Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft
File:                     _DR_mfrUz-7KsxUhAkJ3GusIbXU.mft (raw, json)
Hash identifier:          ZSrciwEf/H2eFXIxG2vjOZcbWT8coYz9Cbk1vWhZo48=
Subject key identifier:   03:AE:50:F8:91:08:AE:9D:EB:7A:CE:08:9E:80:B5:EF:17:57:D4:43
Authority key identifier: FC:34:7F:99:FA:D4:CF:EE:CA:B3:15:21:02:42:77:1A:EB:08:6D:75
Certificate issuer:       /CN=A91F7EFC/serialNumber=FC347F99FAD4CFEECAB315210242771AEB086D75
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft
Manifest number:          B7
Signing time:             Thu 21 May 2026 07:10:44 +0000
Manifest this update:     Thu 21 May 2026 07:10:43 +0000
Manifest next update:     Thu 28 May 2026 07:10:43 +0000
Files and hashes:         1: _DR_mfrUz-7KsxUhAkJ3GusIbXU.crl (hash: fEVuVjMdZI2Fr5IA/MQ2iXv+91oBqNCF/XoVS/bVhOc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.crl
                          rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7EFC, serialNumber=FC347F99FAD4CFEECAB315210242771AEB086D75
        Validity
            Not Before: May 21 07:10:43 2026 GMT
            Not After : May 28 07:10:43 2026 GMT
        Subject: CN=6a0eaff4-40f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:57:4a:af:ac:21:5c:6e:dc:db:35:c1:03:d2:
                    45:71:70:f9:ef:00:8d:fc:c0:c0:eb:f5:25:f0:43:
                    5e:86:63:7c:d2:06:43:ec:34:7c:9e:f8:55:cc:5b:
                    0a:7e:72:06:b2:1a:73:a3:99:44:01:b1:a4:a0:c0:
                    3b:d2:14:11:22:31:ab:95:4b:4c:2e:03:f9:4f:59:
                    1d:39:3f:09:3d:22:bb:7b:e8:97:48:33:27:db:bf:
                    c5:d3:a0:87:25:12:62:34:5c:bd:79:7b:4b:69:e1:
                    27:e8:79:e8:e5:d5:75:c6:15:7e:c1:bf:cf:25:c4:
                    2f:50:46:33:2b:ef:e3:b2:1e:f6:cc:dd:b5:7b:72:
                    e8:d4:41:00:ca:5e:72:8c:3b:72:05:bc:24:56:44:
                    5f:24:6c:1d:a2:ed:25:5d:74:82:44:d1:79:07:89:
                    3d:c8:db:8e:0c:12:77:16:8d:fe:58:e3:24:0e:b8:
                    da:cd:32:94:d1:da:8c:6d:ec:1b:a5:65:8a:be:7f:
                    4b:65:23:7e:43:25:67:98:d9:39:cc:da:57:30:27:
                    94:6c:f3:77:94:7d:c3:ec:d1:9e:e1:f3:4b:79:9f:
                    51:9d:e7:1a:14:2a:df:c3:b8:91:79:4f:5d:b5:36:
                    c0:9e:9b:a4:88:11:0b:45:3b:13:3a:bb:99:f9:42:
                    47:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AE:50:F8:91:08:AE:9D:EB:7A:CE:08:9E:80:B5:EF:17:57:D4:43
            X509v3 Authority Key Identifier:
                keyid:FC:34:7F:99:FA:D4:CF:EE:CA:B3:15:21:02:42:77:1A:EB:08:6D:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:7a:33:ba:88:c7:ef:11:f6:67:b4:80:92:5d:50:ae:fa:98:
         ff:06:40:a2:01:77:22:5f:5e:08:fb:9e:0b:e1:d8:61:ba:ef:
         37:39:d1:ec:33:1d:84:8d:f1:63:7f:26:bc:2a:60:e6:7f:33:
         fc:ed:d1:bd:d1:ed:3e:55:3f:b6:c3:04:a3:8a:b0:ca:2f:d4:
         5c:d8:f8:1a:d9:be:c4:f4:c9:9c:85:f1:9b:3c:23:2d:d4:a5:
         95:82:ea:3e:d2:32:f2:fe:f3:25:24:d1:f0:fb:73:e7:a9:42:
         7c:5f:23:4e:cc:73:4f:ce:27:2d:d6:d9:f0:be:8e:41:7a:fd:
         f2:f6:d8:ab:52:2c:15:4e:54:de:c6:a0:5f:ee:92:cb:4b:1c:
         3b:36:d6:5f:bc:df:b6:cb:ad:59:3a:07:43:19:6e:f3:ef:0f:
         e4:a7:3d:61:23:6e:13:02:b7:52:2d:3e:71:2f:77:a7:1b:a5:
         f4:2c:2e:c7:68:fb:e1:d3:85:2d:df:b0:4d:cd:d9:8a:8e:b6:
         b5:aa:9a:6f:c2:c6:8b:0e:39:63:63:e3:f7:1a:0d:ce:e0:af:
         31:db:83:76:2a:a5:f2:50:49:ef:f8:f7:59:ed:b4:23:d0:c4:
         bc:9e:6f:ee:72:4f:5f:88:23:df:e8:39:65:2e:d1:cf:c4:ac:
         e5:96:78:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:53 2026 by rpki-client