Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft
File:                     f30yDyoH5DPdvf4oV_XTGTVFF7k.mft (raw, json)
Hash identifier:          2cDOeTYgS6jAR+6Pqo7CYlBCzQ3wftmKb8u3H3/VyJM=
Subject key identifier:   A2:4E:49:43:3F:9A:59:55:68:10:51:5A:D3:72:C2:9E:CB:36:8D:3D
Authority key identifier: 7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9
Certificate issuer:       /CN=A914877B/serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9
Certificate serial:       0C86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft
Manifest number:          0C70
Signing time:             Sat 04 Apr 2026 18:27:34 +0000
Manifest this update:     Sat 04 Apr 2026 18:27:33 +0000
Manifest next update:     Sat 11 Apr 2026 18:27:33 +0000
Files and hashes:         1: f30yDyoH5DPdvf4oV_XTGTVFF7k.crl (hash: H1gPcYChtK8p/9/q++raYe2MtzxXN8VFKBRXscf9hdk=)
                          2: 800676321BD311EAA341A62DC4F9AE02.roa (hash: ca3rCU+xITln6FgR3wUziPrzx8A5i4ANvYXJUthQ0/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl
                          rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3206 (0xc86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914877B, serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9
        Validity
            Not Before: Apr  4 18:27:33 2026 GMT
            Not After : Apr 11 18:27:33 2026 GMT
        Subject: CN=69d15815-d18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:10:2e:b6:91:15:f5:a2:22:c4:af:a8:25:5c:
                    2b:a6:b0:78:f5:87:73:01:3f:61:ea:61:ca:59:63:
                    cb:93:1b:8f:cc:bc:ab:12:b0:b6:f5:0e:39:11:91:
                    b0:5a:f2:6d:8e:cd:a9:f6:24:99:3f:b4:ae:b0:07:
                    42:bf:03:de:27:10:5f:3c:1b:7e:e8:8d:11:bb:0f:
                    ca:77:e7:d6:0e:d0:b7:67:82:43:49:17:0d:b8:a0:
                    08:1e:97:39:5f:b2:a3:6f:ff:df:68:db:b8:e9:72:
                    7c:c0:71:41:54:ac:87:9d:51:20:35:e3:f4:2d:3d:
                    4b:fe:fd:ce:51:a7:ff:b0:3d:0b:3a:9a:49:03:3f:
                    b2:7b:95:cc:d8:f5:b5:53:40:a5:d5:1f:08:f7:c2:
                    90:c0:cd:ef:e5:ac:f4:c0:1f:3a:fd:b1:4d:45:bf:
                    73:5d:b3:cd:fa:58:4c:f7:12:14:2a:01:90:04:74:
                    ee:57:c5:05:79:5b:5d:d6:18:28:1e:28:49:21:58:
                    27:4b:fa:c1:41:a6:70:d6:94:f0:a6:95:39:23:3e:
                    75:0f:eb:6d:86:bb:56:03:b4:94:b7:b0:ee:3a:64:
                    e8:87:d9:a0:d1:17:27:ff:01:1c:16:ba:fa:0c:91:
                    5b:60:b0:e7:d3:43:52:de:70:7b:3f:4d:9c:e5:fd:
                    50:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4E:49:43:3F:9A:59:55:68:10:51:5A:D3:72:C2:9E:CB:36:8D:3D
            X509v3 Authority Key Identifier:
                keyid:7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:bc:48:71:e5:6e:85:52:2c:b2:ac:07:39:24:e3:2c:68:37:
         36:61:63:67:33:07:aa:1d:12:fd:77:51:38:79:39:bb:25:c4:
         97:77:c4:ce:12:aa:d1:e7:6a:55:df:e7:f1:a3:28:53:5c:6b:
         3a:be:70:4f:ef:8e:39:f7:d7:be:cc:4b:2c:c6:de:d9:03:a4:
         82:b4:c3:6b:80:91:2a:4c:0b:8b:88:35:5c:0c:ce:75:9a:b9:
         20:6b:45:98:c3:e1:41:da:b5:bd:17:43:dd:33:21:5f:b4:2b:
         c7:b6:53:45:67:c7:8a:cd:1e:1d:92:1d:0c:29:c4:4c:31:01:
         ff:b5:a6:b0:98:f5:ae:cb:fd:46:67:fa:3c:96:83:64:d5:c2:
         6e:39:eb:4b:34:05:23:eb:2f:9d:4d:a7:5a:2a:d9:ea:00:e9:
         cc:96:05:67:30:6a:a7:07:a1:5f:fe:e0:6a:5b:64:0a:b5:72:
         17:f2:39:50:93:c3:e1:c2:46:19:9c:f9:60:45:3b:c2:6e:63:
         d4:2a:41:db:d7:a7:52:d8:eb:b0:ad:c3:fd:97:bd:1e:89:42:
         5b:8d:4c:85:9d:d8:af:c3:8b:98:e9:0d:ce:e4:7e:55:2e:8f:
         1b:27:86:2e:c5:aa:1c:a7:b2:0f:d6:d2:e0:51:46:9a:9d:62:
         a5:6e:5e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:23 2026 by rpki-client