Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft
File:                     7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft (raw, json)
Hash identifier:          A9UeJmQEwBFQ2lfHvjmmuCWVfWnUDT46WY5w9xTeHaQ=
Subject key identifier:   F4:A4:33:E4:4F:D0:F2:D5:71:1F:34:2A:16:36:56:D7:EE:7F:AD:93
Authority key identifier: EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2
Certificate issuer:       /CN=A91D41AC/serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft
Manifest number:          53
Signing time:             Fri 17 Apr 2026 06:16:27 +0000
Manifest this update:     Fri 17 Apr 2026 06:16:26 +0000
Manifest next update:     Fri 24 Apr 2026 06:16:26 +0000
Files and hashes:         1: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl (hash: CE9JQA8GcKbopxCnsCW/tEmtQeyK7Esv9DtWIvI98BY=)
                          2: D6DCF6420D3B11F19BC83FAA0F3D8C67.roa (hash: m4Jr3uuRCqNgf8md7I8vYpb7gOreEr0nf9WW3w8MQog=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl
                          rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D41AC, serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2
        Validity
            Not Before: Apr 17 06:16:26 2026 GMT
            Not After : Apr 24 06:16:26 2026 GMT
        Subject: CN=69e1d03b-a14c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:91:3d:92:d1:ee:73:19:f3:6b:52:17:5e:7c:
                    18:94:da:3d:8f:86:52:5a:4f:37:4d:f3:3e:7a:20:
                    08:1d:4f:96:1e:76:2e:2a:06:3c:41:67:0d:cc:cb:
                    76:21:14:07:9a:73:eb:40:96:19:78:a9:02:9a:2a:
                    38:5c:28:33:11:73:5d:a3:fc:dc:90:fe:1a:8f:22:
                    76:8d:2a:b7:c3:6c:62:be:83:ae:26:2e:21:f1:14:
                    49:5f:08:42:ed:9e:6a:5e:98:4f:76:f3:68:e1:ca:
                    13:7c:95:7b:49:44:4b:7c:06:ba:d4:0b:d3:f5:20:
                    17:d0:d9:b0:ae:4a:e1:c3:5d:29:8b:07:4a:b7:42:
                    ec:47:d4:27:f9:fe:0b:4d:12:49:db:45:6b:73:b5:
                    b4:81:7f:5b:28:ba:d8:76:4e:ee:b2:0e:cf:87:a2:
                    8e:c5:ce:df:9b:a7:81:42:d2:a8:96:92:0d:79:31:
                    19:79:3e:18:05:16:78:8b:84:f8:40:21:29:78:26:
                    06:3b:0f:7c:e6:e9:a2:1f:a1:eb:92:8d:bc:4c:85:
                    0c:d8:10:2d:4e:fd:54:60:40:be:af:92:0d:70:a7:
                    4c:b4:b4:1f:10:6b:35:d8:76:5f:34:96:7a:fc:30:
                    77:3f:81:ca:3e:9e:5a:b0:0d:14:b1:4e:6f:9f:f0:
                    c7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A4:33:E4:4F:D0:F2:D5:71:1F:34:2A:16:36:56:D7:EE:7F:AD:93
            X509v3 Authority Key Identifier:
                keyid:EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:41:ed:c7:a1:dc:4b:c8:81:98:75:8b:b7:bc:e9:7b:82:ff:
         65:10:78:09:33:18:f8:9c:72:49:71:24:83:a8:df:62:13:d5:
         2d:9d:0c:f2:db:d3:bb:d5:1f:25:39:ab:2c:41:cd:a9:1f:50:
         69:45:5c:6f:44:08:6e:95:c6:7e:4d:47:47:6b:3b:0a:13:a4:
         77:54:77:db:36:b7:2b:35:f1:5b:d4:af:71:54:1d:2a:5e:72:
         8c:4f:fa:b5:a5:cd:ac:60:f4:ba:d1:54:6a:a7:1d:02:7f:45:
         92:87:f8:47:d9:a4:e1:a3:50:e3:a8:6e:38:26:a9:f2:e5:3a:
         25:ac:b1:cf:ef:40:29:63:46:02:29:17:86:04:5b:2c:e9:9e:
         55:67:2b:50:cf:88:96:d0:a3:3b:0e:4c:12:06:9d:02:05:e9:
         a1:7d:4c:77:c7:d6:88:e6:a1:0d:34:6a:91:d4:cc:96:3d:80:
         79:79:f2:1d:f4:49:d5:e9:20:54:0a:52:ca:d1:b7:16:4f:cf:
         c2:3b:1a:08:89:38:e3:ff:60:7c:b3:ed:af:26:51:b4:05:ed:
         54:33:16:1e:d4:7e:09:d1:b0:dd:b3:af:28:28:47:58:e2:ad:
         1b:7b:83:85:c9:54:ff:9f:44:82:11:b4:a9:63:38:b7:41:46:
         1f:a7:3b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:05:23 2026 by rpki-client