Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft
File:                     7NpzBwy2x3kNxguGn7sEMdln3k4.mft (raw, json)
Hash identifier:          CkaWXB4gl1qkDyOtMv2PhTnBVk21+TnTRC1582wYiOY=
Subject key identifier:   EE:A4:2D:D1:76:8D:55:B5:BA:7E:C6:D2:64:97:D0:3F:87:97:2D:1C
Authority key identifier: EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E
Certificate issuer:       /CN=A91A5C43/serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E
Certificate serial:       07BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft
Manifest number:          07AE
Signing time:             Wed 20 May 2026 21:30:31 +0000
Manifest this update:     Wed 20 May 2026 21:30:31 +0000
Manifest next update:     Wed 27 May 2026 21:30:31 +0000
Files and hashes:         1: 7NpzBwy2x3kNxguGn7sEMdln3k4.crl (hash: RDS7TQIOyk6L/RTatqHbmhROoMe4PaloEckhKIbnMxw=)
                          2: 69482E56075411EFB23BE380C4F9AE02.roa (hash: v0xqswgei3klkM48UKau+ZFSqGoqNY8ubfB94GPpoto=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl
                          rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 21:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1981 (0x7bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5C43, serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E
        Validity
            Not Before: May 20 21:30:31 2026 GMT
            Not After : May 27 21:30:31 2026 GMT
        Subject: CN=6a0e27f7-8d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:99:af:2a:06:f6:8c:5a:bd:25:28:f2:65:5b:
                    b1:90:71:c0:52:14:bb:10:e6:10:46:10:bb:b4:31:
                    2d:cf:84:3b:2c:92:c6:ca:25:91:b9:c2:e8:6d:e7:
                    c8:a2:bd:75:ca:47:94:aa:5e:84:69:af:33:25:b2:
                    02:fb:fd:8f:8b:d0:33:2c:70:6f:7b:59:45:e4:21:
                    c6:97:4e:49:6e:1c:e3:cd:9d:07:22:da:3a:17:6b:
                    e7:53:3d:ac:78:45:91:1d:ef:ad:28:04:9d:61:6f:
                    de:1e:f3:80:bf:8a:3b:36:25:2c:99:b8:58:49:bb:
                    aa:29:be:50:2b:47:69:f4:7a:a2:ed:51:45:ea:d2:
                    d7:48:2a:0d:7a:4c:07:a8:78:18:2e:bc:66:f0:41:
                    bd:1e:f8:77:0f:c4:4b:e1:24:35:eb:56:a2:ff:94:
                    bf:fc:f6:4e:48:66:ac:84:be:4d:60:ef:43:fe:27:
                    2f:6e:a2:a9:c8:d8:30:23:fd:53:1f:61:2c:95:18:
                    2a:7e:93:04:d4:06:19:45:49:dc:c2:25:c3:00:6c:
                    73:0c:95:f5:f2:00:95:6f:89:b1:71:f5:40:e6:a8:
                    d7:2d:5c:d8:4b:4b:2a:87:3e:01:05:e1:dc:65:08:
                    75:fd:f1:37:2c:00:c7:48:45:af:57:c8:c8:f0:a2:
                    cb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A4:2D:D1:76:8D:55:B5:BA:7E:C6:D2:64:97:D0:3F:87:97:2D:1C
            X509v3 Authority Key Identifier:
                keyid:EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:a8:79:b5:31:21:30:52:01:04:75:a4:8f:86:ad:7c:4c:80:
         2a:95:8f:df:2b:3f:31:1d:e2:c9:50:81:59:cd:ca:90:4f:6e:
         83:12:b0:24:9d:d1:1c:31:7f:95:26:f1:16:41:e7:28:69:e2:
         ad:2c:a8:80:be:4c:0d:1c:ed:dd:ac:12:5f:61:d4:7d:e6:ce:
         6d:2d:d0:73:c2:c7:9b:82:bf:0c:a8:0a:dc:19:43:68:39:3c:
         b7:e9:a8:39:cc:81:7b:ad:d6:43:6a:f8:24:d2:2f:13:0e:12:
         a4:7b:a8:e3:5a:a8:c2:eb:26:5f:d0:b0:63:a6:9c:5b:71:d2:
         76:45:2d:bf:7f:8a:f9:27:30:b3:c3:42:af:94:d2:7a:46:c9:
         48:1c:96:fd:c4:b4:e1:a6:1d:fb:f7:1a:be:6a:8f:de:7d:21:
         be:ac:b4:f6:36:3d:a8:00:62:89:12:1e:b0:e2:e6:69:9c:78:
         43:a9:45:06:75:43:ba:08:62:22:a6:e5:25:cd:0b:59:9f:0e:
         c1:fe:e1:a4:27:e8:04:6b:c9:27:68:27:6a:a5:2d:c8:04:61:
         48:5e:99:4d:2e:8a:1c:fd:96:03:2e:56:dc:06:8e:1f:c0:a5:
         4e:34:fa:63:28:af:bf:30:9a:57:14:2a:e9:c8:4b:6e:4f:0e:
         eb:dc:f2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:28:42 2026 by rpki-client