Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
File:                     0N7PEI0mgBt8l-NJAprx_PkKhV4.mft (raw, json)
Hash identifier:          PDfmx3fmiG6ja4XlMfzszczxT5Kz7mYqLaW4lkdLqpg=
Subject key identifier:   B8:1A:94:CA:58:87:20:3F:44:A8:1C:A1:D7:C5:57:57:0B:8F:4E:59
Authority key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
Certificate issuer:       /CN=A915408A/serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Certificate serial:       016B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
Manifest number:          0166
Signing time:             Sun 05 Apr 2026 04:11:02 +0000
Manifest this update:     Sun 05 Apr 2026 04:11:02 +0000
Manifest next update:     Sun 12 Apr 2026 04:11:02 +0000
Files and hashes:         1: 0N7PEI0mgBt8l-NJAprx_PkKhV4.crl (hash: Xcydw2qlguhRrnmpoPoa2dpyzjGpRSBJbBA8zifzfQ4=)
                          2: 421FF25E18AD11EF99EAA661C4F9AE02.roa (hash: kCxBW9KlV5vONVPJNu5+ty3GjzD9VNwCWVx1zxePNqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
                          rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915408A, serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
        Validity
            Not Before: Apr  5 04:11:02 2026 GMT
            Not After : Apr 12 04:11:02 2026 GMT
        Subject: CN=69d1e0d6-188c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a6:f6:04:50:c0:87:95:9b:d5:e4:0a:57:bb:
                    a8:76:f4:91:c9:87:09:c7:ee:88:db:0a:af:58:8c:
                    53:57:6a:23:dd:67:01:ed:64:e6:eb:36:ac:39:4f:
                    0e:26:f3:d5:23:35:91:76:b2:c4:9e:48:a6:6d:ce:
                    1c:41:44:2a:34:ec:89:95:73:41:52:af:bc:5b:22:
                    5f:dd:dc:90:9f:18:4b:2c:c5:1e:bb:89:b4:52:10:
                    8f:04:95:dc:fa:99:5e:b2:78:dd:a9:53:0a:17:73:
                    b8:12:10:34:2d:64:64:b8:ba:63:48:63:3c:8c:a0:
                    99:09:86:5d:3b:bd:30:de:10:7c:13:00:3e:f2:b1:
                    83:85:d9:b4:c8:06:8e:7d:ed:38:c4:95:b9:33:83:
                    9f:c2:3b:d6:20:86:4b:aa:7a:20:29:52:bc:f2:64:
                    82:d5:af:46:6c:f5:bf:77:8f:04:c3:04:ff:64:1f:
                    48:10:94:0b:39:62:d8:4f:f9:f6:f0:8a:70:f8:a4:
                    54:2b:12:23:c5:b6:a2:23:fb:b8:98:00:b8:14:8a:
                    82:15:ea:ff:e1:e2:48:69:46:62:d1:51:b5:63:45:
                    4b:7b:27:30:f2:11:8d:c4:6e:a5:98:12:2c:98:cc:
                    af:11:af:9d:2b:53:16:f7:fb:46:5c:30:5a:63:87:
                    cf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1A:94:CA:58:87:20:3F:44:A8:1C:A1:D7:C5:57:57:0B:8F:4E:59
            X509v3 Authority Key Identifier:
                keyid:D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:26:11:9b:73:96:e5:29:b4:6e:a3:9f:a2:b6:b2:e8:4a:f6:
         3d:b4:17:20:f6:d2:06:cf:2f:cf:5d:3d:98:74:ff:87:63:53:
         b3:aa:d1:0b:38:81:f0:63:3a:fc:ef:82:b2:bd:1f:83:22:15:
         03:54:73:6d:6d:c1:66:7c:26:ec:1d:ca:21:69:4e:af:8e:c8:
         0b:4f:ad:71:e5:96:3e:71:7e:9c:4d:e0:04:53:2f:04:43:bf:
         03:b8:4c:de:ff:e1:7d:ce:be:ef:0e:ee:c9:45:c0:d9:6d:6d:
         e8:53:83:f8:c6:c1:4f:40:f7:7f:80:2b:56:ad:03:44:d6:76:
         ec:68:05:7e:5d:ca:2d:0d:4b:69:02:00:6f:c8:fc:1e:a3:af:
         1e:94:f3:10:cf:14:61:70:91:cb:bd:59:92:69:ac:46:e2:9a:
         af:3b:d0:bd:56:dc:eb:26:90:96:62:be:64:40:24:4b:b8:85:
         dc:56:f4:6f:02:06:b3:ef:c7:fc:b6:0a:3e:37:20:72:ae:8b:
         83:f5:db:4c:4e:83:38:06:6b:b7:f9:08:d8:d4:16:a8:c8:b9:
         94:8b:01:83:58:62:9e:86:c1:1c:6e:72:d9:f3:9e:42:69:6e:
         de:52:90:ac:64:09:84:5d:4f:10:3e:2b:cf:b6:e8:ee:a1:93:
         10:e0:34:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:24:15 2026 by rpki-client