Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File:                     7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier:          F8ZT14ekfcuX7MaJGH2NUHfCOa2/k5z6aKU7mYOauqU=
Subject key identifier:   87:E9:29:86:04:4B:CB:92:CC:C2:8F:80:AE:37:06:A0:09:6E:AB:93
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer:       /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial:       0284
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number:          027B
Signing time:             Sun 19 Apr 2026 01:45:42 +0000
Manifest this update:     Sun 19 Apr 2026 01:45:42 +0000
Manifest next update:     Sun 26 Apr 2026 01:45:42 +0000
Files and hashes:         1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: fK64xmzviYVDGg6EUhLo5Ykmz6p4BO2KWc4P+q9VXNQ=)
                          2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
                          rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 01:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
        Validity
            Not Before: Apr 19 01:45:42 2026 GMT
            Not After : Apr 26 01:45:42 2026 GMT
        Subject: CN=69e433c6-c011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:eb:59:9b:4d:1c:9b:a5:c8:7f:51:01:82:9b:
                    00:73:0e:06:d4:9d:65:21:8d:0a:fa:b3:3e:80:de:
                    0c:de:f6:ab:ce:da:95:30:19:8f:23:5d:8a:49:90:
                    e3:d4:a5:b8:cd:27:e0:e3:33:bb:d1:1b:72:4b:1a:
                    1a:b4:99:8e:90:ee:f6:8e:f9:70:34:ad:34:1c:9a:
                    f9:61:b5:4a:78:1e:b3:2d:fc:96:59:9f:a3:06:07:
                    40:e3:c5:b0:4e:0a:3a:b5:75:31:4b:78:e3:86:a0:
                    52:c1:6e:ba:de:44:e3:ee:0e:88:5f:a5:aa:23:14:
                    5a:a9:ce:cb:47:40:a6:c0:58:50:9a:fb:4c:cc:b2:
                    62:e1:71:52:12:05:f5:89:88:68:eb:09:3f:a4:84:
                    29:7c:b0:32:dd:03:47:2c:51:8a:a1:51:86:cf:3e:
                    8a:6f:57:8f:29:53:b6:58:0a:a2:4e:71:fe:c5:d0:
                    99:cc:d2:85:44:29:01:10:ab:c2:80:63:2c:a1:df:
                    1b:2a:95:69:de:ee:71:7b:bb:87:5b:66:97:dc:66:
                    b1:9f:0a:38:03:9f:30:7d:5a:41:7f:d8:f1:23:b8:
                    67:08:6c:d9:01:d8:51:8d:34:64:4f:1c:fb:0b:77:
                    6b:94:be:39:60:11:8a:3b:49:86:17:4f:2d:f5:e5:
                    f8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E9:29:86:04:4B:CB:92:CC:C2:8F:80:AE:37:06:A0:09:6E:AB:93
            X509v3 Authority Key Identifier:
                keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:19:e4:93:88:50:a2:51:f2:f2:f8:90:70:32:e9:73:dc:57:
         d8:43:ce:e9:53:4c:65:9b:38:7a:3a:4d:02:77:0b:51:3a:79:
         dd:d2:c9:db:c5:0a:76:f7:4b:86:d9:8c:b0:0b:12:fb:dc:b1:
         e7:cc:e7:09:17:3a:b0:81:e4:54:25:4b:63:c3:91:ac:49:d8:
         7f:bd:b9:6d:ea:28:eb:1c:9f:40:de:99:1a:ee:cd:4b:11:6e:
         02:41:d4:11:91:84:9f:a0:0f:55:da:30:40:72:19:4c:89:bf:
         0f:d1:81:91:22:ce:f8:b5:ab:4d:c1:55:6c:11:c1:4d:7c:08:
         ea:3e:53:97:9c:71:bd:dc:47:83:c5:5d:ba:c7:f3:5c:29:98:
         2c:51:17:66:de:0f:9c:0b:dd:2f:89:36:2c:45:66:57:b1:57:
         75:ae:f7:fb:b9:58:f8:e4:5d:42:f4:3c:fd:20:6f:c4:c8:7e:
         35:f2:13:05:dc:56:2e:b3:b9:41:60:c4:c9:ff:d7:63:ab:e4:
         00:57:c3:b2:c5:59:a4:25:4e:ce:01:35:63:d5:69:62:90:d8:
         e8:8a:4d:d7:87:6c:d9:a1:e3:cb:3a:0d:c4:ca:29:54:76:26:
         e3:39:10:f2:4e:68:63:72:26:56:74:52:1e:36:7e:9f:b5:2c:
         61:e5:42:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 04:55:23 2026 by rpki-client