Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
File:                     n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json)
Hash identifier:          eW8F0JfnIAZiqiB/PnWLFufaxAVF/EPYHt9Wq6K8Y9Q=
Subject key identifier:   20:93:C6:92:E4:39:FA:BC:70:14:93:11:BA:55:10:2E:6C:A4:B8:02
Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72
Certificate issuer:       /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
Certificate serial:       10FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
Manifest number:          10E9
Signing time:             Sat 04 Apr 2026 17:11:36 +0000
Manifest this update:     Sat 04 Apr 2026 17:11:35 +0000
Manifest next update:     Sat 11 Apr 2026 17:11:35 +0000
Files and hashes:         1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: qEol+rjnu27Y4oMFWci6hkTsdK6dgELEwUqZhgjmC/U=)
                          2: C0D0F162FFEB11F085398A1A766F56BC.roa (hash: bB2TgHBXpBSWMFo/NWTJDUu8mZcJxhOZBaZbScA7lZM=)
                          3: BFD9F81CFFEB11F085398A1A766F56BC.roa (hash: COcewJwinDbkxeEAlt0aEDN3t7qgwxUzyHis29aNdTw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl
                          rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4349 (0x10fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
        Validity
            Not Before: Apr  4 17:11:35 2026 GMT
            Not After : Apr 11 17:11:35 2026 GMT
        Subject: CN=69d14648-3950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bf:db:c8:61:3f:b7:33:b3:2a:df:bc:08:38:
                    fd:f0:7c:a9:69:56:e9:5e:28:1e:ce:e8:5f:56:12:
                    ef:cd:87:96:68:2a:7a:67:e5:a2:bd:a5:90:ce:42:
                    30:6a:61:b0:a4:d6:f2:ae:fa:bc:d8:e0:b5:3c:1e:
                    1b:b1:d4:18:72:e4:90:58:01:13:ac:73:66:b7:2a:
                    31:6d:da:73:93:07:4d:84:06:01:d8:3c:17:c6:31:
                    71:5f:06:a2:c8:d8:2a:cd:92:7c:03:aa:04:1f:c3:
                    40:7a:49:00:79:47:28:44:72:bd:c5:b0:88:ac:5f:
                    4e:7c:36:02:4b:a7:31:78:07:7a:4f:29:25:ca:6f:
                    0b:dc:c2:a7:3c:b1:d8:3f:49:76:75:ca:ac:51:ed:
                    76:d0:52:5b:d9:24:f3:18:75:66:14:f1:c1:0e:cf:
                    95:46:20:d7:46:66:6f:9e:7e:30:d3:24:2c:35:21:
                    ab:a5:a3:8f:cc:e3:d8:f6:54:12:94:25:05:77:98:
                    d6:06:a6:e4:a8:8d:8c:94:de:b9:8f:cb:8d:31:3c:
                    6e:2e:86:fd:10:2b:a4:01:a0:74:a5:94:fc:c8:ad:
                    f6:9f:eb:10:15:02:c6:58:2a:05:3c:ba:13:00:00:
                    33:01:08:c2:df:92:2a:1b:2f:6e:6a:38:67:f5:65:
                    2e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:93:C6:92:E4:39:FA:BC:70:14:93:11:BA:55:10:2E:6C:A4:B8:02
            X509v3 Authority Key Identifier:
                keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:91:51:04:5d:40:91:24:fc:15:f7:f0:d3:15:73:9a:c9:68:
         54:72:5a:f0:04:79:0b:79:36:36:a7:49:03:51:a8:cb:8c:c7:
         e9:dd:ff:ab:21:60:e2:ff:0e:bd:d2:ba:2c:cf:3d:ec:6b:b1:
         b8:e8:db:40:f1:bd:18:32:6b:bb:5c:67:8f:e1:5f:ce:c6:4b:
         f2:98:ce:4b:a8:47:96:b0:64:ce:bc:0e:91:b1:d9:04:a3:84:
         2f:39:99:57:55:cb:ff:d5:7b:ab:98:2c:88:cd:a6:66:04:7a:
         79:8b:02:c2:82:de:c4:26:74:30:b7:21:00:77:66:8c:b0:a7:
         e7:5f:26:e2:e8:2e:11:88:6d:18:0a:65:8c:17:2f:30:48:c3:
         9d:c9:7e:a6:cc:4f:8f:f8:e6:dc:e1:14:0c:d8:64:0e:c1:15:
         65:2c:1b:21:f5:a4:00:1b:f1:68:66:51:cd:3d:65:15:ae:52:
         36:47:86:8f:0b:cd:98:36:63:61:71:eb:08:48:b7:d9:3b:e0:
         76:82:2a:a2:59:91:f3:33:a4:f8:88:c4:1a:b8:b9:25:90:5c:
         15:15:00:5f:15:7d:c7:1a:cb:1f:7b:d1:3e:1c:28:46:56:40:
         8a:89:9e:09:5a:9d:94:47:0d:45:4f:37:e3:99:f9:fb:1b:22:
         81:3f:52:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 05:55:29 2026 by rpki-client