Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
File:                     7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft (raw, json)
Hash identifier:          WFPa0pMSWSQf8mFm57mjwyCUW4EVJE2Ph5kxTesFLXI=
Subject key identifier:   CB:84:FF:95:B0:92:D0:70:95:D0:5C:A6:F5:43:17:F8:18:AA:BF:1E
Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
Certificate issuer:       /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
Manifest number:          01A8
Signing time:             Mon 20 Apr 2026 23:39:42 +0000
Manifest this update:     Mon 20 Apr 2026 23:39:41 +0000
Manifest next update:     Mon 27 Apr 2026 23:39:41 +0000
Files and hashes:         1: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl (hash: pcGDQMRmMM2SCnKHmVH+pO8fWX4Hifqg4TMtvZYb4so=)
                          2: D66D72562EAB11EF9B369566C4F9AE02.roa (hash: Jpr2rdfDo4+UmyigrHHOPqRZP94BLcmyPwbnjdRwNGQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
                          rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 23:39:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7BDC, serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
        Validity
            Not Before: Apr 20 23:39:41 2026 GMT
            Not After : Apr 27 23:39:41 2026 GMT
        Subject: CN=69e6b93d-686b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:46:97:58:57:93:55:39:24:91:ce:93:8e:89:
                    07:c8:8b:88:19:f1:0d:47:d3:e3:7d:e5:5f:a0:73:
                    6d:28:7d:2c:0d:75:e1:6a:fa:2e:18:e9:ad:18:89:
                    20:54:8a:fd:0b:c4:16:d9:d7:38:ed:43:2a:a9:95:
                    c4:d5:38:ae:5b:9b:1a:ca:a4:de:d0:c1:20:8e:08:
                    cd:a4:9e:14:11:da:02:62:62:fb:be:99:06:08:76:
                    97:98:c8:fb:c7:d9:09:9a:e1:b8:d2:47:af:d2:c8:
                    ba:3e:60:47:57:f5:92:25:60:35:80:1e:ec:61:5b:
                    c2:9d:8d:24:ea:06:26:39:00:78:69:b3:49:3b:a4:
                    c0:c4:19:28:12:08:9c:04:00:7f:01:57:60:46:b4:
                    fd:24:7c:23:d9:40:61:82:b1:ee:8f:77:7b:4d:cd:
                    69:ca:4d:47:db:c3:6c:40:95:35:80:eb:4c:41:72:
                    72:b0:26:fd:f9:ad:3f:3b:0f:83:29:ed:a6:79:07:
                    69:d9:bd:31:64:3e:6a:c3:cd:ec:17:d6:b9:1c:3c:
                    48:f4:e5:45:75:68:ae:fd:64:b2:40:de:04:d4:10:
                    f3:10:62:9e:10:cd:95:c5:5d:82:ba:5a:6c:97:a2:
                    12:01:03:5b:e5:cc:0b:47:e2:22:f6:24:74:6a:0d:
                    1f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:84:FF:95:B0:92:D0:70:95:D0:5C:A6:F5:43:17:F8:18:AA:BF:1E
            X509v3 Authority Key Identifier:
                keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:61:33:36:e8:d2:83:ba:96:78:12:53:60:ef:c8:d0:5d:d6:
         f1:26:72:bf:57:d7:c2:5d:41:07:d3:fe:01:43:7d:1e:ae:29:
         f2:87:f4:ba:75:e4:9f:d4:e5:a1:5d:4d:1c:41:27:ff:fc:27:
         aa:bb:8e:7f:5c:c1:7c:b9:6e:ee:3c:2a:b8:f1:2a:db:f5:34:
         47:12:9c:8c:cf:19:58:43:42:86:46:77:9e:c9:22:30:09:91:
         70:8d:cc:99:33:3e:a1:cc:e7:68:b5:0e:13:8f:9b:a8:df:f4:
         e5:a8:23:8e:e4:fc:b8:b3:cb:61:e1:38:99:87:47:e1:24:8e:
         70:19:01:c2:b5:43:ee:a2:7a:6d:77:a0:59:c2:e9:b9:ce:04:
         de:fc:b9:1a:95:01:a8:27:dc:a1:eb:db:86:8c:30:7f:1a:89:
         41:00:64:31:3b:74:1b:cc:c1:58:41:ef:6d:ff:06:b7:58:a4:
         97:37:d0:f4:42:06:b3:58:e8:62:52:80:83:00:a2:65:76:00:
         01:ae:d3:64:64:cf:5d:da:5c:00:dd:0c:d4:a7:17:a6:ac:4c:
         81:e3:1d:2c:dc:9c:2f:05:d4:d1:d8:d9:9a:41:b5:5a:75:e8:
         50:ce:01:e1:53:77:72:f4:08:ca:44:d9:e3:6d:56:22:9c:d8:
         e1:b2:3a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:34:22 2026 by rpki-client