Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
File:                     7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft (raw, json)
Hash identifier:          mLe51TrywBREYbHz6pTTicxpimsouaPmVMPsBTR1TB4=
Subject key identifier:   52:25:FA:73:07:D2:E9:98:E2:76:9A:54:12:0E:98:CF:A3:40:64:02
Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34
Certificate issuer:       /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434
Certificate serial:       0254
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
Manifest number:          0247
Signing time:             Sun 05 Apr 2026 02:07:06 +0000
Manifest this update:     Sun 05 Apr 2026 02:07:06 +0000
Manifest next update:     Sun 12 Apr 2026 02:07:06 +0000
Files and hashes:         1: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl (hash: mHn4S9lvO9348o5WMFB6D5SqVYvacue8Gz+2gz7wcBU=)
                          2: E1C173F01EFD11EE88E45C83C4F9AE02.roa (hash: DJ06rDWtxpzl4kt5SsUv8BxyoE+13pLa3Gy5GlIh2ic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl
                          rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:07:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596 (0x254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DD15, serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434
        Validity
            Not Before: Apr  5 02:07:06 2026 GMT
            Not After : Apr 12 02:07:06 2026 GMT
        Subject: CN=69d1c3ca-0363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:f3:7c:de:af:03:8e:db:1f:24:9a:b4:22:
                    4b:0b:69:20:7b:c2:3b:78:84:a9:0c:66:0c:d2:c3:
                    6f:1f:c5:db:84:c7:9b:b8:26:14:31:60:c4:ae:21:
                    fb:cb:97:ea:97:7f:fe:7a:17:9e:85:c3:f9:c4:09:
                    8d:d7:7e:5a:28:0f:f7:50:bf:47:3e:22:bb:f8:21:
                    3f:d5:fa:52:cc:d0:03:0b:f3:80:11:dd:cf:5c:ff:
                    72:d6:40:b1:c0:5b:50:f4:89:54:1f:1b:a5:30:ae:
                    c6:e3:13:ae:43:a7:e5:61:98:e3:7a:e8:be:bf:c5:
                    41:6e:23:64:19:66:5b:a5:7a:99:69:2e:cc:21:7a:
                    5b:dc:b4:9e:1d:60:e3:56:ac:0c:e3:83:d8:e7:62:
                    12:0d:4f:a1:c9:52:14:be:6c:22:38:dd:f4:75:a7:
                    7f:00:09:b9:59:9e:77:5c:91:4a:2a:ce:b3:cb:b5:
                    b6:d3:8c:21:80:54:ba:4b:4f:7f:e5:6e:8d:2c:33:
                    ad:3f:35:04:d7:3d:d5:40:6a:28:6b:fd:25:af:6e:
                    53:3e:cd:25:ae:f6:ce:bc:97:38:cf:80:44:7e:56:
                    99:69:a4:7b:6d:5c:0c:16:3d:59:20:a9:c6:00:04:
                    e3:9a:cd:82:bd:fb:f2:3e:8e:98:b3:69:95:01:d2:
                    1b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:25:FA:73:07:D2:E9:98:E2:76:9A:54:12:0E:98:CF:A3:40:64:02
            X509v3 Authority Key Identifier:
                keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:22:f7:53:32:60:2b:9c:f5:c2:95:6e:37:7c:1d:4c:b4:7e:
         9b:b6:46:9b:c2:95:fc:69:9b:4a:1d:8d:2b:9c:0d:80:87:ae:
         d4:b5:a2:35:85:49:a0:4a:eb:9b:f2:a6:4e:5f:ae:5e:05:21:
         c9:9d:1a:7e:2f:49:e3:55:f4:15:02:0a:28:64:4e:87:2b:d7:
         6f:99:f5:47:7a:3f:b8:1a:6b:b9:92:c6:72:dd:ab:53:71:a2:
         94:db:dc:e6:a8:8a:c4:93:15:29:82:64:dc:80:ca:be:91:b6:
         a3:bf:4c:33:3e:41:4d:50:93:dd:71:aa:e5:2f:9b:e8:f7:41:
         1d:91:53:46:35:dc:1a:57:11:4e:9f:7c:3d:e4:7e:ea:d8:9f:
         8d:14:ac:2f:52:06:e8:0a:c8:ad:e3:a3:c1:49:59:41:73:af:
         af:93:c3:f7:fe:bc:eb:55:66:d8:02:e4:05:f9:c5:cb:b5:c3:
         65:ac:84:71:d9:7f:49:00:76:93:61:e0:54:c4:24:de:58:8c:
         41:cf:73:9e:e3:5d:11:a4:2e:61:cc:5c:5f:84:54:fd:4a:3c:
         bd:0e:20:e5:a3:86:cc:8c:41:94:d3:eb:c5:7b:37:2d:73:da:
         3c:23:1d:cb:71:e3:d9:2d:f2:2b:ca:69:b6:50:8c:11:19:8e:
         37:a0:f6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:42:24 2026 by rpki-client