Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft
File:                     e38qjYSvvYwzKp9LTmcJs65_CvY.mft (raw, json)
Hash identifier:          eJ36IllavcBR0D/j3cuY15R1B+WVzK4wqnxua7G/CCI=
Subject key identifier:   B5:C8:4A:E5:3C:4C:15:79:A2:B3:42:FD:A5:07:41:34:62:57:0C:16
Authority key identifier: 7B:7F:2A:8D:84:AF:BD:8C:33:2A:9F:4B:4E:67:09:B3:AE:7F:0A:F6
Certificate issuer:       /CN=A91656C7/serialNumber=7B7F2A8D84AFBD8C332A9F4B4E6709B3AE7F0AF6
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft
Manifest number:          A7
Signing time:             Sun 05 Apr 2026 06:42:36 +0000
Manifest this update:     Sun 05 Apr 2026 06:42:35 +0000
Manifest next update:     Sun 12 Apr 2026 06:42:35 +0000
Files and hashes:         1: e38qjYSvvYwzKp9LTmcJs65_CvY.crl (hash: UuT1M/CTzfu34GcSaFZbzB3TuDfAO9rEusJr2M3hbzs=)
                          2: 0930CE00408411F0A6916727C4F9AE02.roa (hash: 5e7uRpjp4LbTN28bWS11lUc0oDiHjTplRVP3KjeglPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.crl
                          rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:42:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91656C7, serialNumber=7B7F2A8D84AFBD8C332A9F4B4E6709B3AE7F0AF6
        Validity
            Not Before: Apr  5 06:42:35 2026 GMT
            Not After : Apr 12 06:42:35 2026 GMT
        Subject: CN=69d2045b-5d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0d:7f:3f:bf:2c:9c:e1:02:b2:bb:df:66:c9:
                    58:98:85:c0:f6:f0:dc:9a:39:3b:6f:53:8c:3d:7a:
                    10:0a:c1:d9:8b:d3:da:c8:b0:dd:70:be:27:fa:b3:
                    13:09:61:36:e0:b7:58:0d:f8:47:3e:a1:a5:83:c6:
                    7f:0d:83:1d:61:7c:46:a4:dc:65:09:24:93:3f:e7:
                    6b:b7:5e:5d:37:c4:5b:bf:57:f7:dc:3a:4c:80:61:
                    d4:af:7f:23:a7:ab:16:fa:7c:d6:40:f4:f5:bf:44:
                    68:2e:f3:0e:84:10:23:08:a6:b9:a2:81:7b:f0:67:
                    e5:da:b9:51:ec:f4:bc:98:25:4c:d6:8f:b2:6f:c8:
                    ed:a4:15:4a:b4:ed:bf:1a:96:fc:de:19:ae:00:41:
                    b8:91:79:7f:a5:cd:27:07:a8:a9:f8:f8:50:8d:29:
                    15:ac:32:77:00:c7:38:69:ba:f3:66:be:08:8f:37:
                    1d:8f:8c:07:40:c4:79:d9:32:00:5a:fd:50:50:a2:
                    29:e1:af:87:9d:8c:fd:46:3a:59:af:45:ae:b2:b5:
                    f9:d0:f0:a2:fe:e5:1c:a0:77:6c:36:6a:9c:16:1c:
                    fa:cc:36:cc:39:66:ed:e1:cb:68:5b:7f:e1:70:f0:
                    23:3c:cf:5b:63:f6:47:6c:71:60:69:00:8e:ee:24:
                    e3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C8:4A:E5:3C:4C:15:79:A2:B3:42:FD:A5:07:41:34:62:57:0C:16
            X509v3 Authority Key Identifier:
                keyid:7B:7F:2A:8D:84:AF:BD:8C:33:2A:9F:4B:4E:67:09:B3:AE:7F:0A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:5a:da:14:03:0b:e9:c4:09:94:99:a2:88:01:0f:f4:dc:cd:
         72:d1:50:d0:97:9e:52:e2:74:f8:d7:85:58:0f:81:48:1b:a2:
         0c:3f:de:b8:5b:75:5f:42:19:a2:13:7d:db:e3:7d:23:76:c4:
         75:fb:70:22:96:9f:71:60:25:39:da:c0:91:03:e5:79:bb:cc:
         f0:8e:ef:d5:a4:e1:90:ea:af:33:24:3d:10:ce:32:3a:46:0b:
         2a:38:08:9f:a7:11:c9:a9:08:9b:e2:cb:bf:c2:c3:6c:64:e7:
         1a:b5:ee:20:85:fe:38:71:5f:df:d3:a8:30:5a:7e:05:4e:38:
         03:13:76:19:d1:43:bb:6e:95:13:f9:e2:b4:df:4d:6d:dd:bf:
         7f:74:30:11:5c:35:2d:e5:bd:d1:e5:4f:dd:6f:26:f3:22:0b:
         7b:14:4c:e1:9a:cd:ec:14:68:77:1f:13:57:37:9a:88:ad:39:
         9d:23:74:f8:70:d5:d5:6b:91:b9:69:25:5e:a9:36:52:93:de:
         40:d6:22:8b:a4:a6:57:7e:51:1b:c5:37:05:29:29:fa:65:73:
         9b:3e:7c:b0:61:a8:1f:a9:98:f5:87:20:21:98:5b:e2:c8:66:
         6a:d6:4a:ea:18:39:a5:92:91:36:ec:b7:e6:56:d8:5a:f0:ef:
         e6:bd:ed:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU2QzcxMTAvBgNVBAUTKDdCN0YyQThEODRBRkJEOEMzMzJBOUY0QjRFNjcwOUIz
QUU3RjBBRjYwHhcNMjYwNDA1MDY0MjM1WhcNMjYwNDEyMDY0MjM1WjAYMRYwFAYD
VQQDEw02OWQyMDQ1Yi01ZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAug1/P78snOECsrvfZslYmIXA9vDcmjk7b1OMPXoQCsHZi9PayLDdcL4n+rMT
CWE24LdYDfhHPqGlg8Z/DYMdYXxGpNxlCSSTP+drt15dN8Rbv1f33DpMgGHUr38j
p6sW+nzWQPT1v0RoLvMOhBAjCKa5ooF78Gfl2rlR7PS8mCVM1o+yb8jtpBVKtO2/
Gpb83hmuAEG4kXl/pc0nB6ip+PhQjSkVrDJ3AMc4abrzZr4Ijzcdj4wHQMR52TIA
Wv1QUKIp4a+HnYz9RjpZr0WusrX50PCi/uUcoHdsNmqcFhz6zDbMOWbt4ctoW3/h
cPAjPM9bY/ZHbHFgaQCO7iTjVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLXISuU8
TBV5orNC/aUHQTRiVwwWMB8GA1UdIwQYMBaAFHt/Ko2Er72MMyqfS05nCbOufwr2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTZDNy81NDUxMzI0QTQw
ODMxMUYwOEIwM0FCNjVDNEY5QUUwMi9lMzhxallTdnZZd3pLcDlMVG1jSnM2NV9D
dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2UzOHFqWVN2dll3ektwOUxUbWNKczY1X0N2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTZDNy81NDUxMzI0QTQwODMxMUYwOEIwM0FCNjVDNEY5QUUwMi9lMzhxallTdnZZ
d3pLcDlMVG1jSnM2NV9DdlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHVraFAML6cQJlJmiiAEP9NzNctFQ0JeeUuJ0+NeFWA+BSBuiDD/euFt1X0IZ
ohN92+N9I3bEdftwIpafcWAlOdrAkQPlebvM8I7v1aThkOqvMyQ9EM4yOkYLKjgI
n6cRyakIm+LLv8LDbGTnGrXuIIX+OHFf39OoMFp+BU44AxN2GdFDu26VE/nitN9N
bd2/f3QwEVw1LeW90eVP3W8m8yILexRM4ZrN7BRodx8TVzeaiK05nSN0+HDV1WuR
uWklXqk2UpPeQNYii6SmV35RG8U3BSkp+mVzmz58sGGoH6mY9YcgIZhb4shmatZK
6hg5pZKRNuy35lbYWvDv5r3tpA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:02 2026 by rpki-client