Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
File:                     AchYGBCI4bnFd13KDEuum5_1d7M.mft (raw, json)
Hash identifier:          Z14tYLTjeBX1HmzrXLIeavvkAu1/eDCZ8b3ic/WknHU=
Subject key identifier:   74:9D:D8:4A:EA:A1:4D:D4:58:FF:12:27:45:BD:86:D5:36:14:38:02
Authority key identifier: 01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3
Certificate issuer:       /CN=A91D5979/serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
Manifest number:          7D
Signing time:             Sun 05 Apr 2026 07:08:48 +0000
Manifest this update:     Sun 05 Apr 2026 07:08:47 +0000
Manifest next update:     Sun 12 Apr 2026 07:08:47 +0000
Files and hashes:         1: AchYGBCI4bnFd13KDEuum5_1d7M.crl (hash: AFiTVuhEi8HcPJvaFcsoTIQlII6bXkWuugA5OEMz/so=)
                          2: A80352FA7F2711F0AC85D327C4F9AE02.roa (hash: soDV/PEqeB7K5BGg9JE4t87sCM0x5IJxHwVBfeX+piI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl
                          rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:08:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5979, serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3
        Validity
            Not Before: Apr  5 07:08:47 2026 GMT
            Not After : Apr 12 07:08:47 2026 GMT
        Subject: CN=69d20a80-698b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f4:9b:d4:29:e3:fe:6a:fb:57:0c:05:87:a2:
                    27:04:e8:9e:53:c3:47:1c:1c:d4:55:cd:5a:f4:40:
                    45:a5:d1:df:8b:17:62:6b:8e:22:ab:57:6c:aa:f7:
                    12:ee:a6:8c:51:57:f3:1b:85:79:06:af:97:b2:d9:
                    30:47:ba:75:37:b7:e2:67:71:16:df:23:c2:36:76:
                    99:55:29:c1:92:a8:d9:53:72:72:92:77:30:5d:3a:
                    7f:f7:12:c5:07:44:33:fd:b1:b5:89:83:bc:41:0e:
                    4e:96:cb:33:ec:a7:87:79:41:9f:65:d0:c5:eb:aa:
                    a2:c2:27:cc:cc:74:85:70:c9:d7:ff:c1:95:4d:bd:
                    4b:80:10:e1:da:ba:d8:e2:73:72:2c:7e:b2:31:94:
                    29:a5:2f:8b:5b:bf:ad:07:47:a7:7b:2d:ed:92:21:
                    c0:1b:f3:fb:18:39:b0:3e:13:29:8c:54:54:80:05:
                    59:97:4f:28:a1:a9:07:0b:8b:a6:81:e5:d7:36:a9:
                    60:00:cb:38:56:b9:24:7f:d8:55:b4:46:76:22:34:
                    8e:46:9f:dd:fd:7f:8d:d6:a7:e6:f8:10:c9:52:69:
                    1b:f6:35:91:3d:5f:08:f6:49:2b:91:4b:69:77:5e:
                    80:2f:3b:0f:41:ce:15:e1:07:00:91:9e:76:8e:31:
                    1a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9D:D8:4A:EA:A1:4D:D4:58:FF:12:27:45:BD:86:D5:36:14:38:02
            X509v3 Authority Key Identifier:
                keyid:01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:6b:7a:d7:10:be:39:62:c9:35:e8:9e:e5:c1:91:8b:ac:ea:
         7d:ab:29:99:02:8d:3f:11:35:89:cd:fe:2a:57:86:4a:25:3c:
         31:84:fb:61:42:41:dc:09:87:cd:5f:ed:e5:2c:2b:1d:22:f9:
         c6:b0:a3:d9:15:27:96:85:a2:7f:3e:31:57:e9:e4:35:8e:0c:
         54:2f:ce:ae:bb:3e:c5:cb:0b:90:a1:9e:87:90:4a:61:e8:cf:
         90:55:61:eb:77:ca:ed:1d:cd:68:d1:3f:ee:af:07:3b:88:76:
         c9:12:6f:cc:68:48:50:72:37:3f:2c:10:2a:00:00:a8:c3:58:
         42:76:be:20:fa:21:0e:ab:2d:a5:75:7e:94:9f:c7:3a:29:15:
         67:05:6b:4c:22:cd:be:0f:9b:8c:22:fc:4f:36:14:a6:b1:67:
         4c:77:f8:51:75:d7:a0:41:db:0a:58:e7:47:59:55:3c:b3:8a:
         93:0d:96:0b:91:1c:89:ea:9d:cc:e0:cf:15:17:d3:d5:c1:9a:
         44:c1:02:1d:e8:72:9d:25:24:77:04:8f:7d:ee:f4:66:d2:54:
         37:de:e5:b5:53:7e:bf:b6:64:15:eb:30:e9:4f:fa:90:40:8d:
         d9:3d:97:e6:ad:26:70:4b:50:42:52:46:62:77:f0:d3:78:6d:
         fc:fa:2c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:26 2026 by rpki-client