Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.mft
File:                     -n7ee2K0e4fdE5hqjnLD_jZWtcw.mft (raw, json)
Hash identifier:          cTbsQvybOJSJc7Bc75jWGldrdYUGE5N2DmmNS0IENos=
Subject key identifier:   F8:E3:E9:57:9B:BF:0B:0B:34:AF:49:36:C7:E7:64:C9:6C:C5:D1:0E
Authority key identifier: FA:7E:DE:7B:62:B4:7B:87:DD:13:98:6A:8E:72:C3:FE:36:56:B5:CC
Certificate issuer:       /CN=A91E4743/serialNumber=FA7EDE7B62B47B87DD13986A8E72C3FE3656B5CC
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-n7ee2K0e4fdE5hqjnLD_jZWtcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.mft
Manifest number:          0976
Signing time:             Sat 04 Apr 2026 19:58:03 +0000
Manifest this update:     Sat 04 Apr 2026 19:58:03 +0000
Manifest next update:     Sat 11 Apr 2026 19:58:03 +0000
Files and hashes:         1: -n7ee2K0e4fdE5hqjnLD_jZWtcw.crl (hash: 8D3eCqvxY02c2MQhMANStrTfUPSMgbbMKHDb6f5KUkQ=)
                          2: ECC7CA2EF1AA11F0885E8853736F56BC.roa (hash: oWetRFPONyPjhz2G1P+9aSesJu8FRJYWjRGlV512qhk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.crl
                          rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-n7ee2K0e4fdE5hqjnLD_jZWtcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:58:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4743, serialNumber=FA7EDE7B62B47B87DD13986A8E72C3FE3656B5CC
        Validity
            Not Before: Apr  4 19:58:03 2026 GMT
            Not After : Apr 11 19:58:03 2026 GMT
        Subject: CN=69d16d4b-4804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:15:7f:e3:a7:8c:da:f8:75:c8:0c:e9:b0:94:
                    c4:53:e9:cf:a2:10:ca:1c:a5:b1:50:73:c9:fd:e6:
                    7b:4d:4c:1e:30:19:60:25:bc:8f:3a:05:57:07:eb:
                    c1:e8:bd:3a:d5:fe:85:bb:d6:f7:f1:e2:3e:25:fa:
                    5a:e1:a6:ed:8b:e1:18:5b:ff:d0:2c:45:2a:ee:40:
                    46:b4:90:2b:e0:97:fa:8b:3e:ae:f0:2c:66:53:f4:
                    e9:f6:b6:32:e9:c2:c7:75:64:46:3e:fe:cc:f8:d3:
                    31:c9:05:3f:80:44:76:31:6a:5c:ab:c4:5b:1f:a3:
                    ab:a9:00:29:02:44:0f:84:fd:06:a5:50:2c:ae:4e:
                    bc:e1:93:e8:95:6b:87:29:1f:26:c9:d9:ce:1a:af:
                    e8:49:e2:03:e9:35:6f:5a:de:6c:69:43:02:f3:05:
                    80:58:ec:98:fa:e4:8d:77:71:22:11:66:22:7c:f2:
                    37:29:19:79:02:63:39:d4:b3:7d:87:db:64:f1:6e:
                    17:f1:99:fd:7d:14:43:1a:65:19:d9:1c:6c:87:34:
                    ad:3a:e9:66:9d:13:47:b5:9d:20:3e:a7:9f:5f:23:
                    1d:10:e9:ce:bf:21:bd:35:05:3d:2d:e3:45:56:6a:
                    12:ec:ef:16:cd:0e:bd:51:15:08:16:f3:42:b5:c4:
                    d3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E3:E9:57:9B:BF:0B:0B:34:AF:49:36:C7:E7:64:C9:6C:C5:D1:0E
            X509v3 Authority Key Identifier:
                keyid:FA:7E:DE:7B:62:B4:7B:87:DD:13:98:6A:8E:72:C3:FE:36:56:B5:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-n7ee2K0e4fdE5hqjnLD_jZWtcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:06:be:56:3a:0e:7c:6b:af:8e:a7:a2:bf:01:68:d0:82:70:
         f6:75:22:c3:6e:45:34:5f:83:67:03:69:6a:95:97:e8:fd:07:
         cd:3c:dd:df:5d:29:06:38:55:66:07:c9:fa:35:58:1d:cf:23:
         a3:0a:ef:88:1c:55:b0:1e:63:d7:a9:7c:72:fe:29:e1:2e:e7:
         7d:8c:dc:8b:34:3d:38:83:0c:9f:12:bb:57:6b:00:a5:be:e6:
         25:18:98:7c:5b:27:86:42:a7:2b:4e:d0:d5:7d:ea:af:b3:39:
         41:14:15:64:27:6a:6e:cf:84:c2:9b:2b:dd:ae:92:7c:46:47:
         51:56:20:c6:15:c0:99:ee:ae:49:76:34:07:4d:57:5b:b7:50:
         26:e7:97:c6:5e:d5:43:3b:fe:17:db:d2:05:bd:33:ed:ac:52:
         fa:46:51:e0:66:14:f2:7d:7c:c9:cb:f5:cc:45:23:6b:6a:99:
         bb:06:64:49:a7:c1:4e:28:33:43:8c:21:31:e4:8b:1b:0d:fc:
         e5:88:ea:a7:77:84:6a:98:94:61:89:a0:79:5e:f5:21:05:75:
         a2:4e:29:a2:f8:e7:0d:cc:ce:36:73:af:72:dd:6c:70:21:47:
         b9:9d:de:67:0d:16:80:8c:c2:a9:72:e2:60:d2:15:c9:b4:e3:
         15:b2:db:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:09 2026 by rpki-client