Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
File:                     nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft (raw, json)
Hash identifier:          H445s6N7tieoJGKNEsvcIygFLaRjRzRXBzi1QYm9KOk=
Subject key identifier:   15:5D:91:15:60:95:54:F8:DD:81:C3:A6:FD:B5:EC:42:11:C8:8E:E2
Authority key identifier: 9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74
Certificate issuer:       /CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774
Certificate serial:       091A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
Manifest number:          0AA7
Signing time:             Sat 04 Apr 2026 20:04:56 +0000
Manifest this update:     Sat 04 Apr 2026 20:04:56 +0000
Manifest next update:     Sat 11 Apr 2026 20:04:56 +0000
Files and hashes:         1: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl (hash: 9eM1+jVebgMfau2g8NrH+pX3y7KBL5cQZuLw0sM7M2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl
                          rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2330 (0x91a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB14D, serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774
        Validity
            Not Before: Apr  4 20:04:56 2026 GMT
            Not After : Apr 11 20:04:56 2026 GMT
        Subject: CN=69d16ee8-22e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:38:97:9c:27:42:ed:0d:4f:e6:b1:a8:22:
                    ee:fe:dc:21:90:67:fd:36:02:d1:7e:05:f0:07:81:
                    47:2d:fe:47:f0:d0:bc:07:21:14:89:59:aa:1f:5d:
                    76:c2:7a:cb:3c:74:e5:07:e8:0b:c2:09:fa:a9:71:
                    a6:1b:a3:e5:a5:2c:e5:c8:41:ed:d3:0c:10:dd:14:
                    a1:d8:09:2f:a6:ed:24:43:81:02:00:7a:98:28:39:
                    f4:8c:46:3d:98:ec:c2:6d:2c:59:64:f8:4f:5c:26:
                    39:39:39:2d:7c:ed:58:23:2a:c7:0a:3a:15:64:a2:
                    6b:5e:e5:57:89:e1:26:38:a1:fb:ad:da:05:fe:23:
                    f1:0c:c9:69:2b:2b:86:49:b2:b7:7b:64:7a:19:b7:
                    b0:46:f6:53:a9:c2:70:43:c9:93:de:67:70:00:ec:
                    41:5e:1e:c6:1b:ef:f2:ca:ea:2d:ac:ec:ed:8c:bc:
                    ff:8f:48:3d:be:56:df:09:26:60:c4:ab:92:bb:43:
                    68:46:7b:e0:44:a1:38:94:0b:9d:0e:be:70:e4:7c:
                    e7:62:38:e5:6b:c8:06:3a:b4:d5:dc:44:05:8d:13:
                    a0:ba:e8:28:2d:dd:eb:8a:8d:e3:93:16:d6:96:19:
                    01:a8:4e:11:99:d5:ac:44:61:2f:8d:47:8c:b6:7e:
                    b5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5D:91:15:60:95:54:F8:DD:81:C3:A6:FD:B5:EC:42:11:C8:8E:E2
            X509v3 Authority Key Identifier:
                keyid:9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:42:fb:e1:7e:3c:eb:19:a7:08:a7:06:9a:cf:bc:06:fe:b4:
         af:73:d0:9a:15:ca:11:9d:dc:86:2c:4b:87:7d:b6:b5:fa:76:
         57:de:6d:25:9b:3b:aa:a1:9f:c8:78:c2:d0:9a:af:6f:56:35:
         73:c2:25:db:ea:d2:6a:ec:24:a0:cc:39:73:94:21:99:03:86:
         3a:29:57:92:9c:cf:8b:2c:6f:88:62:3b:d7:d3:98:6b:c4:78:
         24:1b:52:dc:cf:73:4a:54:05:d9:77:40:8a:cd:97:4a:26:ca:
         54:47:f9:9c:d2:69:63:27:31:a0:32:cc:03:30:a6:e5:77:e4:
         01:9e:92:64:dd:18:21:da:23:31:15:90:d1:ec:13:22:09:bd:
         7e:5a:81:05:4e:d3:10:13:55:b0:f3:04:f1:87:0d:ed:c4:10:
         9d:05:94:d8:8b:8b:c7:6d:53:9c:a3:96:c4:fc:1e:56:5f:34:
         fd:b8:e7:8b:ac:1f:96:fa:dc:fa:5a:07:51:b0:e1:42:b9:c1:
         e5:09:c4:6c:cf:8d:ee:67:42:bb:72:95:d6:5a:40:f0:98:cb:
         1a:46:84:93:40:38:b0:6e:30:34:fc:73:d9:87:5c:a2:c9:4c:
         1c:e2:5b:90:b1:c0:59:86:28:cd:f2:74:f9:e1:3f:f2:5e:c7:
         b8:15:1d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:00:42 2026 by rpki-client