Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft
File:                     rHzRY2nXDaZnWZ2jaOICQknLAvw.mft (raw, json)
Hash identifier:          KgWaeN7Gkd5X62EYoseIJHo9nE78ElX3xpDdl1vQ3CM=
Subject key identifier:   FD:03:A3:FE:69:53:F3:35:6B:AB:FE:68:20:B9:A6:82:EE:18:75:22
Authority key identifier: AC:7C:D1:63:69:D7:0D:A6:67:59:9D:A3:68:E2:02:42:49:CB:02:FC
Certificate issuer:       /CN=A91FB4F7/serialNumber=AC7CD16369D70DA667599DA368E2024249CB02FC
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rHzRY2nXDaZnWZ2jaOICQknLAvw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft
Manifest number:          7E
Signing time:             Mon 11 May 2026 07:47:58 +0000
Manifest this update:     Mon 11 May 2026 07:47:57 +0000
Manifest next update:     Mon 18 May 2026 07:47:57 +0000
Files and hashes:         1: rHzRY2nXDaZnWZ2jaOICQknLAvw.crl (hash: 2kHZfzMJBQ3ykqJtggVsnVSLcSJ9AaeJa0mWCA/hy3g=)
                          2: 53AEC77E8C7511F0BEEC137FC4F9AE02.roa (hash: TEkM5L9gYDSbXl7l7QCjyJ+tRJyP8a0ZBB6nUCwEyKY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.crl
                          rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rHzRY2nXDaZnWZ2jaOICQknLAvw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:47:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB4F7, serialNumber=AC7CD16369D70DA667599DA368E2024249CB02FC
        Validity
            Not Before: May 11 07:47:57 2026 GMT
            Not After : May 18 07:47:57 2026 GMT
        Subject: CN=6a0189ae-3e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bb:b4:79:23:64:7a:70:8c:e0:96:ed:5a:80:
                    84:62:c1:e1:25:ed:bd:1b:b6:44:07:de:d0:14:e3:
                    85:f0:8e:0e:4d:a1:22:6f:5a:8d:10:fc:1c:c0:03:
                    ee:be:06:99:46:f1:9b:88:76:e9:f8:97:f2:22:e2:
                    f9:c5:d7:69:0e:7d:48:b9:06:6b:ce:3b:ac:04:fd:
                    02:ff:28:4e:06:df:33:ac:7e:5b:d8:a1:b8:8e:8a:
                    f0:e8:d3:c4:d7:ec:bd:77:4b:f9:18:c7:49:aa:97:
                    2c:ac:9c:16:95:0d:3f:77:c2:b1:7f:6c:3c:df:c6:
                    39:53:79:b2:37:db:b4:6f:2b:78:97:79:4f:2b:65:
                    b7:0d:6b:00:6b:96:dc:e6:af:9f:d5:7c:6a:5e:23:
                    d0:4f:f6:2f:9c:36:6f:81:43:42:f0:04:27:66:c1:
                    64:65:29:59:1c:89:70:dd:c6:7d:b0:52:a3:5f:05:
                    33:69:ec:bc:3b:55:9f:6d:2f:24:8a:2d:60:a7:aa:
                    9c:96:8e:c5:17:ba:20:e4:c3:0f:4d:bf:57:31:40:
                    55:26:a4:c1:09:7b:1c:8f:5e:2b:a5:70:06:48:fe:
                    df:5b:6f:d9:00:1a:8f:74:fe:a3:f5:25:b8:75:93:
                    5b:af:33:f4:4a:e4:bc:4c:2f:e5:b2:7a:2c:66:19:
                    53:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:03:A3:FE:69:53:F3:35:6B:AB:FE:68:20:B9:A6:82:EE:18:75:22
            X509v3 Authority Key Identifier:
                keyid:AC:7C:D1:63:69:D7:0D:A6:67:59:9D:A3:68:E2:02:42:49:CB:02:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rHzRY2nXDaZnWZ2jaOICQknLAvw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:54:72:e1:3a:43:d8:2d:78:72:ec:e9:4e:06:58:76:ea:38:
         2c:f8:1e:b7:ba:ea:5e:01:fe:7b:e4:a0:1f:3b:a9:79:cf:c8:
         22:ce:96:45:29:40:d2:fd:28:fa:70:e4:07:2c:1f:39:8b:05:
         96:8d:96:3f:38:60:70:61:25:90:48:13:4f:ca:fe:c9:2b:5d:
         f4:af:e7:45:54:85:28:6f:74:ef:56:94:85:f5:cd:f2:95:6a:
         6c:0c:05:a8:ea:a4:2c:ad:25:0e:74:ec:b3:6f:5f:6e:c9:9d:
         a9:95:de:dd:9b:27:77:cc:af:41:a8:76:3e:be:3d:51:53:52:
         e1:55:c7:f4:f3:ec:d2:05:98:46:41:27:22:3e:2c:98:ad:f0:
         7c:35:63:a6:7b:a8:f5:64:8d:ea:1c:d2:1e:c2:23:7d:3b:a3:
         06:29:50:ee:21:6f:df:f9:7e:67:79:5a:e5:d7:ce:21:a6:87:
         17:00:d5:9c:c3:64:98:55:a6:31:8a:68:0e:d9:39:06:c2:7a:
         f7:ab:68:06:af:5f:a3:cb:a1:1b:78:af:1a:9d:06:07:d0:63:
         8b:f8:29:0b:15:9a:34:c7:93:2a:2c:8a:e7:9a:8c:00:1e:a7:
         6e:66:67:fc:86:6f:47:d9:77:16:3d:9d:0f:75:ab:92:5a:d5:
         02:ee:6c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:57:25 2026 by rpki-client