Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File:                     7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier:          g3XzeuvzV950xIQRZt7uRtaOEzQeHbYUyr9JoAToa5s=
Subject key identifier:   0D:32:C9:58:2B:19:64:0E:D5:B7:79:D4:3C:64:F8:A5:93:BF:0F:60
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer:       /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial:       028C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number:          0283
Signing time:             Tue 05 May 2026 01:54:19 +0000
Manifest this update:     Tue 05 May 2026 01:54:19 +0000
Manifest next update:     Tue 12 May 2026 01:54:19 +0000
Files and hashes:         1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: RqVXOUFQ9KpNF2mgyw4YF58u1F6XAFYHhVdpqqhGo0E=)
                          2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
                          rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 652 (0x28c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
        Validity
            Not Before: May  5 01:54:19 2026 GMT
            Not After : May 12 01:54:19 2026 GMT
        Subject: CN=69f94dcb-b205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:55:ac:a7:11:ed:ae:d5:45:9b:ac:93:6d:7d:
                    82:05:5b:61:6a:0b:f3:eb:6f:2f:54:95:50:0b:fa:
                    32:9b:13:a7:2c:ba:90:4c:d9:05:27:02:a3:79:5c:
                    ef:ff:56:4b:b0:44:1f:1f:69:70:da:82:24:a5:be:
                    56:6c:ed:8d:82:04:05:96:24:50:52:15:46:9b:ee:
                    e7:01:31:87:f3:8c:c1:a5:59:20:aa:73:0f:5a:b3:
                    36:c4:02:1c:68:44:d5:30:d2:c3:e6:3b:84:da:cf:
                    6f:65:b8:06:7f:2e:3e:0f:10:fc:76:e2:b9:1a:55:
                    32:d8:a2:6d:e6:59:74:22:f9:1c:36:6b:e8:1b:6c:
                    f6:6f:53:ef:1c:f0:d7:4d:29:e9:66:cb:3a:da:d0:
                    ba:cb:03:91:a6:88:7c:ad:e6:c0:b1:67:bc:6e:51:
                    b3:e4:a2:c2:f3:00:1a:82:42:bc:2e:59:80:83:34:
                    f2:35:4a:bb:34:d2:9e:0a:79:3f:c9:38:95:72:e8:
                    20:40:2c:15:55:37:e7:7c:ce:3a:2d:a5:2a:f4:99:
                    de:9e:ea:17:00:d2:b5:d2:a3:4a:81:16:f8:50:24:
                    6e:6d:3e:7e:74:b7:62:4a:2d:91:57:4d:3f:63:5d:
                    10:47:03:94:9f:fd:25:f4:e5:8a:ab:d0:13:eb:4f:
                    17:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:32:C9:58:2B:19:64:0E:D5:B7:79:D4:3C:64:F8:A5:93:BF:0F:60
            X509v3 Authority Key Identifier:
                keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:4c:b8:06:20:66:44:de:cd:03:c7:81:28:a7:da:14:72:fa:
         8e:90:82:35:ad:b2:03:6f:ac:cf:b1:3d:ac:94:38:a2:eb:90:
         ea:ee:16:3b:d3:8b:7a:53:2a:d7:c1:be:7b:08:5f:38:fc:b0:
         5f:05:fb:8f:18:69:a4:ed:33:15:46:e4:52:47:44:33:6f:95:
         6d:5e:3d:7a:75:cd:86:26:9d:4a:76:77:d3:22:35:78:f9:78:
         28:07:01:c1:aa:e9:51:94:02:d3:50:06:a8:61:3c:5f:57:5d:
         5f:53:b4:c6:c7:60:00:22:bd:e0:70:60:bc:e7:66:c9:fa:36:
         c4:d8:5d:bf:b2:9c:60:e4:60:4a:d5:3c:be:e2:59:5a:1b:fa:
         aa:a7:39:e9:01:b3:f4:a4:db:0d:bc:61:22:a3:d3:53:bb:2c:
         52:0b:ba:7a:84:69:a1:0a:65:4c:a0:14:b3:77:69:65:d4:e4:
         83:d7:c8:e3:0a:03:d3:e8:28:ff:91:d4:ee:fb:ab:a9:f7:25:
         5b:73:2d:ce:cd:84:fa:ca:ee:34:d7:ec:7f:71:ae:a8:fd:0c:
         61:b7:50:2f:cb:d4:4a:5a:1f:cf:63:e6:a5:37:cc:8e:b7:41:
         c2:be:4a:29:b5:65:71:7d:86:31:c4:6f:73:29:fd:c9:ca:51:
         bc:98:5e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 10:38:54 2026 by rpki-client