Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
File:                     78F7DRESbH-pQb1NDsp6o56TRqA.mft (raw, json)
Hash identifier:          J9n/pqG1asVvHVfu4VF+uqnRbBlCffkvES/wEv/rfqY=
Subject key identifier:   B6:66:E0:42:FC:2A:D4:5D:E2:DB:97:A2:91:B1:6D:6E:0A:42:34:FC
Authority key identifier: EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0
Certificate issuer:       /CN=A914B0CF/serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
Certificate serial:       0160
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
Manifest number:          015B
Signing time:             Sun 05 Apr 2026 04:24:32 +0000
Manifest this update:     Sun 05 Apr 2026 04:24:32 +0000
Manifest next update:     Sun 12 Apr 2026 04:24:32 +0000
Files and hashes:         1: 78F7DRESbH-pQb1NDsp6o56TRqA.crl (hash: +xw6msfj2TBx36aeq8QcfGkxnHKTOu1DyOTSY+KvTN8=)
                          2: 20BCACE21F1A11EFB1CD4814C4F9AE02.roa (hash: pCBDSY/5hIjT1Z07yVjRD8C3EOR5A+vR6s3eWtHwcNQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl
                          rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:24:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B0CF, serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
        Validity
            Not Before: Apr  5 04:24:32 2026 GMT
            Not After : Apr 12 04:24:32 2026 GMT
        Subject: CN=69d1e400-5300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:80:4f:b9:83:f7:23:33:b4:9d:cb:f9:d7:35:
                    10:2b:b5:16:b9:3d:e3:0f:66:70:56:df:e3:b8:c4:
                    de:fa:34:4e:b1:99:74:53:f7:78:f6:9e:1b:25:ce:
                    9f:fa:bd:d8:91:00:e6:fb:78:3f:da:9d:b7:0f:ef:
                    f2:03:c2:e5:f7:ab:39:c7:1b:af:83:05:a3:43:5c:
                    7c:6d:7a:38:9f:00:1a:0b:72:4a:01:fe:a4:82:c1:
                    39:28:e7:bc:68:d6:b9:46:eb:0f:1b:20:df:94:ce:
                    c1:5a:5f:77:a4:65:33:1c:0b:8c:81:48:e0:4e:32:
                    5b:44:59:79:e8:de:ff:5b:8a:b9:f8:41:d8:85:e8:
                    ed:d8:1e:75:60:5f:cb:2d:ef:c9:a5:9d:b5:8a:38:
                    33:e5:6a:74:3d:78:e1:ab:32:cf:93:35:f4:59:66:
                    c9:69:44:a1:3f:ec:bd:64:81:26:23:9b:f7:a0:23:
                    3a:14:f4:bc:4c:c4:b0:66:31:33:d6:0a:43:35:d0:
                    08:af:16:d2:9c:23:ac:f2:7e:06:c4:e3:37:1f:a3:
                    70:c2:34:23:43:89:ef:0c:dc:f8:8b:51:68:58:63:
                    b5:8a:82:34:42:db:ae:1c:50:06:ca:ef:79:31:3b:
                    2c:7a:24:78:12:3d:5d:52:01:1a:1c:29:3d:80:25:
                    c7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:66:E0:42:FC:2A:D4:5D:E2:DB:97:A2:91:B1:6D:6E:0A:42:34:FC
            X509v3 Authority Key Identifier:
                keyid:EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d3:d3:e9:31:4f:7b:3b:52:90:00:58:ed:b1:1a:20:fa:c9:
         aa:33:08:b5:7b:57:3e:06:05:2d:61:82:74:41:ea:0c:8a:9a:
         22:60:39:52:c7:c8:15:f9:29:e3:b3:03:7e:ef:84:81:34:1f:
         2f:8f:28:c4:d6:6a:32:e4:c5:5a:05:81:13:eb:03:5e:2e:48:
         39:b2:51:7d:48:67:7c:4e:ad:cd:24:c4:86:71:49:f8:54:4f:
         78:b7:d2:f1:59:74:2f:6e:31:59:9d:ee:71:79:e2:f0:06:a5:
         13:4f:89:06:ff:a3:e5:97:db:28:e0:de:32:47:76:f2:30:56:
         34:a7:23:63:7b:10:32:42:45:44:76:17:a7:79:e6:6c:66:95:
         60:37:47:60:86:90:94:2f:9b:c7:6a:81:ed:e6:8b:b5:b8:63:
         1d:4a:e4:e2:de:f3:cf:9e:cc:43:91:02:36:9e:40:9d:9f:7f:
         47:86:82:47:ba:ee:18:21:d2:c1:26:68:75:71:ec:bf:87:11:
         dd:3d:1d:44:1c:9e:8b:8a:0c:a4:8c:10:9b:8d:d8:bf:fe:4c:
         cf:97:4d:69:25:4c:c2:10:df:49:66:47:ac:3a:84:80:12:13:
         df:70:bd:00:e4:29:39:d7:ce:03:43:89:35:92:8e:7c:8d:e1:
         3d:52:11:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:16 2026 by rpki-client