Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
File:                     9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft (raw, json)
Hash identifier:          qL9cjIf+06MDhW/+PjTMkTvJujcL01zL1KTvkNsNT9I=
Subject key identifier:   13:EB:8F:9F:17:33:0C:D6:0A:26:A5:85:29:74:00:F3:DE:00:27:AF
Authority key identifier: F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0
Certificate issuer:       /CN=A91D536E/serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
Certificate serial:       07EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
Manifest number:          07E3
Signing time:             Sat 04 Apr 2026 21:04:16 +0000
Manifest this update:     Sat 04 Apr 2026 21:04:15 +0000
Manifest next update:     Sat 11 Apr 2026 21:04:15 +0000
Files and hashes:         1: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl (hash: 1FvTPUy/Gw2oTsllBuvSSEU8SDh+yvUlo0Xmzwhje+0=)
                          2: 6091D05229FC11EB861CCA7FC4F9AE02.roa (hash: 0iiqZOwTOdunhzu7xr1TU0hPXfMeSWYQaRpR8izF2Uc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl
                          rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2027 (0x7eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D536E, serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
        Validity
            Not Before: Apr  4 21:04:15 2026 GMT
            Not After : Apr 11 21:04:15 2026 GMT
        Subject: CN=69d17ccf-cdf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:b3:b5:09:ca:b7:f1:18:42:9f:ae:4a:e8:
                    06:83:55:f5:7a:52:9c:81:87:a0:fe:dc:38:f0:af:
                    80:d1:30:34:b6:6d:05:9b:3a:4a:d4:7b:e5:a9:bb:
                    d2:3f:74:35:fb:e9:1f:b7:8e:b0:a0:e3:47:8e:55:
                    db:96:7f:2b:fc:b1:0d:30:12:91:a6:5f:9a:ed:b1:
                    b6:53:c4:3a:a8:35:77:df:e8:5b:76:b3:90:b3:8d:
                    07:87:79:b3:86:1e:64:75:a0:1d:5f:80:0c:03:f3:
                    94:c5:30:62:67:31:b0:d6:62:20:72:0c:62:b6:79:
                    1d:48:96:df:a0:48:ed:90:30:d9:2a:a2:f3:8c:c4:
                    2c:3a:3d:e2:4b:d1:ac:7e:1c:02:1d:77:25:7e:b6:
                    de:4e:7f:7a:4e:a4:7d:b5:e0:5d:0d:b5:74:66:c0:
                    09:ee:d9:4d:ac:a0:e3:fa:de:35:7b:0c:31:c9:fc:
                    d5:ae:04:ad:a0:4b:17:50:2c:9f:9d:31:09:cb:30:
                    b5:4f:53:64:f9:69:d6:3d:90:08:f9:24:50:d0:b0:
                    61:e2:27:94:db:0f:9f:02:89:b9:00:72:e8:b5:00:
                    d2:72:e9:db:fc:18:ab:21:44:4d:1c:2b:e2:79:f1:
                    48:49:7f:58:c3:2c:a5:07:81:47:82:b0:36:0a:ce:
                    39:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EB:8F:9F:17:33:0C:D6:0A:26:A5:85:29:74:00:F3:DE:00:27:AF
            X509v3 Authority Key Identifier:
                keyid:F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:9b:f0:81:b6:e9:f9:98:7f:14:43:05:2b:d9:61:3e:aa:50:
         b4:10:de:b0:66:80:01:6a:af:7e:42:5e:5a:dc:43:1b:f8:2f:
         8a:9f:2e:9c:8b:6b:04:00:87:1f:4d:fb:fa:a1:ab:58:75:c2:
         7c:21:0c:69:fd:66:68:e9:eb:50:22:58:e9:ca:3a:4b:a7:af:
         2d:83:9e:e3:13:8e:d9:8a:e3:ad:96:93:e6:9b:70:0d:ab:42:
         a2:9b:b2:8c:55:b4:77:c7:95:15:b6:f1:13:4b:13:67:c6:2d:
         90:21:8c:e5:ad:e6:bc:91:96:5b:c5:0d:ce:8a:d8:a1:25:18:
         34:93:81:32:ec:31:24:a2:46:42:c0:c1:11:4c:38:64:18:65:
         6a:54:73:6c:44:06:f8:d4:8d:50:c9:cd:5d:2d:4b:e7:3a:04:
         e9:52:b1:34:42:f6:8d:fc:44:7b:78:4a:a1:a5:cb:b8:f8:37:
         9e:ac:aa:45:a5:46:cb:95:44:01:27:19:93:9f:07:f3:00:8a:
         19:0b:85:fd:29:66:e9:ad:44:37:f1:94:d5:d0:45:14:b3:da:
         e9:50:52:5f:06:cb:8e:38:9c:76:40:b0:e4:77:35:35:58:48:
         bb:3c:a7:67:11:c8:55:42:50:a9:93:a1:27:eb:7f:cd:cc:e3:
         67:74:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:23 2026 by rpki-client