Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
File:                     80xSFZH7LNAtxnvdctzyiwekL_Y.mft (raw, json)
Hash identifier:          /lRAfKz3otaxpJI7VgcvEG4ylMnVEeVyFu5J06CYAGg=
Subject key identifier:   D8:D7:56:4D:05:F8:7D:F3:8A:37:B9:1B:39:C5:51:DB:00:98:51:D5
Authority key identifier: F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6
Certificate issuer:       /CN=A91B8CE1/serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6
Certificate serial:       7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
Manifest number:          7C
Signing time:             Sun 05 Apr 2026 07:06:14 +0000
Manifest this update:     Sun 05 Apr 2026 07:06:13 +0000
Manifest next update:     Sun 12 Apr 2026 07:06:13 +0000
Files and hashes:         1: 80xSFZH7LNAtxnvdctzyiwekL_Y.crl (hash: UBPTQ501QDx+hhKQPAg9gSfOZyDqd0jTl4Te06RqExg=)
                          2: 5C2EA0E477D111F0940AFF7AC4F9AE02.roa (hash: y9XglzGcT/yANEywLEKFOF3/z+vv31d43TaG6CEceQI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8CE1, serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6
        Validity
            Not Before: Apr  5 07:06:13 2026 GMT
            Not After : Apr 12 07:06:13 2026 GMT
        Subject: CN=69d209e6-db7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:9c:6d:e4:9a:a3:53:c5:7c:7a:19:71:74:
                    a6:e5:ac:d1:85:eb:0e:b0:09:f3:b7:22:fd:a6:b4:
                    1f:ac:63:cd:89:d3:e0:a7:eb:6b:71:e1:e7:3d:92:
                    0b:1b:3d:86:ee:b4:cb:e8:c9:9f:b1:8d:f8:15:b1:
                    6b:67:71:35:12:e7:2b:d7:93:d5:3a:c8:e3:ab:c1:
                    fc:aa:6c:48:a9:d4:e8:3a:ae:00:29:2c:4b:bc:fb:
                    bf:cb:9b:cc:b1:27:60:c6:cd:fc:60:45:a5:91:b5:
                    f4:b1:9c:e3:69:30:3b:c7:d1:f0:08:f2:29:e8:17:
                    87:21:f5:b3:8c:27:da:95:55:bb:49:69:a0:f1:df:
                    43:3f:15:97:94:3e:90:b6:b1:1f:00:27:12:69:b6:
                    68:89:59:5a:34:21:e7:31:ba:b4:eb:8d:83:f4:d3:
                    96:e1:d1:79:45:88:c8:a7:d6:be:06:98:1e:58:6a:
                    36:01:e4:d0:ff:fc:61:92:19:b6:92:ed:92:3c:c0:
                    02:da:da:e3:34:92:d9:77:7f:e8:80:e3:13:30:53:
                    c2:3e:c1:b4:b1:d6:c5:e8:20:52:3f:5d:1d:d2:cf:
                    93:97:ac:c9:84:b7:f6:ba:ce:1b:af:df:ac:5e:fb:
                    9e:1f:57:18:cc:f9:26:a9:2c:dc:58:91:d1:ca:4d:
                    7d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D7:56:4D:05:F8:7D:F3:8A:37:B9:1B:39:C5:51:DB:00:98:51:D5
            X509v3 Authority Key Identifier:
                keyid:F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:34:a1:01:62:98:dc:2f:94:9d:06:50:a2:b5:a7:7c:d4:85:
         ce:15:d0:d2:07:be:d3:e6:46:de:01:e8:62:e6:69:cf:38:cb:
         b2:a9:59:80:b3:ca:65:42:ed:12:ea:b5:ed:79:cb:45:5b:69:
         d9:b9:ed:9a:da:39:33:34:6e:48:81:26:eb:04:42:d7:b8:8e:
         e8:46:b0:6f:a8:72:ba:3a:f2:35:00:9e:72:24:4e:35:bd:dc:
         86:69:bf:0f:3c:d6:17:3d:9a:58:7d:1c:a1:06:f4:2c:2e:3e:
         4d:24:4e:74:77:59:96:c5:b7:07:14:bf:8e:6c:75:9f:6b:99:
         04:13:9b:16:c4:af:75:77:3c:91:83:5c:27:6d:9f:c7:f5:bf:
         56:bc:ad:9b:8b:2d:d5:d5:35:c9:3c:65:9c:9e:90:17:e1:70:
         a6:6b:6a:60:3a:5c:f1:72:bf:4a:bc:f1:19:15:6a:ee:5b:42:
         98:36:50:33:eb:75:cf:4a:ec:19:73:a7:b6:a4:94:a8:56:1a:
         3a:0f:49:b2:0c:90:1c:ab:5c:2b:72:5e:f0:0e:5c:d9:d4:a8:
         89:10:cd:48:94:cc:7d:ec:16:1f:36:71:06:24:2f:3d:b1:2d:
         e9:94:d6:b4:e4:2c:05:3e:76:bf:f3:c5:92:10:88:29:d1:58:
         4c:67:2a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:52:07 2026 by rpki-client