Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft
File:                     67hSKipPZGizmgkPciqw63Doi4I.mft (raw, json)
Hash identifier:          jK4iY/bj9vVMIOV5RVrMPEognrM4JuuUXLfbUO0Au/Y=
Subject key identifier:   94:13:3F:E8:4B:CC:AD:59:2A:24:D0:DC:97:A6:04:82:20:03:2E:17
Authority key identifier: EB:B8:52:2A:2A:4F:64:68:B3:9A:09:0F:72:2A:B0:EB:70:E8:8B:82
Certificate issuer:       /CN=A917E27F/serialNumber=EBB8522A2A4F6468B39A090F722AB0EB70E88B82
Certificate serial:       7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft
Manifest number:          7F
Signing time:             Sun 05 Apr 2026 07:04:43 +0000
Manifest this update:     Sun 05 Apr 2026 07:04:42 +0000
Manifest next update:     Sun 12 Apr 2026 07:04:42 +0000
Files and hashes:         1: 67hSKipPZGizmgkPciqw63Doi4I.crl (hash: FYYd6RzvBIoFVkrcvp2LnSrZv7bo3OqM3C5r0XtQ4EU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.crl
                          rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E27F, serialNumber=EBB8522A2A4F6468B39A090F722AB0EB70E88B82
        Validity
            Not Before: Apr  5 07:04:42 2026 GMT
            Not After : Apr 12 07:04:42 2026 GMT
        Subject: CN=69d2098b-1d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:26:5a:8e:95:f3:0a:53:91:e4:fe:d6:4e:95:
                    d7:d4:20:fa:5a:9e:73:e9:59:4d:e1:d7:16:26:d8:
                    29:ba:6f:1a:5a:32:3f:a1:5b:e8:f8:6b:07:3f:0c:
                    d1:42:5f:49:f9:5c:4c:ab:13:d4:38:12:e7:33:b7:
                    8d:99:6e:39:c2:e8:08:44:80:fc:1a:ea:25:07:da:
                    3b:9b:f1:84:ee:cb:76:85:16:a1:89:cf:fa:ef:3c:
                    48:f4:36:e5:1f:96:fb:11:65:0b:bb:05:a4:c2:8f:
                    c8:cc:34:03:60:dd:00:43:e7:ca:ab:4c:4f:62:29:
                    3e:c1:42:c4:10:85:0b:97:2c:cc:e1:8f:74:27:0b:
                    b0:4c:82:9a:58:ec:2a:fc:91:ab:5e:16:83:45:88:
                    ce:32:4a:a8:8f:da:18:83:fa:72:25:35:cf:3b:26:
                    ea:c9:c4:a3:69:db:5e:72:93:49:ad:ed:a7:c3:35:
                    33:87:85:56:bc:43:a0:a4:75:f5:1b:74:54:c6:76:
                    d0:7b:4a:34:05:4e:1e:1b:09:bc:12:86:58:9d:d6:
                    f3:7e:28:a3:64:a4:c9:e2:de:2b:38:41:1a:e8:93:
                    af:7d:87:91:31:df:f7:b3:1a:eb:dc:b6:e1:58:97:
                    51:56:28:e6:b9:ea:7a:cd:9e:8c:5f:5e:47:44:a7:
                    c8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:13:3F:E8:4B:CC:AD:59:2A:24:D0:DC:97:A6:04:82:20:03:2E:17
            X509v3 Authority Key Identifier:
                keyid:EB:B8:52:2A:2A:4F:64:68:B3:9A:09:0F:72:2A:B0:EB:70:E8:8B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:3f:90:19:30:c4:96:dc:ff:d1:1a:e1:8a:a8:3c:8e:f6:ce:
         a0:44:b8:95:74:de:5e:f5:cd:9c:8b:f9:88:37:58:bb:77:59:
         c2:5a:0b:79:09:5e:fb:19:c2:7a:b2:7f:6c:58:e6:1e:3f:29:
         b7:5d:3e:e4:57:e5:2d:66:99:5f:e6:e8:4c:4a:84:2c:d3:8e:
         a1:7c:62:65:b5:3e:99:7b:a6:81:a4:68:f6:7f:71:8f:de:35:
         e7:1e:f8:b2:20:2a:27:fd:27:9e:11:29:37:05:10:d9:40:e2:
         1c:ce:8d:84:8f:e4:0d:fd:f7:a9:a0:a7:27:5d:af:0e:0d:f5:
         3d:91:e3:d2:e0:bb:b3:c6:cb:81:7a:fb:3d:0d:40:fa:3b:a0:
         84:51:08:79:af:76:c5:87:7a:95:f0:a9:b2:49:44:77:1b:cb:
         d2:a8:58:06:5a:cb:de:33:47:2b:7b:e8:94:8b:47:a6:1d:0a:
         2c:96:34:e2:66:49:8b:08:da:d4:3f:13:15:68:f1:2c:2a:58:
         5a:15:fb:ef:94:c9:bf:3c:60:b0:dd:3c:80:a4:e5:65:08:3c:
         51:da:8b:7d:15:fa:03:4f:86:46:7c:f0:2f:9d:32:ea:b0:ba:
         4f:48:b5:84:2c:4b:1d:a1:65:1c:de:02:16:10:54:e7:0f:61:
         e2:99:79:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:10:12 2026 by rpki-client