Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
File:                     7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json)
Hash identifier:          dEteoM/7NsLMvdwzFweppb0Owv22YhQH7Jn9lL4kkwc=
Subject key identifier:   F2:C7:DD:71:47:0A:1E:C1:69:AC:76:75:71:7D:02:BC:27:5C:E2:82
Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA
Certificate issuer:       /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
Certificate serial:       01AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
Manifest number:          01A7
Signing time:             Sun 05 Apr 2026 03:40:38 +0000
Manifest this update:     Sun 05 Apr 2026 03:40:38 +0000
Manifest next update:     Sun 12 Apr 2026 03:40:38 +0000
Files and hashes:         1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: VRh/g0lYPutCzFfUXNL+i/gn8B5ezL2OOT5JrzSTAzY=)
                          2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: EOwdkUCPycfyxEwZOL9x4wNceSGbsrAFIwEgoffB50k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl
                          rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
        Validity
            Not Before: Apr  5 03:40:38 2026 GMT
            Not After : Apr 12 03:40:38 2026 GMT
        Subject: CN=69d1d9b6-20d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:10:e1:f3:39:70:a1:fa:d5:24:26:b5:18:e5:
                    8d:01:aa:b7:0f:e2:82:3c:e4:40:80:52:01:2d:fa:
                    a6:3e:bb:0b:0b:f3:45:70:c9:7a:ef:d2:ce:a8:ba:
                    97:85:e2:fb:92:cd:02:92:87:13:9e:a0:39:cc:fd:
                    5a:0a:a0:19:41:5f:83:99:f1:54:91:08:2e:62:ed:
                    22:89:26:df:94:39:66:6a:d0:70:86:30:bc:91:a4:
                    83:8f:0c:7c:61:0d:fd:e3:08:de:ac:26:58:20:7b:
                    ee:d3:8c:a7:d2:6b:ce:f1:94:60:3a:6e:e5:88:5d:
                    b2:e7:16:3b:d6:55:d8:5e:0b:39:35:01:ba:04:62:
                    4f:c4:0a:0a:0f:59:80:f4:52:c3:bc:98:6f:d8:75:
                    d5:53:1b:9b:b1:00:3a:8e:0f:41:62:9a:fd:bf:07:
                    e7:66:9b:57:b0:6e:90:23:bc:e4:c6:bf:12:c0:e1:
                    c1:2c:44:1f:bc:39:ba:01:1e:56:f9:2f:cb:b1:e0:
                    3c:ec:34:09:8d:8e:1b:58:65:f0:9c:0d:40:bf:09:
                    61:50:a2:05:39:20:94:7e:49:86:66:5e:0f:32:24:
                    8e:d9:bd:39:2d:5e:f3:d6:2d:e7:95:a3:d3:ff:d2:
                    d1:75:53:e4:75:95:a4:bf:42:db:0c:a7:4c:45:e0:
                    a3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C7:DD:71:47:0A:1E:C1:69:AC:76:75:71:7D:02:BC:27:5C:E2:82
            X509v3 Authority Key Identifier:
                keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e2:b6:4d:d8:5a:1d:15:e8:95:fb:b5:6b:54:2a:52:ea:8c:
         a9:02:28:9b:92:c8:d4:29:6f:0b:aa:b2:f2:3c:f3:5e:66:37:
         5e:37:df:96:35:de:e9:e7:5d:22:0e:86:5e:86:3e:63:0c:25:
         1f:a0:81:ff:ce:ad:3a:03:52:3c:d1:92:ab:a1:21:2f:3f:fe:
         8e:6e:83:c3:ee:8c:29:52:e5:55:7d:86:3f:60:4e:bc:9a:07:
         b4:25:3b:b5:ff:a2:d2:a1:e7:1a:0e:bd:1c:04:86:d3:68:93:
         70:bc:fc:ac:fb:a6:c7:ce:02:6f:98:b4:7f:bf:c7:2a:e5:62:
         4a:c6:d1:cd:c3:30:b8:e5:ae:c0:69:73:5c:21:60:52:30:10:
         fc:3e:8c:6c:81:a1:d4:61:79:f5:a1:2b:3d:5c:7b:8b:b0:02:
         4c:ed:42:8e:bc:53:08:87:80:87:e4:68:81:be:e7:89:48:4f:
         15:a7:0d:cb:07:c1:4c:26:8b:b7:aa:50:ea:b5:ce:85:7e:ce:
         3a:f8:b0:f3:c0:3e:1f:57:3e:15:11:8c:0b:30:3e:09:75:9b:
         d1:9b:eb:6a:fe:c8:0a:a1:9b:eb:e7:36:e3:51:a0:d8:75:16:
         72:4c:27:16:11:b1:ca:e7:23:2b:68:87:50:ca:23:e4:0f:e7:
         22:58:c7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:58 2026 by rpki-client