Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft
File:                     Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft (raw, json)
Hash identifier:          Gx3hEpUAWae8RMiMAjvImKSkC2Fi16JuJ+u5m0/A5Kg=
Subject key identifier:   24:07:58:40:F6:EC:68:7F:7C:AD:46:24:7B:A3:22:02:22:E5:B4:BD
Authority key identifier: 56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9
Certificate issuer:       /CN=A91BB246/serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft
Manifest number:          A7
Signing time:             Fri 17 Apr 2026 06:56:48 +0000
Manifest this update:     Fri 17 Apr 2026 06:56:47 +0000
Manifest next update:     Fri 24 Apr 2026 06:56:47 +0000
Files and hashes:         1: Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl (hash: gw0fWBeTMFfQSGWqmSpbdxAXZUgtfv5Q8+9qtvWtMCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl
                          rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB246, serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9
        Validity
            Not Before: Apr 17 06:56:47 2026 GMT
            Not After : Apr 24 06:56:47 2026 GMT
        Subject: CN=69e1d9b0-6c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e3:cf:e1:56:fd:99:87:0f:15:47:46:a6:2c:
                    9e:69:81:ee:4f:a3:fb:e9:94:26:84:fd:2d:c0:a0:
                    43:13:2a:82:c4:43:aa:88:a7:f6:e9:b5:e7:56:92:
                    cd:2c:dc:1d:95:18:d7:66:12:a4:9b:f6:91:95:5a:
                    ca:a5:5a:ec:2f:2f:f4:75:56:5f:fb:1b:09:72:0d:
                    d1:58:a5:44:18:d3:b1:af:6a:7a:22:f2:27:f2:82:
                    5a:ca:84:9e:01:1c:ad:00:05:ac:05:1e:10:55:f5:
                    a2:ea:02:5b:b5:19:e6:aa:33:30:3c:9f:88:c0:8f:
                    33:2c:e1:c0:12:4c:0c:d9:69:ce:7c:88:27:21:46:
                    91:90:b4:b8:c6:e0:28:56:3b:af:55:43:96:70:b6:
                    99:23:2e:22:4b:13:75:b5:27:51:ea:33:8d:31:7d:
                    cf:4d:bb:9b:14:8c:5c:03:dd:17:cb:98:38:c4:fc:
                    5f:2f:fe:cc:13:fc:88:6f:f3:54:3a:82:73:6e:af:
                    59:63:66:85:01:05:c8:d4:ca:cb:a3:ed:4b:fb:fe:
                    ff:97:c0:02:55:15:29:c0:70:4b:86:ed:56:f9:26:
                    4e:44:f0:42:af:d5:c0:fd:74:fa:82:9c:54:0e:cf:
                    c2:16:4c:cb:23:e7:1a:ac:75:0d:20:f2:af:3d:80:
                    74:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:07:58:40:F6:EC:68:7F:7C:AD:46:24:7B:A3:22:02:22:E5:B4:BD
            X509v3 Authority Key Identifier:
                keyid:56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:94:30:8d:4d:6d:60:f6:59:0b:62:ca:01:29:65:36:87:aa:
         5a:37:69:bc:b4:1e:a7:51:29:cd:0c:65:db:69:98:9f:87:27:
         e4:cb:16:2a:75:be:32:75:00:79:0a:3e:13:70:3d:50:72:68:
         c3:5d:82:30:85:b9:59:dc:10:de:fe:89:9b:7d:26:34:f1:c7:
         19:e2:1d:d4:9a:7f:e1:3b:6d:cc:28:12:80:c6:de:83:c8:5a:
         f5:f0:f4:66:20:7d:d9:28:99:6e:62:c3:d0:14:84:91:c0:a5:
         f7:dc:38:fe:14:70:72:d6:aa:1e:46:39:1a:09:d0:20:36:ee:
         46:bf:59:70:fc:e8:10:7f:59:0c:24:f6:7a:36:68:15:c5:db:
         26:8f:1a:bb:24:1a:87:b8:79:87:d1:c8:16:b3:ef:f6:04:20:
         e4:58:bc:c6:3b:1c:f9:0b:5a:c8:84:56:01:5b:26:6c:95:12:
         52:76:f5:18:a1:ee:4a:05:83:bf:ed:50:02:48:aa:ea:59:70:
         7c:b6:72:99:f0:17:2f:bd:71:7c:b4:6c:21:96:e8:fd:7c:39:
         68:ff:40:13:a1:14:df:3e:12:bf:99:b9:00:9d:3d:f8:38:eb:
         34:c8:51:19:40:6b:d3:5f:31:52:62:f3:30:48:30:28:43:be:
         44:38:2f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:05:49 2026 by rpki-client