Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft
File:                     atr7oploMMUdaBwyEtBLXHJMEx0.mft (raw, json)
Hash identifier:          MPDTJ9Oc3gJhi2pe1Ysdmz8lVwvNvFjmvYTlP2T8DLA=
Subject key identifier:   56:09:B6:B7:A8:BF:8A:E1:DD:E0:37:88:1C:77:36:61:47:0E:FC:1D
Authority key identifier: 6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D
Certificate issuer:       /CN=A913F8FC/serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D
Certificate serial:       01C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft
Manifest number:          01B0
Signing time:             Sun 05 Apr 2026 03:43:51 +0000
Manifest this update:     Sun 05 Apr 2026 03:43:51 +0000
Manifest next update:     Sun 12 Apr 2026 03:43:51 +0000
Files and hashes:         1: atr7oploMMUdaBwyEtBLXHJMEx0.crl (hash: Op+/h9sofNJT+AXcwZkEMfY7risAZ5zppiM9qJ8nuAk=)
                          2: 36172D6200E911F18D21A14F396F56BC.roa (hash: 77EbUdBXNscTbPDQ5ZvSP6ndeE2Lqe+veg3a/HAELsw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.crl
                          rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F8FC, serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D
        Validity
            Not Before: Apr  5 03:43:51 2026 GMT
            Not After : Apr 12 03:43:51 2026 GMT
        Subject: CN=69d1da77-d2e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f6:02:0d:68:a0:df:c1:55:09:49:dc:1b:01:
                    9f:15:45:1d:76:34:18:ec:cb:e9:42:87:36:6e:d9:
                    78:39:54:e5:b9:84:a7:17:8c:02:dd:c8:5c:03:7b:
                    4d:22:ea:5a:ae:d5:eb:1d:fe:9e:e4:73:28:77:d0:
                    3b:1f:5c:a6:e5:00:ca:1b:53:fd:47:f9:be:8c:cc:
                    92:29:af:97:31:02:fb:ea:7d:79:f0:36:1d:6a:22:
                    50:c9:38:20:34:09:4e:f4:09:28:3b:e0:85:ab:1b:
                    57:1b:d5:f3:3e:9b:36:58:47:b9:a4:5a:81:eb:da:
                    db:24:01:47:c5:50:a1:48:c3:e6:d8:a8:ae:ae:dd:
                    e8:8e:b3:02:79:82:05:86:7b:97:80:8d:94:8e:0c:
                    cc:16:38:64:ce:9a:01:30:87:6b:5f:6c:8f:a8:91:
                    73:bb:f5:7a:00:8e:0d:e1:4b:a9:7e:29:f4:26:a4:
                    ee:a0:96:04:c2:89:4c:1e:7e:0d:09:aa:cd:6a:7c:
                    75:68:ab:bc:ec:fd:2a:34:6c:40:0a:96:ae:ca:bd:
                    8b:e7:86:ac:3b:df:8f:bd:d9:2e:9a:2b:59:67:40:
                    e9:92:b0:40:d1:c2:d9:83:fb:50:4e:3b:ac:ae:63:
                    32:c5:f0:f0:d8:ea:0b:3f:1e:99:6b:6f:6a:cb:16:
                    c2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:09:B6:B7:A8:BF:8A:E1:DD:E0:37:88:1C:77:36:61:47:0E:FC:1D
            X509v3 Authority Key Identifier:
                keyid:6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c6:94:96:b3:43:01:bb:ea:78:de:71:e4:96:11:88:7f:9d:
         1b:ba:7c:f0:d4:ee:d3:63:2f:44:40:73:19:30:d4:1f:4b:6d:
         30:74:98:be:27:5d:fb:97:b7:b3:ea:c7:45:d7:9f:51:88:e7:
         b6:56:8c:af:81:c1:da:f6:30:80:ce:d0:7e:b1:b7:f5:09:00:
         93:9e:2b:0b:46:66:79:65:9f:41:f6:c0:3c:73:88:cc:10:f3:
         1a:7e:3d:e8:3c:f8:cc:d5:1d:2c:3c:d9:b7:85:28:99:98:71:
         a7:2d:6f:f4:e4:4c:68:1b:71:a3:8a:3b:ee:69:f9:cc:f4:7c:
         68:af:a3:1d:5f:16:97:4b:b8:79:54:3b:22:f8:bc:f3:50:93:
         3e:0f:a8:f8:5d:0f:ae:d0:e5:c3:79:85:76:05:41:9e:b7:63:
         73:11:38:22:16:38:c9:92:b5:2b:3f:cb:90:cb:81:3b:2b:f4:
         25:5a:93:a5:3c:e9:cf:04:02:1d:54:1a:bb:9f:9b:25:e5:0e:
         df:9d:9e:36:45:1e:51:b5:fa:df:73:92:a2:bf:e3:aa:2e:48:
         9e:dd:81:79:bf:9d:e4:c4:36:5d:58:b3:0b:48:9e:47:28:5a:
         37:32:f1:1c:9b:94:0d:fc:76:e2:50:1e:a1:05:58:d1:34:cd:
         3e:54:7a:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0Y4RkMxMTAvBgNVBAUTKDZBREFGQkEyOTk2ODMwQzUxRDY4MUMzMjEyRDA0QjVD
NzI0QzEzMUQwHhcNMjYwNDA1MDM0MzUxWhcNMjYwNDEyMDM0MzUxWjAYMRYwFAYD
VQQDEw02OWQxZGE3Ny1kMmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtvYCDWig38FVCUncGwGfFUUddjQY7MvpQoc2btl4OVTluYSnF4wC3chcA3tN
IupartXrHf6e5HMod9A7H1ym5QDKG1P9R/m+jMySKa+XMQL76n158DYdaiJQyTgg
NAlO9AkoO+CFqxtXG9XzPps2WEe5pFqB69rbJAFHxVChSMPm2Kiurt3ojrMCeYIF
hnuXgI2UjgzMFjhkzpoBMIdrX2yPqJFzu/V6AI4N4Uupfin0JqTuoJYEwolMHn4N
CarNanx1aKu87P0qNGxACpauyr2L54asO9+PvdkumitZZ0DpkrBA0cLZg/tQTjus
rmMyxfDw2OoLPx6Za29qyxbCkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFYJtreo
v4rh3eA3iBx3NmFHDvwdMB8GA1UdIwQYMBaAFGra+6KZaDDFHWgcMhLQS1xyTBMd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhGQy9GNzM5QTRGOEJE
MTUxMUVFODAwRjQ4MkNDNEY5QUUwMi9hdHI3b3Bsb01NVWRhQnd5RXRCTFhISk1F
eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2F0cjdvcGxvTU1VZGFCd3lFdEJMWEhKTUV4MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjhGQy9GNzM5QTRGOEJEMTUxMUVFODAwRjQ4MkNDNEY5QUUwMi9hdHI3b3Bsb01N
VWRhQnd5RXRCTFhISk1FeDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIcaUlrNDAbvqeN5x5JYRiH+dG7p88NTu02MvREBzGTDUH0ttMHSYvidd+5e3
s+rHRdefUYjntlaMr4HB2vYwgM7QfrG39QkAk54rC0ZmeWWfQfbAPHOIzBDzGn49
6Dz4zNUdLDzZt4UomZhxpy1v9ORMaBtxo4o77mn5zPR8aK+jHV8Wl0u4eVQ7Ivi8
81CTPg+o+F0PrtDlw3mFdgVBnrdjcxE4IhY4yZK1Kz/LkMuBOyv0JVqTpTzpzwQC
HVQau5+bJeUO352eNkUeUbX633OSor/jqi5Int2Beb+d5MQ2XVizC0ieRyhaNzLx
HJuUDfx24lAeoQVY0TTNPlR6uA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:34:58 2026 by rpki-client