Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft
File:                     d7TYOLfSKf0cdNVYLHNekbVnteI.mft (raw, json)
Hash identifier:          EBz1NnvVpgTEYDEr0rw/iajKPNGvfjrgGI8yjAYIHos=
Subject key identifier:   7B:BD:E8:53:E7:02:1E:B0:F0:86:29:1A:DA:AA:44:80:34:D2:3A:62
Authority key identifier: 77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2
Certificate issuer:       /CN=A91D9EAC/serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2
Certificate serial:       048F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft
Manifest number:          0488
Signing time:             Sat 04 Apr 2026 23:48:56 +0000
Manifest this update:     Sat 04 Apr 2026 23:48:55 +0000
Manifest next update:     Sat 11 Apr 2026 23:48:55 +0000
Files and hashes:         1: d7TYOLfSKf0cdNVYLHNekbVnteI.crl (hash: rVBr8cq441hX2gyDWfyhCipo7EUzFl+AsMJeSvWGhSg=)
                          2: 55976FBE7F4A11ECB6E05A38C4F9AE02.roa (hash: ypW8ZuWf2v87eAk2M9nnI1A/lhcPPO6cpD64usv2+sg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl
                          rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1167 (0x48f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9EAC, serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2
        Validity
            Not Before: Apr  4 23:48:55 2026 GMT
            Not After : Apr 11 23:48:55 2026 GMT
        Subject: CN=69d1a368-376e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d7:4c:93:31:56:a2:9d:71:70:b9:75:a1:f8:
                    db:f6:bd:12:74:a3:c5:e9:95:79:fa:c4:f8:b9:07:
                    fd:9e:4e:dd:b5:71:2c:8c:5b:aa:c1:d5:83:ab:8a:
                    52:2f:07:6e:3c:5d:47:55:2c:84:7e:90:56:52:33:
                    fd:c6:97:15:2a:62:3a:1f:16:c4:b5:90:84:18:69:
                    0e:c0:74:e7:f7:4c:4f:8b:47:da:07:23:73:b5:c2:
                    7a:3c:21:23:7e:50:90:52:e7:7f:5a:90:4f:e1:d5:
                    e1:18:bd:db:86:ea:57:11:ce:a3:1a:92:bd:90:bd:
                    49:29:25:cf:13:00:4a:92:55:c3:98:f4:d1:96:c8:
                    a2:d7:d4:30:af:d0:c5:1c:ef:b7:32:ec:cc:2b:ba:
                    a6:95:49:f1:39:a2:da:89:f6:e3:88:3c:0d:23:e8:
                    00:7d:4b:0e:09:5d:88:4c:0b:84:7b:fd:90:9c:18:
                    40:81:7a:6d:7c:bf:1c:05:d7:54:a3:1f:9a:6b:13:
                    6b:23:9b:80:3d:79:8a:d0:a5:61:be:ba:8d:34:b0:
                    5d:11:9d:44:f0:ff:fd:e0:68:07:86:89:dd:37:1a:
                    b3:9b:77:a2:b9:01:ba:2e:88:60:05:74:7b:b8:fd:
                    a3:03:a5:e5:ba:a0:38:36:8d:1f:8c:58:91:15:24:
                    fa:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BD:E8:53:E7:02:1E:B0:F0:86:29:1A:DA:AA:44:80:34:D2:3A:62
            X509v3 Authority Key Identifier:
                keyid:77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:c9:d0:30:50:87:6d:4f:1b:83:51:d0:99:af:58:f3:7a:01:
         c5:32:24:3c:44:30:d2:19:16:5b:42:90:3e:65:f2:b4:41:35:
         23:b5:93:5d:5c:23:76:5a:36:df:79:f1:c7:f0:1b:24:e8:f9:
         67:1f:46:08:2a:63:a6:b4:7a:11:6b:72:dc:87:2b:78:72:b3:
         f6:d5:c1:20:09:0b:d3:8f:74:a3:3c:b5:db:bd:7a:23:ec:b8:
         b1:f2:d1:b6:72:84:3a:8f:e0:0a:62:c9:23:3f:ee:74:53:81:
         0c:ec:e8:ba:59:3f:ad:c9:f0:de:31:04:77:23:f8:85:62:4f:
         53:c6:54:f8:78:70:39:a0:9d:38:5b:ed:55:9e:85:09:04:45:
         8f:9b:55:96:1f:12:6e:9f:18:d5:94:9b:5f:09:f1:74:21:49:
         7d:e7:00:6a:c5:c6:b9:65:59:a7:ce:dc:ac:f2:db:ea:91:65:
         4d:4e:88:a5:87:cf:3e:21:f7:a8:c3:b6:9c:78:60:0f:1a:54:
         26:6c:b5:e4:82:bc:b4:75:ba:b6:52:bb:6d:b9:07:9c:a0:aa:
         da:66:9e:18:3a:53:c8:af:4f:6c:28:60:7c:31:fc:b2:86:18:
         c2:57:6e:93:41:43:16:cb:ef:2c:91:78:a1:2b:e1:92:00:16:
         28:ee:34:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:59 2026 by rpki-client