Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
File:                     r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft (raw, json)
Hash identifier:          HLMnmM4SzXGdaHmPHT0UruWqRrsbKsFMt+E9FsF3ltw=
Subject key identifier:   80:3F:95:F8:59:3A:03:A4:98:E2:78:9F:FB:D8:32:60:6B:D1:7F:7D
Authority key identifier: AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE
Certificate issuer:       /CN=A912BA82/serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE
Certificate serial:       01CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
Manifest number:          01AB
Signing time:             Thu 21 May 2026 04:10:05 +0000
Manifest this update:     Thu 21 May 2026 04:10:05 +0000
Manifest next update:     Thu 28 May 2026 04:10:05 +0000
Files and hashes:         1: r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl (hash: w6NUwCgWjTnyopcVW4dfct0onAWCL7LtAl1VBZI+Nfc=)
                          2: 6198218AEB3311EEA75DE77DC4F9AE02.roa (hash: SJ1zAtwuUDoklbt6R8JhcX6A+HkMTpxPrsLu4rdoP7E=)
                          3: 4BFDDACCEB3311EE9D65C57DC4F9AE02.roa (hash: YLQu+XBkP0u4scPVL2HjSFkhwvlDsdMdNxwXV2B40qg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl
                          rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BA82, serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE
        Validity
            Not Before: May 21 04:10:05 2026 GMT
            Not After : May 28 04:10:05 2026 GMT
        Subject: CN=6a0e859d-fae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d8:2e:a1:54:31:e0:03:05:9f:cf:34:4e:f1:
                    d0:dc:59:ad:75:ba:e9:60:0c:d5:fa:92:ff:33:ab:
                    91:b5:6e:57:3d:4c:04:55:b3:7b:7d:51:c0:55:ba:
                    71:79:71:58:40:af:00:85:ec:f1:94:a5:a5:44:9d:
                    17:4b:54:87:fe:3e:f5:3e:37:96:0b:7d:63:c5:e2:
                    3c:e4:ab:43:28:3e:08:80:28:29:b9:e1:02:65:b3:
                    9f:2b:47:74:a0:4f:15:cc:3a:74:7c:c5:c4:67:a7:
                    7f:0e:f9:38:e6:66:53:83:31:cf:38:c6:59:71:2e:
                    0e:94:64:28:23:cc:a2:a6:ea:f0:58:77:d0:17:fb:
                    46:62:82:09:92:bd:c9:89:1d:1e:1d:0c:b9:7b:07:
                    c9:41:01:c5:f9:76:36:b0:e6:2a:f2:68:4f:87:d2:
                    c5:50:bb:8c:b4:d6:f0:3a:3b:c1:2d:b6:19:36:d6:
                    d2:5a:e6:97:1d:1f:34:66:e1:c7:da:dc:f7:54:83:
                    f5:6d:96:50:29:e9:94:0f:e9:5d:a6:33:83:f3:c7:
                    4a:1f:03:1b:42:22:a7:53:b3:4e:00:09:0d:b5:7c:
                    f0:46:bd:e1:4b:b7:a0:51:2b:c4:e5:a0:43:6f:9f:
                    aa:bf:2a:90:ef:87:3a:37:3f:b8:b9:ff:2a:40:04:
                    db:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3F:95:F8:59:3A:03:A4:98:E2:78:9F:FB:D8:32:60:6B:D1:7F:7D
            X509v3 Authority Key Identifier:
                keyid:AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e4:77:5a:40:ec:a2:a3:e8:84:44:8a:44:4a:88:f7:8c:48:
         74:d0:01:9f:00:e5:eb:8c:20:fb:bb:a1:2c:62:55:3f:bf:6d:
         06:71:5c:ab:a6:9d:3f:2d:20:00:0f:a5:4a:d7:98:ef:c1:e1:
         57:af:66:37:e9:0a:60:13:c7:96:f4:17:3f:f1:b6:02:15:ff:
         40:5d:e4:8b:38:e3:d9:21:c5:4e:37:23:5a:66:dd:b7:80:9f:
         d2:9c:58:f0:70:42:ae:7d:b5:ae:f5:a8:02:d5:60:a6:ef:7e:
         2c:c0:ed:e8:10:21:ab:52:fa:b8:f8:d8:6a:3c:de:08:f8:36:
         62:36:c4:5c:4f:d4:9d:d8:a8:34:d7:fd:e5:2d:8d:dc:ba:ec:
         38:22:6a:dc:06:ff:f5:66:8c:f1:6f:4c:d8:30:64:e5:3a:fc:
         2f:46:1b:2f:ef:ce:ff:5a:0d:8f:c3:fd:0c:cb:d5:64:0d:86:
         40:89:0a:ba:e8:f7:56:e9:d4:a8:95:20:45:2d:04:58:5a:7c:
         e7:e4:05:e6:a0:4d:c2:d1:f2:73:dd:fc:c6:af:8a:cf:4b:63:
         3a:b3:6a:72:91:86:b7:99:9c:21:5e:a9:b4:5f:b6:5d:08:83:
         08:ab:9e:85:b2:d3:de:24:43:c7:25:6f:4a:48:94:ea:6b:7a:
         3a:4e:94:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:46 2026 by rpki-client