Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
File:                     ALcq1TM86q4aWFyCgInERVmZY_I.mft (raw, json)
Hash identifier:          TnHC1iM08okcczIio6phFXLwzfsTrN2xqVes8ZvOIFU=
Subject key identifier:   83:E5:7B:FD:18:C2:D4:7E:F3:2E:F0:BF:53:C3:E0:1C:02:73:6D:B5
Authority key identifier: 00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2
Certificate issuer:       /CN=A91380F7/serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2
Certificate serial:       010D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
Manifest number:          0107
Signing time:             Sun 05 Apr 2026 05:31:39 +0000
Manifest this update:     Sun 05 Apr 2026 05:31:39 +0000
Manifest next update:     Sun 12 Apr 2026 05:31:39 +0000
Files and hashes:         1: ALcq1TM86q4aWFyCgInERVmZY_I.crl (hash: U303x9MguKTwiAr8/eV7hmBgWWfMuj/NcWPyRRdZMGQ=)
                          2: 5D117282A7F911EF8E7B1773C4F9AE02.roa (hash: ANjzdpRTnZYnb2IgP9uL0uuWKgG+fxMLmh0yV+GGQqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl
                          rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91380F7, serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2
        Validity
            Not Before: Apr  5 05:31:39 2026 GMT
            Not After : Apr 12 05:31:39 2026 GMT
        Subject: CN=69d1f3bb-6967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:53:20:18:46:a6:f6:b7:d4:bb:72:17:fb:f1:
                    15:ce:ad:d0:2c:e2:2d:1c:31:bb:62:57:41:f5:f1:
                    b8:e5:0a:e8:ec:4d:65:41:53:e7:8f:71:8e:32:fe:
                    c2:d8:9f:db:53:c3:d1:fa:f7:05:1e:58:d9:cb:6e:
                    d1:7d:fd:f3:4a:14:ee:fe:38:39:d8:aa:67:73:26:
                    35:8a:7b:8c:af:73:b2:d0:05:62:e4:57:65:cc:6e:
                    30:38:71:9d:18:c9:f0:68:b0:9c:38:59:77:fb:cb:
                    91:53:85:4e:ca:37:79:05:d6:3d:a6:ee:35:c9:3c:
                    4d:e9:eb:9f:79:8a:66:8c:27:b1:ce:14:58:b0:40:
                    f4:1a:7d:81:45:12:af:70:0b:eb:35:fd:f1:f8:f3:
                    3b:b7:06:47:c9:0c:c4:8c:38:19:b5:91:97:b7:0c:
                    d8:81:72:f9:e6:e0:ac:76:7c:92:cb:9b:61:75:2e:
                    5e:0f:5f:c0:1b:93:ff:d1:a8:4a:8a:c3:06:67:32:
                    9b:4f:73:64:ac:57:8c:5d:52:68:a7:35:ee:b9:24:
                    50:56:df:de:96:80:43:9a:79:5e:a5:50:b2:cd:e2:
                    63:e0:a0:e7:97:da:3e:0b:aa:88:ea:41:ee:a9:2d:
                    a2:ba:ce:56:eb:f7:86:29:0b:0b:46:6c:10:42:24:
                    86:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E5:7B:FD:18:C2:D4:7E:F3:2E:F0:BF:53:C3:E0:1C:02:73:6D:B5
            X509v3 Authority Key Identifier:
                keyid:00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:3e:38:25:a4:17:94:46:f7:aa:7a:5a:26:df:39:8a:01:57:
         8f:43:e1:49:ff:4c:90:a1:0f:cd:02:d2:43:d0:d4:fb:33:09:
         34:f8:a6:f8:1e:e7:98:36:79:81:b7:1d:b3:e6:9b:f7:b1:8a:
         a7:4c:eb:e7:ae:71:e2:6f:6e:6d:2b:d8:fb:46:db:4e:8f:99:
         53:03:e8:3c:1c:2e:00:b6:54:b0:bb:39:0c:ba:d5:8c:23:1a:
         ca:56:b8:83:7b:83:1c:10:73:e7:1c:7b:c3:29:aa:6a:66:e2:
         76:fd:5e:b7:5c:a9:29:9f:e8:2c:cb:37:4d:a3:ab:ce:e2:64:
         58:7a:36:b5:9a:bd:a8:ce:5e:cb:07:b7:8a:0a:e4:42:f1:62:
         f4:a1:4c:97:e0:94:5e:4e:67:db:d1:f6:f6:3e:f2:c5:4c:b8:
         93:9d:34:09:33:2e:86:53:b8:50:06:8b:cc:05:b2:51:b6:83:
         22:7d:14:38:0d:a1:a4:7f:98:cd:04:ae:6e:ef:96:6d:53:3e:
         3e:a3:c6:f3:ac:ae:cb:90:bb:50:a9:84:af:c0:b0:a6:12:8d:
         1f:f1:7b:77:e9:c1:af:e7:65:bf:76:f3:ae:f2:e0:40:cf:52:
         20:77:0f:95:d7:3f:fb:81:65:ab:b2:a0:bd:ee:87:8e:d4:e6:
         83:f7:29:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:56:16 2026 by rpki-client