR8=)
                          2: 55976FBE7F4A11ECB6E05A38C4F9AE02.roa (hash: w08VJUi5CefQQynwR14rmtPou1+FvnYMYqLoKJO6j8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl
                          rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1157 (0x485)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9EAC, serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2
        Validity
            Not Before: Mar 24 23:43:47 2026 GMT
            Not After : Mar 31 23:43:47 2026 GMT
        Subject: CN=69c321b4-7cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d9:c7:9e:15:db:3a:60:de:4b:77:5c:ef:3d:
                    32:df:48:a9:46:b6:dd:84:ae:c2:a4:6d:3b:0d:8a:
                    f7:73:6a:51:bc:ca:ca:00:d3:4e:9a:0f:88:a1:af:
                    39:e3:3f:df:95:5b:0f:7f:bc:bf:8a:09:33:48:54:
                    81:fe:d0:5d:e0:89:54:f0:76:3c:ff:79:c8:21:47:
                    28:4a:67:58:39:d4:ab:02:2f:52:b5:79:a5:d7:61:
                    79:3e:aa:a7:ca:2f:a6:88:bd:b8:54:91:3d:dc:36:
                    0b:e8:ff:6b:22:ed:f3:7b:56:6e:87:c3:9c:fe:25:
                    eb:43:46:4e:47:4f:aa:1a:eb:f3:f8:1b:39:3b:eb:
                    17:4f:50:ca:31:b9:f3:84:0a:ec:8b:0a:6c:ec:2a:
                    fd:82:01:61:19:d0:f1:4f:90:77:ec:61:06:41:8d:
                    98:5b:bf:a6:cc:ef:fe:40:c1:c7:46:fe:a6:ce:ea:
                    ef:72:07:64:19:d6:1c:93:20:f0:e7:76:66:6e:0e:
                    47:e1:71:d6:64:99:dc:4d:1e:d1:cd:9f:5d:0e:85:
                    f4:e2:93:f7:18:f3:74:ac:da:3e:a7:07:da:96:55:
                    bf:99:b5:8b:f6:3c:36:c0:6c:a6:b3:f5:94:14:3e:
                    58:55:c4:79:c7:a5:ee:72:5b:cc:e1:a4:9d:90:13:
                    d1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:07:62:2B:D7:A8:A2:1F:9D:D0:B2:6C:9E:D2:F0:21:81:17:93:14
            X509v3 Authority Key Identifier:
                keyid:77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c2:54:c2:83:0f:53:52:9e:9c:59:a8:8a:31:92:6e:e0:6f:
         fb:2b:a7:86:28:b2:91:10:ad:31:c5:17:02:68:bd:45:7d:de:
         b4:40:60:fb:30:b0:54:aa:e6:02:8e:8e:8a:d9:64:10:4f:1a:
         8b:f7:6a:62:05:85:a9:fd:29:73:c5:03:d6:5b:2b:04:31:25:
         d1:3a:f6:a9:be:93:1a:03:0d:ac:fd:d1:1f:1c:1a:ae:26:91:
         28:c3:0b:15:70:34:0e:b3:db:72:cd:ab:7d:29:34:58:e4:0d:
         61:bd:20:95:4a:1a:79:31:9d:11:44:65:fb:e1:06:d3:75:5c:
         f5:3a:ee:9c:66:9f:2a:a4:d0:34:f3:55:00:45:af:03:6f:d2:
         2d:58:94:46:4f:94:fb:d0:86:02:c0:52:ea:8f:6f:34:41:4a:
         cb:d1:a9:5c:cc:59:71:07:0b:f7:2f:6b:08:27:77:d4:70:cf:
         01:0b:21:ee:89:81:8a:4c:1f:99:4e:91:f5:aa:9b:1d:85:d7:
         40:5a:7b:bf:48:8f:bf:0b:77:ff:10:25:07:9a:12:6d:42:72:
         8e:97:df:ed:5d:2e:0c:08:59:5c:ee:6f:73:73:04:c9:b5:0e:
         6a:0b:50:16:d9:ca:96:83:2b:21:90:38:1c:9f:22:de:d0:87:
         4b:8f:39:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:09 2026 by rpki-client