Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
File:                     79cHaffoVdJXok1qHUkDlQqzadM.mft (raw, json)
Hash identifier:          mgnXlYOlDc3V1lyeWFNU1s8xP0ahxFh3gg1LIlxMOM8=
Subject key identifier:   B2:FB:96:89:E1:30:90:7F:74:71:E5:F5:6E:0F:D3:B6:76:07:D3:84
Authority key identifier: EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3
Certificate issuer:       /CN=A91DBE37/serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3
Certificate serial:       0729
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
Manifest number:          0721
Signing time:             Sat 04 Apr 2026 21:37:40 +0000
Manifest this update:     Sat 04 Apr 2026 21:37:40 +0000
Manifest next update:     Sat 11 Apr 2026 21:37:40 +0000
Files and hashes:         1: 79cHaffoVdJXok1qHUkDlQqzadM.crl (hash: Psk0hn3woIqjktxXRzjytiZjasmWIcPZ9JbR4sxBub4=)
                          2: 9E924168765811EB9E261F25C4F9AE02.roa (hash: Ck2Qok/2TKHWJ1WhyS73ofFb+puPh3hrhRRG4T4K9QU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl
                          rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1833 (0x729)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBE37, serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3
        Validity
            Not Before: Apr  4 21:37:40 2026 GMT
            Not After : Apr 11 21:37:40 2026 GMT
        Subject: CN=69d184a4-807f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:b4:f8:5f:e0:fb:d9:fb:4c:c0:4a:c4:b9:
                    cd:97:26:1d:9c:05:8f:cb:48:97:a3:76:7b:78:41:
                    85:42:d8:16:e5:db:ab:5f:25:59:0d:b0:26:16:ba:
                    b2:51:fc:43:df:b8:96:88:0a:98:e4:92:37:28:fb:
                    d1:0f:4b:5f:ce:87:18:61:76:0d:9a:63:f6:23:ed:
                    fb:6d:97:3b:be:a0:9c:22:ab:59:fd:c3:1d:50:98:
                    fa:3d:72:b6:52:59:b6:55:b2:1e:4b:e1:ff:6e:c1:
                    67:55:3b:2c:cc:2a:f1:93:7b:ea:af:34:05:62:f8:
                    8e:00:76:89:a6:10:46:f5:59:51:98:a4:28:67:f8:
                    46:a2:ab:77:64:0d:3e:03:29:40:fa:5e:57:67:cd:
                    73:1e:a0:a9:83:c7:bf:fe:76:46:4e:fd:37:35:b3:
                    ff:64:28:31:7b:9c:d0:d7:68:c4:ae:9a:bd:b4:22:
                    e0:1f:ac:c2:f1:a0:fd:17:dc:ea:3f:48:4a:c7:42:
                    cb:a0:b6:49:cf:00:c5:72:f1:ed:cd:62:45:50:5d:
                    64:33:9d:91:13:03:63:c6:f3:92:bc:d2:22:16:6c:
                    ca:ac:5c:13:6a:85:38:a4:b4:b1:5b:d1:22:c0:86:
                    3d:a5:df:2a:23:09:b8:54:b7:19:20:03:c7:bb:06:
                    80:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FB:96:89:E1:30:90:7F:74:71:E5:F5:6E:0F:D3:B6:76:07:D3:84
            X509v3 Authority Key Identifier:
                keyid:EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:de:01:3f:b0:8a:cc:24:e5:d8:c5:59:33:94:ad:dc:26:91:
         b2:0e:ff:34:a5:cc:21:a7:b5:08:fd:19:a7:02:99:03:de:d5:
         e0:48:bb:c3:58:d3:38:d0:e1:4a:d6:21:47:c1:58:36:26:ea:
         aa:be:08:1a:cf:20:2e:63:d7:41:bb:21:39:b8:54:73:39:44:
         35:92:19:1c:ef:54:18:65:be:41:96:64:1b:bb:56:ef:14:8b:
         c9:4c:cc:8f:a2:ff:2c:45:5e:9c:b6:d2:8b:86:89:09:9e:55:
         8a:8e:f9:5b:8f:b2:d5:9c:23:37:91:e5:c4:eb:4c:87:8b:08:
         aa:bd:9c:81:f8:09:50:da:37:4e:47:87:52:67:da:ff:45:d4:
         b7:1f:f7:e8:18:15:1b:3e:b0:3d:36:73:f6:2c:4b:29:54:5a:
         b0:c4:a3:7f:23:85:e5:2c:91:d6:0e:fb:80:e3:72:53:39:3f:
         e6:3e:e2:7d:0b:a2:55:73:bc:c4:d7:e2:0b:47:8e:a2:2c:a6:
         a5:d5:b8:7b:10:1b:4a:11:d8:0f:70:74:c5:23:1e:db:61:14:
         4d:a2:17:7c:c4:cc:cc:c8:16:07:f6:97:19:97:8a:ce:48:35:
         7e:65:da:dc:df:f1:e5:63:46:86:d3:e7:81:12:39:9d:06:5c:
         f9:d6:92:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:58:47 2026 by rpki-client