Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
File:                     mgI7gKvPTmeX04jA3oFgoW6xXf4.mft (raw, json)
Hash identifier:          ewJbbahflvEGDCg/mEdbY4l6qjUJ7UDmi5B4jY2OCsg=
Subject key identifier:   61:76:57:33:E7:B6:1E:80:44:E0:7B:B0:34:F1:61:67:56:C4:9D:FB
Authority key identifier: 9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE
Certificate issuer:       /CN=A91EF6EF/serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
Manifest number:          A7
Signing time:             Mon 11 May 2026 07:25:29 +0000
Manifest this update:     Mon 11 May 2026 07:25:29 +0000
Manifest next update:     Mon 18 May 2026 07:25:29 +0000
Files and hashes:         1: mgI7gKvPTmeX04jA3oFgoW6xXf4.crl (hash: MJTG7JFtpzW0DgzkAhUnX3/uV5/nVilJlQe6pTlgqK8=)
                          2: 3C15F928579311F0B296C030C4F9AE02.roa (hash: BNr56w4gucIUPsbq13wgpUL195UkxJVM3QKa9wUEfME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl
                          rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF6EF, serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE
        Validity
            Not Before: May 11 07:25:29 2026 GMT
            Not After : May 18 07:25:29 2026 GMT
        Subject: CN=6a018469-5ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:78:41:7b:5e:2b:47:57:0a:50:79:77:31:71:
                    78:35:9a:a9:0a:67:e6:a9:51:bf:34:48:33:32:44:
                    b4:05:79:4e:09:7d:ac:84:23:e9:08:8f:28:bd:91:
                    e7:c1:7b:64:6d:e6:0f:36:bc:c6:f9:ea:ca:a0:33:
                    94:d1:2e:5b:bf:82:fa:88:af:3c:1e:18:15:82:9e:
                    5b:a7:9e:60:6e:44:cf:32:c6:22:13:33:d0:f4:a2:
                    9b:24:a9:8d:ef:3e:69:ac:8f:ce:8f:55:dc:dc:1f:
                    f5:d2:5f:70:d7:d4:88:86:f8:8f:dd:55:f4:9d:77:
                    22:42:8c:09:23:e2:2d:ec:45:db:2d:15:1a:3a:9c:
                    01:7e:11:72:7e:c0:ff:2b:a3:e9:f3:4a:20:89:74:
                    01:36:c1:c3:da:66:ec:f1:44:22:16:52:85:99:1a:
                    a6:60:bc:06:c6:38:fe:f7:15:cf:1a:ee:33:4e:04:
                    b8:68:36:6b:1c:b4:ed:f0:40:a9:7a:e3:cd:3a:8b:
                    c7:13:25:bc:17:d7:33:67:9a:f6:c9:d8:d7:f6:cc:
                    de:40:c8:38:61:4a:5b:b4:11:83:88:59:3f:a4:d9:
                    fd:32:b8:0e:83:98:75:52:c1:62:08:78:6a:27:c6:
                    5e:57:54:41:79:59:50:4b:99:f9:ff:5c:4b:76:61:
                    44:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:76:57:33:E7:B6:1E:80:44:E0:7B:B0:34:F1:61:67:56:C4:9D:FB
            X509v3 Authority Key Identifier:
                keyid:9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d9:e8:6c:90:1f:20:25:f1:de:ec:e3:c6:2b:0a:f3:73:f6:
         99:58:d2:85:96:f2:6b:54:69:1b:3a:60:2c:b5:10:09:81:0a:
         aa:36:88:bf:3a:ac:5b:98:53:f2:84:26:34:43:f4:e2:eb:f8:
         37:cb:b8:53:2f:e3:af:19:be:53:e2:ce:db:1e:c9:01:b4:1e:
         1c:90:18:5b:74:e5:fb:3d:ac:8f:4f:9b:fa:8c:77:fb:d1:bc:
         3e:85:b5:fb:96:22:19:d3:15:60:f5:b4:d4:65:01:b9:6c:8c:
         3e:68:f5:85:cf:7a:bb:03:6d:63:ab:b9:dd:d8:ca:71:97:60:
         cd:3e:38:1a:05:42:5d:6f:48:2e:fc:6a:47:2e:e7:6a:56:c7:
         23:3a:70:23:1b:a9:74:a4:7f:4d:84:90:f2:dd:1e:be:ad:71:
         6c:f8:96:de:f6:8f:98:f1:8c:ea:f3:d0:9c:0b:ea:6b:7d:b3:
         15:f1:52:3a:50:1e:8a:b9:a6:99:23:c5:ce:e4:0a:df:aa:f3:
         c9:7d:ad:a6:a6:c1:76:9a:4f:7a:23:62:4a:27:d2:8b:62:3b:
         09:9b:82:79:7b:b3:a1:f8:3b:73:d5:ee:54:97:d9:80:84:a2:
         22:a2:05:88:f9:d6:8c:22:d4:04:18:4e:52:01:d9:1a:2f:e6:
         85:e8:44:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:50:04 2026 by rpki-client