Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft
File:                     n47RxT7pDTyshKZHDEt1lMVXXYU.mft (raw, json)
Hash identifier:          k3I45qDCxa2d25A3Nfic0wdP9zRdBYpz5N6fMvAAC9A=
Subject key identifier:   30:79:6B:BC:FD:73:A6:2C:FF:A3:21:A9:50:68:B0:4A:E4:6C:FE:55
Authority key identifier: 9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85
Certificate issuer:       /CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85
Certificate serial:       023B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft
Manifest number:          0231
Signing time:             Sat 09 May 2026 02:38:23 +0000
Manifest this update:     Sat 09 May 2026 02:38:23 +0000
Manifest next update:     Sat 16 May 2026 02:38:23 +0000
Files and hashes:         1: n47RxT7pDTyshKZHDEt1lMVXXYU.crl (hash: BhAQSRGZ6fnsN39ZO5b1ern2bWLhW/57HLGIb+OvocQ=)
                          2: FD4E307AFEA711EDBC673B4BC4F9AE02.roa (hash: Wwe4w5QFaqaRZSg5Rdnoty2maRaw53FrW2eNR6k8xoU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl
                          rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 16 May 2026 02:38:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B983, serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85
        Validity
            Not Before: May  9 02:38:23 2026 GMT
            Not After : May 16 02:38:23 2026 GMT
        Subject: CN=69fe9e1f-76c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:d2:95:1a:3f:ae:2d:bd:9a:d6:33:b6:d7:7a:
                    61:93:75:e9:e8:7b:c5:5a:19:b0:0a:4a:41:77:60:
                    55:dd:2b:cf:69:5d:b6:01:b9:74:4a:48:57:b2:a2:
                    72:f9:82:1d:0b:3d:3f:30:8c:a1:a4:8b:b8:b9:86:
                    94:ee:92:d4:71:6a:94:a0:df:09:3e:62:8a:be:e7:
                    35:2b:e7:e1:54:61:00:d7:e5:5a:46:1a:1c:ed:e8:
                    61:19:80:83:e8:ae:ad:0e:64:8b:f7:20:5f:4f:f2:
                    64:6e:f6:7e:e5:36:8b:ac:01:41:88:5e:72:43:ae:
                    d2:a6:04:5b:a0:98:d1:16:79:fd:cb:b6:53:28:04:
                    a5:91:ef:a6:73:44:cb:fd:3b:99:6b:ce:d2:47:08:
                    64:b8:28:03:ac:78:be:73:82:09:73:b7:75:01:26:
                    1a:06:3a:8d:1b:f8:5d:c7:cb:59:98:10:fb:62:18:
                    ed:56:a0:61:c4:94:ef:15:ea:c3:8c:19:4c:be:35:
                    c5:2e:d7:a5:9c:05:83:ff:e0:dc:89:be:36:33:a7:
                    45:70:11:ee:f7:4c:6c:12:fd:03:db:00:5f:e6:4c:
                    1b:04:b2:f2:59:84:ee:bf:85:b0:27:44:63:11:62:
                    b0:08:16:73:8e:f8:61:97:a6:c2:db:cd:8e:31:e1:
                    ef:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:79:6B:BC:FD:73:A6:2C:FF:A3:21:A9:50:68:B0:4A:E4:6C:FE:55
            X509v3 Authority Key Identifier:
                keyid:9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:15:ba:ba:4b:f0:27:a1:1b:4d:ec:41:b0:43:dd:74:9e:47:
         49:b7:e5:71:07:16:0d:ea:d3:e8:cb:e2:c1:2d:67:31:22:36:
         40:08:f9:c7:60:8b:40:94:2d:57:7b:f9:ab:66:c1:81:1c:0c:
         36:0a:b9:d1:f4:94:c5:e1:ff:51:c4:b9:ec:9a:1e:c0:dc:7a:
         57:75:0f:39:ea:61:ed:6d:a0:21:d6:84:75:05:0f:ac:1a:2a:
         c2:40:50:3d:48:ce:6c:73:06:93:59:92:ec:06:d1:2e:bd:b9:
         e1:fa:f2:83:ce:8e:af:b5:17:32:e7:3b:b7:a0:0a:7b:86:64:
         0d:e1:4f:38:b4:ab:1f:56:bf:96:59:e4:20:e5:14:f9:a0:0e:
         4d:a8:4a:f4:7a:4a:30:d9:a3:97:43:62:e0:16:84:23:f8:f8:
         0f:04:2e:97:95:14:2f:a6:b5:22:87:11:79:14:ba:8c:dc:e6:
         be:78:52:55:2f:94:be:9d:71:be:a7:95:91:ba:1c:a6:a7:61:
         52:9b:c8:73:86:9d:97:5c:d4:c2:21:36:4c:0b:1c:82:cb:ee:
         28:39:d3:b5:cc:8c:7c:24:b9:66:da:e5:d3:be:71:ec:11:06:
         44:43:22:bf:e5:ab:19:c3:d5:c0:fc:79:7d:57:d4:19:a9:9c:
         c4:b2:5a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 13:25:13 2026 by rpki-client