Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
File:                     -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json)
Hash identifier:          1PoEB/RW9dlgCaKvRmKvCnDzATVOGl6E9teDTDVbb2g=
Subject key identifier:   F7:02:23:E1:D9:80:EE:AE:34:54:AA:2A:06:9F:81:4C:43:3F:33:EA
Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B
Certificate issuer:       /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B
Certificate serial:       1004
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
Manifest number:          0FF1
Signing time:             Mon 30 Mar 2026 17:28:12 +0000
Manifest this update:     Mon 30 Mar 2026 17:28:11 +0000
Manifest next update:     Mon 06 Apr 2026 17:28:11 +0000
Files and hashes:         1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: bVuDenwsohM/29rIwb70yyBcWmVQrTl2t6pTIJZyqjA=)
                          2: 6AE44D5C3E4511F090A5C643C4F9AE02.roa (hash: GpIlPzjXhUM0zJ+cM7pnn7EyYVYFkBP5Hh3rm33qqKU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl
                          rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4100 (0x1004)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91657DD, serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B
        Validity
            Not Before: Mar 30 17:28:11 2026 GMT
            Not After : Apr  6 17:28:11 2026 GMT
        Subject: CN=69cab2ac-b971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:ce:a9:68:ed:03:d4:58:8e:d5:95:e4:ef:ae:
                    ee:c7:70:0e:22:91:68:bb:5d:cd:47:23:20:b7:99:
                    28:1e:84:fb:f2:da:bd:df:1d:ee:d9:9f:61:48:31:
                    8e:4a:9a:c4:d8:0f:23:09:ad:d6:aa:db:45:6e:22:
                    5f:31:78:ef:b6:05:49:39:28:ce:a6:0c:d2:21:d6:
                    6f:8f:26:8a:26:b7:a1:ac:26:fb:e8:d3:2f:71:e3:
                    33:bd:52:a0:f4:cf:e4:a4:b1:94:cf:3c:25:f4:6f:
                    e2:aa:ba:b8:4a:88:97:fb:47:dd:57:7a:5e:3b:a3:
                    88:8e:86:f2:37:0a:56:d0:66:2d:73:1c:c3:d1:b8:
                    aa:c5:fb:75:9b:92:c9:42:3b:e4:a0:33:72:c4:83:
                    2d:24:d2:8e:21:00:11:47:e2:3a:fc:8a:c5:a1:91:
                    82:ff:d4:9b:cc:15:42:c5:3b:f9:52:5f:53:18:19:
                    f4:cb:80:8a:c6:3a:1d:8d:73:b3:20:d1:ef:9b:c1:
                    77:08:16:16:13:17:34:b1:43:43:f6:c4:2a:a9:96:
                    1c:98:6d:ab:65:b8:ae:f8:1b:5b:cc:c8:89:e3:21:
                    e7:64:7a:86:1e:78:dc:3c:58:e5:d1:07:a9:55:f9:
                    ec:e2:e6:a4:75:44:d9:3f:db:9d:d2:b7:3f:ba:74:
                    16:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:02:23:E1:D9:80:EE:AE:34:54:AA:2A:06:9F:81:4C:43:3F:33:EA
            X509v3 Authority Key Identifier:
                keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:96:7f:e7:d3:60:df:c0:95:62:d6:47:0e:40:db:01:54:b1:
         95:07:0e:ac:f8:dc:ee:4b:3b:4a:73:14:63:8e:8b:57:1e:41:
         36:30:07:f9:e6:7c:6c:bb:52:32:6e:20:63:ea:52:93:d1:b5:
         87:0c:96:e5:cb:12:f2:67:e2:d1:2d:9a:d9:78:cf:e9:57:b8:
         25:4b:80:a6:4f:8b:d7:5d:45:a5:82:14:64:c1:a7:fe:d6:22:
         e4:84:51:9a:41:23:fd:6a:75:b9:1c:ba:23:ae:96:e6:82:0e:
         7e:62:52:5c:8e:5a:95:d0:16:cb:76:0f:ba:0c:a6:b5:f9:83:
         24:ee:0c:db:4b:a0:d8:b3:3b:4b:97:8a:c2:5f:e4:eb:bf:f6:
         dc:d2:b7:d0:1e:f2:29:85:a9:2e:24:f5:d1:d1:a8:42:eb:7e:
         5b:d8:e9:70:bf:bb:21:09:dc:fb:87:c6:f0:d8:28:77:a1:46:
         a1:d8:a0:2c:48:cb:72:a3:e3:ee:6f:ff:82:66:fc:c2:22:38:
         25:9c:29:9d:bc:49:38:d0:4b:86:9f:3c:fe:af:d9:d0:7f:ef:
         2c:16:eb:f8:ee:4d:f7:88:81:4d:b3:41:ed:08:75:07:a7:db:
         31:d8:9c:9b:f9:79:1b:e8:08:98:25:94:9a:b5:d2:7a:f5:dc:
         4a:a8:de:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 04:15:40 2026 by rpki-client