Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
File:                     07TuvD2fWh6iApZpmumSiBsdjf0.mft (raw, json)
Hash identifier:          kBYj7ygkl4rQ/v8kZsZfGimwN5uk4pPNTrtQO6DgFDE=
Subject key identifier:   F9:78:35:0D:CF:10:D5:40:D7:44:11:C9:9A:91:03:4C:CF:06:30:E1
Authority key identifier: D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD
Certificate issuer:       /CN=A91CD4E0/serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD
Certificate serial:       06F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
Manifest number:          06F2
Signing time:             Sat 04 Apr 2026 14:47:28 +0000
Manifest this update:     Sat 04 Apr 2026 14:47:28 +0000
Manifest next update:     Sat 11 Apr 2026 14:47:28 +0000
Files and hashes:         1: 07TuvD2fWh6iApZpmumSiBsdjf0.crl (hash: XgbKDsvrtCD2pFJTgkbqphvTnTSZDWutOnUywaAx+ig=)
                          2: E969742CB33B11EEB4D87842C4F9AE02.roa (hash: 7lIGItgwakyIm1ogfbfmJas4qk4ZwY4pDMQ8JsNuNZY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl
                          rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 14:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1783 (0x6f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD4E0, serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD
        Validity
            Not Before: Apr  4 14:47:28 2026 GMT
            Not After : Apr 11 14:47:28 2026 GMT
        Subject: CN=69d12480-5a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cd:5e:ac:b2:7a:14:b5:7a:df:d2:ea:e7:6f:
                    93:1f:07:ae:57:fd:3f:49:dc:d1:29:9c:21:90:13:
                    49:1e:ae:2e:d2:40:3c:f7:c0:23:05:20:53:78:20:
                    73:ee:c6:6d:7b:e1:ac:28:fe:2a:93:5d:f8:01:e6:
                    df:6b:83:01:b7:88:5e:d3:c6:8f:9b:bb:c2:f4:e3:
                    e1:57:cb:1e:41:c4:e0:81:f9:fe:15:9e:f2:49:f1:
                    a3:40:6f:c1:47:dd:49:de:e6:79:b7:0e:3b:82:ce:
                    04:57:6b:a8:77:0f:24:6f:2d:8b:01:5c:b7:99:ab:
                    d6:99:8a:98:fd:9c:0c:ef:46:ee:3c:1c:15:9a:6e:
                    7c:39:eb:e6:f1:57:df:3f:e1:f3:cb:c5:65:11:9c:
                    14:aa:0c:db:3e:13:0f:66:b7:98:f0:e3:db:11:7e:
                    37:2b:83:16:a3:a3:86:49:18:6a:21:27:be:2f:77:
                    c1:fc:26:07:47:d2:66:28:ee:9b:f3:a2:f9:ab:ed:
                    c9:e3:19:ee:c4:8c:e1:46:ef:aa:c8:e7:7a:9a:3b:
                    55:73:06:c5:9f:b1:cc:8d:37:e1:fd:16:bc:6e:50:
                    02:f9:1f:e3:35:72:c0:97:7f:ee:98:04:9b:66:37:
                    a1:23:ea:4b:d8:ca:5f:33:14:b5:7d:89:76:36:ed:
                    78:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:78:35:0D:CF:10:D5:40:D7:44:11:C9:9A:91:03:4C:CF:06:30:E1
            X509v3 Authority Key Identifier:
                keyid:D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:85:48:7d:86:8d:9e:ea:a0:3a:60:b5:0d:17:29:71:66:1b:
         16:f1:b9:5f:dc:a0:cd:42:ea:0d:c0:47:74:8c:5d:5d:5a:72:
         e9:ce:13:60:a3:03:b7:13:82:b3:27:03:e9:b6:c1:36:c2:b3:
         fe:c2:6f:d4:71:46:df:fb:b2:83:12:47:f5:ae:a5:43:59:13:
         78:43:f9:17:ab:76:4d:96:a0:ea:d0:95:f5:0f:00:dc:32:87:
         0a:c5:85:bf:5a:3d:63:99:9e:5f:3a:88:1c:b9:f0:aa:fe:70:
         d5:31:71:db:23:dd:44:fd:33:ae:23:80:e1:db:43:3d:cb:16:
         6e:84:7c:fc:53:31:60:96:b4:bb:59:72:93:bb:75:45:2b:34:
         66:60:76:ac:cb:1f:4c:1b:9e:1e:c7:e1:69:97:eb:16:bb:61:
         fb:8b:a6:c0:79:92:40:80:d6:aa:46:43:51:b8:3c:61:48:13:
         88:b9:43:6b:b0:e6:06:03:25:10:18:f4:2b:11:e1:df:b9:49:
         8e:f9:b0:33:1f:ab:4d:1e:41:2f:15:e2:7d:91:44:e6:01:f8:
         31:b5:ca:19:1b:76:bb:d0:b8:89:23:7a:f2:dd:30:11:d5:4e:
         5a:a4:e4:25:2c:23:ad:3c:ab:cd:0d:41:cb:93:fa:da:ff:23:
         c3:57:50:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:12 2026 by rpki-client