Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
File:                     7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json)
Hash identifier:          dlKBWHskmZs2qok8JAS6RbY2mE6FaPZZP51C1FPV5bg=
Subject key identifier:   CE:96:65:5C:44:FC:50:67:C6:5A:4F:AC:88:90:8E:C9:9D:9D:B6:2C
Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA
Certificate issuer:       /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
Certificate serial:       01C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
Manifest number:          01C0
Signing time:             Thu 21 May 2026 03:58:47 +0000
Manifest this update:     Thu 21 May 2026 03:58:47 +0000
Manifest next update:     Thu 28 May 2026 03:58:47 +0000
Files and hashes:         1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: qq1DWg5tAM3WwJmCPVpaNgQcy7Iv2Mc0S7FtGaIAszg=)
                          2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: YjRa1pB30YYbPQePj+r96aLADC7aXekCFySJbOFg6Mg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl
                          rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
        Validity
            Not Before: May 21 03:58:47 2026 GMT
            Not After : May 28 03:58:47 2026 GMT
        Subject: CN=6a0e82f7-a18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:44:85:be:2c:cb:6b:ec:94:f8:76:06:4c:c4:
                    90:37:57:7e:6e:ab:6a:a1:23:9f:c0:34:b8:2f:db:
                    56:93:50:9f:2b:f0:2c:81:04:99:d1:b3:55:9a:d4:
                    65:db:e4:1f:a5:36:e3:7a:f4:f9:01:80:15:1d:c4:
                    10:bd:39:b2:67:7a:6b:6b:97:e4:35:f4:f9:16:8c:
                    fd:56:92:c0:e5:0f:77:31:74:3a:d1:23:f0:27:18:
                    39:15:e4:d9:21:27:7b:43:fb:a4:24:3f:79:67:3e:
                    69:b5:da:f8:6b:cf:d0:73:e3:ed:b3:88:18:91:5b:
                    e5:be:14:4f:b2:3c:ae:6b:b7:f1:fa:44:4b:8d:0a:
                    2c:89:0f:73:ee:dd:9d:42:0b:c1:9f:22:7e:cc:14:
                    8d:b2:e6:87:de:c7:fd:11:b9:e3:a2:fe:3b:01:66:
                    af:55:4a:cd:96:b7:14:c4:de:5d:28:88:f4:78:ca:
                    1f:27:15:5a:23:a6:f8:f0:5c:f2:ae:dd:15:1c:96:
                    c6:b0:68:df:9a:e2:34:31:be:fc:ad:a0:40:b6:ef:
                    6c:05:9a:11:91:60:94:bb:aa:b4:14:68:c2:36:05:
                    6d:10:97:d7:64:05:67:fb:f1:59:c6:e2:c5:bf:6b:
                    87:39:3a:1d:f4:4c:74:9c:e9:53:fc:8a:db:05:43:
                    ad:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:96:65:5C:44:FC:50:67:C6:5A:4F:AC:88:90:8E:C9:9D:9D:B6:2C
            X509v3 Authority Key Identifier:
                keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:58:7b:a1:1b:2a:19:d4:e3:7c:98:3b:05:93:d5:05:22:7e:
         6e:8b:48:ea:14:2f:f2:0d:93:27:0f:b6:71:8b:50:52:12:4e:
         de:53:9a:f7:4a:6c:47:c4:96:70:1c:a5:c0:c8:d5:34:d8:a7:
         65:95:42:1a:bd:74:d2:23:b6:56:d9:0d:b7:86:67:74:26:2b:
         c3:95:0a:82:48:36:08:ac:8e:73:86:2d:47:63:09:bb:24:80:
         88:f5:5d:be:7e:85:2d:32:79:e7:f6:9a:7d:b3:5b:dd:e7:f2:
         80:52:9a:db:04:a7:85:a9:c7:29:eb:cb:45:d3:9f:b1:e9:64:
         e7:e4:e8:52:47:b7:f1:50:8d:59:de:8b:0f:17:05:a7:f7:31:
         43:13:15:fa:8d:23:67:f6:69:b8:48:27:64:9d:6c:4b:3a:50:
         93:ea:10:9c:f2:d2:33:c1:3c:40:3a:9c:00:1e:da:40:e1:5b:
         7e:dc:2e:73:61:aa:19:77:ff:64:39:3e:67:29:06:6b:eb:ee:
         4a:81:af:08:e8:5c:01:fc:5f:51:4e:8a:4c:42:de:fa:b8:f7:
         0b:b5:db:8a:ff:61:1d:e3:69:c6:83:cc:a0:ed:cc:9d:59:1a:
         9d:2d:1d:6b:9c:9a:9b:11:54:39:7c:d3:a2:83:1e:e4:59:72:
         53:ed:bb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:39:37 2026 by rpki-client