Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
File:                     bicEPDr0D8Xll5OLFU9ci-D9_2w.mft (raw, json)
Hash identifier:          9W16mt+IZ28FKnb8ECk+pWpcgCIYfQ4wKhyb8t/UZX0=
Subject key identifier:   1D:F6:DB:75:2E:F6:00:5A:54:5E:69:90:57:F5:B6:00:53:04:A9:B4
Authority key identifier: 6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C
Certificate issuer:       /CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C
Certificate serial:       07F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
Manifest number:          07E7
Signing time:             Sat 04 Apr 2026 21:05:13 +0000
Manifest this update:     Sat 04 Apr 2026 21:05:13 +0000
Manifest next update:     Sat 11 Apr 2026 21:05:13 +0000
Files and hashes:         1: bicEPDr0D8Xll5OLFU9ci-D9_2w.crl (hash: x4DvvpU3qEwnz8xWopJLS8k6TJQxoi8c9F3CkbdI5Cs=)
                          2: C4E6FFAE2A5C11EB9D022535C4F9AE02.roa (hash: ezMjWZQ+amBAOJReLf6SLQyIzexobHRKhq9YImsmKVA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl
                          rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2033 (0x7f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01F7, serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C
        Validity
            Not Before: Apr  4 21:05:13 2026 GMT
            Not After : Apr 11 21:05:13 2026 GMT
        Subject: CN=69d17d09-2dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:81:b2:54:d9:dd:4d:6b:d0:64:28:4c:f1:
                    60:68:1b:b6:62:de:84:79:f4:99:5b:34:cd:bc:54:
                    9e:71:a7:8a:93:b0:c5:3a:dc:a3:92:ed:37:9c:f6:
                    fe:f8:45:9e:36:9b:26:0a:81:3c:16:35:b9:86:67:
                    20:1c:9b:c4:3f:a0:cd:2e:7a:42:69:33:75:36:d4:
                    60:b3:b1:0d:66:3c:ef:4c:90:95:8d:8c:e4:0d:4b:
                    7d:5f:fd:a4:41:1d:fa:fe:bf:d2:44:6c:1b:ff:81:
                    07:f0:25:25:91:94:9a:71:43:36:68:b8:3c:0e:b1:
                    ba:0a:08:0b:79:56:e3:db:cc:ba:61:69:e3:5a:b3:
                    b6:49:99:39:f0:09:b7:9c:db:f6:1d:9a:50:a4:63:
                    a1:5e:3d:60:57:a9:51:e0:69:af:ec:42:ba:56:da:
                    6a:aa:e7:5e:42:61:fc:08:7b:33:53:55:95:eb:13:
                    a2:e8:64:5f:0a:d0:41:47:1b:c1:8c:c7:55:bc:52:
                    32:a1:45:0e:ba:21:cb:e5:c9:3a:c9:f9:51:fd:63:
                    1d:9c:99:b7:9a:05:34:d4:8f:26:e6:b1:60:07:ec:
                    98:df:ff:9f:33:fc:4b:97:0b:bd:1a:e6:f9:20:e5:
                    15:14:fb:5b:6f:7d:d3:df:24:6b:81:2a:15:ad:ee:
                    87:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F6:DB:75:2E:F6:00:5A:54:5E:69:90:57:F5:B6:00:53:04:A9:B4
            X509v3 Authority Key Identifier:
                keyid:6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ec:b4:70:c1:7b:55:bf:6c:6d:2d:ab:b6:61:17:9c:65:cc:
         d6:3e:f8:f1:ba:d8:d8:4f:92:0d:c5:17:a8:16:a5:d3:5e:be:
         4b:00:45:87:0d:f4:c5:06:08:b8:43:e8:da:e2:c9:20:9e:27:
         15:92:50:a2:8b:60:aa:0f:ad:7b:2d:ea:84:bc:28:cf:c0:ff:
         60:a9:66:0c:2c:ee:e9:22:34:c5:3f:86:a5:2e:e7:5e:f8:3c:
         7f:0d:1e:83:75:c2:89:a8:b3:2c:c2:16:b7:b1:f4:d2:f2:f2:
         71:61:8d:46:f4:31:75:05:a0:93:b4:f1:b0:54:dd:4e:91:e9:
         1e:48:86:c2:d9:1d:ef:6a:16:32:14:7d:79:bf:18:23:f4:9e:
         56:7b:03:0f:b4:d8:b1:c5:76:17:7b:a3:5f:6c:1d:39:a7:55:
         10:6c:5f:8a:f8:08:b2:13:92:30:ec:65:20:e6:26:eb:48:c1:
         4b:d4:1c:da:db:30:61:b4:10:ea:00:b0:de:26:fb:96:e1:bc:
         5c:07:bd:12:78:ff:a3:8c:95:6d:bd:ab:f1:1b:5e:d9:74:69:
         6b:8e:be:36:75:45:f0:2a:98:b1:6b:18:73:de:ea:4c:35:ae:
         e3:b2:a4:7e:fb:9a:fe:c0:02:73:c5:14:9a:18:32:82:13:cc:
         bf:7c:d1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:08:39 2026 by rpki-client