Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
File:                     7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft (raw, json)
Hash identifier:          yiFZjLn7bdiGJRnaRfEFpZUXLqQZy/pBg3Lljec+T0g=
Subject key identifier:   6E:3C:C7:E0:25:1A:66:E5:07:E3:58:B0:93:39:1C:D2:E6:6F:AB:F8
Authority key identifier: ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
Certificate issuer:       /CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Certificate serial:       1A0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
Manifest number:          19F3
Signing time:             Thu 28 May 2026 16:17:06 +0000
Manifest this update:     Thu 28 May 2026 16:17:05 +0000
Manifest next update:     Thu 04 Jun 2026 16:17:05 +0000
Files and hashes:         1: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl (hash: AvjCerIPVvkEVp2xXHat/kKVywxurIPT7B1YpOThE/o=)
                          2: B4DF66BA809F11E7B741FD2EC4F9AE02.roa (hash: t4qQEhXVur27eUnpFLqlgSPz5OkbpRB/VWbuAT/SIEc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
                          rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jun 2026 16:17:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6671 (0x1a0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C725, serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
        Validity
            Not Before: May 28 16:17:05 2026 GMT
            Not After : Jun  4 16:17:05 2026 GMT
        Subject: CN=6a186a82-49ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b2:db:91:71:2e:5e:4e:4b:af:a5:76:09:f2:
                    5d:3f:6f:72:56:22:09:9c:03:e0:92:b5:5e:df:f0:
                    2a:26:cf:44:02:41:85:ec:01:3c:51:f2:e2:47:ae:
                    fa:e5:e0:5f:d2:27:a8:84:47:6c:82:96:ce:76:3d:
                    89:c3:44:b8:8c:eb:96:2b:84:11:7b:29:e9:c8:da:
                    48:50:0c:06:fa:74:64:c1:9c:2d:e3:51:bf:37:18:
                    4d:70:c3:19:a1:78:b8:75:48:58:39:fe:ec:25:07:
                    2d:3a:3d:dc:c3:f2:b0:dc:6a:6d:be:b8:6e:5b:ae:
                    23:07:2f:e8:58:9e:eb:5b:84:95:1a:77:da:49:f4:
                    1a:ba:c8:50:38:fb:42:49:12:ac:0c:ae:66:aa:6d:
                    fb:cf:cd:4e:e6:6d:0a:5b:dc:21:c2:52:46:a7:9f:
                    8d:7d:47:f6:da:7d:7b:8c:a8:db:aa:df:57:df:f4:
                    94:fc:61:77:83:a6:2a:f9:52:54:c6:7b:d9:89:47:
                    c1:15:00:2e:16:29:b7:b5:37:34:53:fb:c7:fa:63:
                    45:18:e7:08:3e:6d:1e:30:da:d2:ff:d2:32:3a:df:
                    67:b2:79:db:19:53:f5:a4:a4:af:9f:69:48:0f:e4:
                    2d:40:63:fa:33:1a:89:9a:9a:0c:cf:31:c4:cf:cc:
                    a3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3C:C7:E0:25:1A:66:E5:07:E3:58:B0:93:39:1C:D2:E6:6F:AB:F8
            X509v3 Authority Key Identifier:
                keyid:ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2a:e9:24:6f:bc:9b:7f:19:01:b0:53:10:4e:bd:18:9a:20:
         37:27:b8:40:d9:7b:05:45:d3:e6:58:74:94:30:6c:7b:e6:1b:
         9c:a0:b5:7c:92:3a:90:1e:54:08:2a:50:48:5a:72:22:ef:f0:
         e3:fc:b5:4a:5b:9a:39:48:54:af:b3:33:61:12:78:d0:37:9b:
         89:59:df:6a:66:de:e2:53:12:57:d2:14:df:a0:d3:8f:d4:98:
         8f:76:19:d5:d5:36:38:2f:76:fa:fa:d5:6d:a1:99:14:88:02:
         ee:4e:b2:0f:30:23:5d:9a:c6:ae:9c:0b:0e:7a:8c:49:c8:ad:
         5b:86:18:03:35:7e:23:cd:68:c4:de:3b:d7:22:1f:44:4d:d7:
         88:e8:c2:d3:2b:a0:ec:08:1c:2b:6a:5c:52:dd:c3:ac:ea:5e:
         73:76:24:c9:83:4d:c7:29:1a:65:31:c4:98:be:a7:9c:58:1f:
         93:37:f9:66:5d:57:c1:29:0a:f1:6b:71:e8:cd:59:22:0c:88:
         0c:f6:d4:01:e9:55:06:ea:59:15:38:c4:e5:1a:6a:2b:68:cc:
         d6:ee:07:9c:ff:35:77:e1:3e:1e:c8:ba:79:61:93:c7:7f:cc:
         b4:da:4f:75:f7:9d:e5:55:78:8c:f4:4b:4e:18:75:79:c7:9f:
         75:60:47:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 17:06:34 2026 by rpki-client