Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
File:                     9rFFECBSR85YMyWRuaKXoV0q6j8.mft (raw, json)
Hash identifier:          n0LPywTVconALo42VuDoJr9jQ7TBdMiyemQLqxM5NIk=
Subject key identifier:   BF:2B:C2:70:5B:57:5E:DA:32:05:1E:5E:92:16:BD:C7:B4:0F:30:A7
Authority key identifier: F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F
Certificate issuer:       /CN=A91E4FB7/serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
Manifest number:          60
Signing time:             Sun 05 Apr 2026 07:22:11 +0000
Manifest this update:     Sun 05 Apr 2026 07:22:10 +0000
Manifest next update:     Sun 12 Apr 2026 07:22:10 +0000
Files and hashes:         1: 9rFFECBSR85YMyWRuaKXoV0q6j8.crl (hash: GxA23Q+0r2Pekl+81uiNh+KywXWU5m2C+LqsvioOu10=)
                          2: 581240AAA04511F0BECA9449C4F9AE02.roa (hash: ABz2wyyPJmQiKwD0Cid0vK+VZEE/DgOmkSrsLq1Yrtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl
                          rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:22:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4FB7, serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F
        Validity
            Not Before: Apr  5 07:22:10 2026 GMT
            Not After : Apr 12 07:22:10 2026 GMT
        Subject: CN=69d20da2-36f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a9:fc:15:9f:1f:be:36:52:f5:3f:b9:10:ef:
                    09:72:e2:e9:cb:fe:c0:dc:b2:c7:d4:03:8b:82:ba:
                    06:e5:8b:70:c1:29:58:97:1a:13:f8:b1:a2:bc:fc:
                    0d:d7:f9:6c:f5:d2:e4:85:c4:3a:5a:5f:a0:af:e6:
                    e2:b4:2f:0a:87:98:04:44:26:be:14:8c:40:a3:18:
                    59:37:d5:d9:1a:86:7d:2f:a7:83:50:08:6a:76:e8:
                    ad:af:a2:8d:f1:bc:bd:95:6a:16:e7:e8:bc:37:5c:
                    48:40:f9:58:42:9e:2f:22:14:a8:fb:83:e0:ed:d2:
                    9f:43:29:b9:71:2d:4f:64:f6:7c:ea:67:39:42:5c:
                    96:2f:e4:04:e0:10:5b:02:1b:ed:01:c7:c7:87:ad:
                    bd:85:6c:61:c2:a6:31:3a:df:96:06:8d:f7:ea:09:
                    87:b1:5c:37:83:0e:6b:ad:94:b0:ce:77:57:bb:1f:
                    99:af:3f:61:21:0c:c5:17:47:f6:5b:73:45:4c:b4:
                    e6:3e:85:0f:1e:fc:ce:66:33:f9:3d:ad:ed:76:eb:
                    60:a3:30:46:e2:bb:8b:a1:47:b8:6d:3e:64:8b:a0:
                    f5:a6:57:93:be:18:41:a8:88:5c:bb:03:c7:98:10:
                    de:55:06:5f:b1:7d:11:3a:37:33:6b:ca:3e:dd:53:
                    85:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2B:C2:70:5B:57:5E:DA:32:05:1E:5E:92:16:BD:C7:B4:0F:30:A7
            X509v3 Authority Key Identifier:
                keyid:F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:35:e7:fe:e7:94:e1:f9:57:86:73:47:67:f5:d8:3f:8e:1c:
         4a:82:52:67:8d:cb:ec:43:7d:ca:17:93:5d:f2:45:7e:dc:dd:
         ad:43:e1:7f:9f:ca:b3:3e:71:1e:7d:46:75:65:d5:d4:7b:85:
         96:c3:a0:57:26:89:54:e6:a8:28:15:d1:14:ae:2e:ac:d9:dc:
         4f:8a:f3:f4:bf:0f:68:3c:0c:8d:43:79:7c:78:38:29:30:ef:
         ee:e9:e7:df:ce:e9:e6:a0:b0:f6:a2:8e:95:b4:f4:ff:c7:6f:
         2a:19:c1:e2:4a:cf:31:9a:02:01:5e:ef:e9:99:4b:76:8f:d9:
         b0:2f:b8:22:7e:df:66:d3:c5:d6:41:e3:f0:7b:99:02:d2:75:
         41:b9:01:c1:cb:4d:83:16:7d:89:56:8c:dd:11:c7:bb:0e:16:
         29:9a:ee:ca:20:15:48:50:f8:ab:cd:57:d9:f1:28:8f:d8:82:
         44:19:b8:4d:e8:6e:b3:a6:d2:2b:e6:08:4f:f0:a4:83:23:95:
         38:8e:d0:c2:9a:8e:cc:de:85:fa:90:26:66:ac:38:d1:92:b8:
         5c:df:47:df:96:0a:5d:79:a4:43:f7:f2:6c:99:28:9f:4a:3e:
         96:c1:86:df:c1:e6:99:7f:9b:11:7c:80:8d:20:58:62:9c:ea:
         69:95:8f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:30 2026 by rpki-client