Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
File:                     7ObXRymptklRLPzniy2vzsFGlzo.mft (raw, json)
Hash identifier:          7kwzUNmJVpi/CxD9HhjzBbV+9EshTAIDVh+aEmhmB1g=
Subject key identifier:   AD:BE:EC:DB:F6:67:FC:5E:8A:38:B5:13:35:DD:76:81:6A:CF:C7:1A
Authority key identifier: EC:E6:D7:47:29:A9:B6:49:51:2C:FC:E7:8B:2D:AF:CE:C1:46:97:3A
Certificate issuer:       /CN=A916A171/serialNumber=ECE6D74729A9B649512CFCE78B2DAFCEC146973A
Certificate serial:       0D4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
Manifest number:          0D40
Signing time:             Sat 04 Apr 2026 17:52:54 +0000
Manifest this update:     Sat 04 Apr 2026 17:52:54 +0000
Manifest next update:     Sat 11 Apr 2026 17:52:54 +0000
Files and hashes:         1: 7ObXRymptklRLPzniy2vzsFGlzo.crl (hash: l8C1goMEDprcTF/my1dfziLiJCPVAYZtQDgcah+cwkk=)
                          2: F268590C1B9911ED9A50C30EC4F9AE02.roa (hash: WNQo1gJzwhXWEpc2UK9IPm/NBGxZHgROjQVKTAiSKXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.crl
                          rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:52:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3404 (0xd4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A171, serialNumber=ECE6D74729A9B649512CFCE78B2DAFCEC146973A
        Validity
            Not Before: Apr  4 17:52:54 2026 GMT
            Not After : Apr 11 17:52:54 2026 GMT
        Subject: CN=69d14ff6-bd43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:eb:6b:cb:2a:54:e2:63:a8:d9:12:f4:7a:c5:
                    44:a3:df:f1:40:4b:83:47:3e:5b:b7:35:e3:67:b0:
                    b3:57:92:b9:b5:c5:0a:12:d6:97:ae:24:ba:0b:29:
                    75:63:7c:eb:86:9d:da:d5:b9:43:7e:27:03:1a:e3:
                    a0:d3:d1:cd:91:f1:89:22:c3:ba:d5:87:8d:ab:ac:
                    fd:99:41:8a:be:3a:65:a6:92:ef:56:ce:1f:b4:92:
                    10:dd:2a:fd:ba:77:a2:74:b6:57:aa:c4:b3:8f:7f:
                    75:8d:05:ae:55:fa:e9:90:da:e1:4c:2b:85:d2:ea:
                    da:8d:09:b9:d0:84:21:ab:58:1c:cd:0f:c6:0b:af:
                    10:a7:79:d6:c0:d9:f0:f1:45:86:07:6b:3e:6b:0d:
                    03:34:c8:2e:9c:23:fa:a7:be:46:d7:ab:93:48:b1:
                    50:8e:30:d3:f0:26:fc:44:df:4b:5a:31:0f:c8:18:
                    5c:25:4b:91:12:fa:f2:99:a7:f9:d1:8b:55:cc:22:
                    d6:7d:64:4a:3f:ab:00:96:66:5d:b4:75:c9:23:d1:
                    9c:2a:68:75:04:65:93:4e:ee:c2:83:a5:de:e5:5a:
                    b9:d0:28:03:35:0d:ce:ee:71:c8:1d:62:3d:9b:fa:
                    16:8f:1d:e9:5c:31:40:72:4d:3a:08:28:3a:72:6d:
                    9a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BE:EC:DB:F6:67:FC:5E:8A:38:B5:13:35:DD:76:81:6A:CF:C7:1A
            X509v3 Authority Key Identifier:
                keyid:EC:E6:D7:47:29:A9:B6:49:51:2C:FC:E7:8B:2D:AF:CE:C1:46:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:2d:82:2c:18:82:61:11:89:69:63:2f:0a:85:89:2b:e2:df:
         f7:bc:a8:28:65:7e:5c:6a:57:23:7d:ab:f5:c0:1a:41:d1:98:
         b3:79:e6:62:3e:cb:31:51:18:cc:61:ac:28:f6:28:6c:2e:ed:
         e4:a6:6e:c3:7e:83:05:f7:74:f5:9f:6a:6a:d0:04:55:4d:34:
         52:1f:08:1c:6d:5e:09:ca:ce:90:c1:c3:db:57:9e:5a:17:20:
         4f:e7:49:2a:f1:13:ce:fe:21:8e:49:25:29:c1:38:f5:41:1f:
         5e:85:ab:2c:0a:ed:73:2c:d4:28:10:35:2b:45:fc:28:77:98:
         12:7a:e7:08:4a:05:f2:4f:d9:18:5e:d9:c9:cd:2d:ae:20:0b:
         83:fe:cf:a0:0e:8f:56:74:d3:1e:73:25:fe:f0:54:ea:44:2d:
         12:af:5a:84:78:06:f1:c3:54:c9:ca:c7:e8:05:ca:a8:83:d9:
         3f:0d:74:1d:ff:40:e6:65:73:81:0c:af:97:f2:37:d8:a6:6e:
         33:c7:1e:29:f1:dd:01:88:80:76:3b:58:82:0f:b8:f5:a5:25:
         39:f3:b1:c7:1f:e0:dc:c6:a0:25:0a:02:99:a1:32:2c:32:cd:
         97:ac:13:af:35:4b:70:bc:65:6b:20:22:04:39:cc:0a:a5:b0:
         e7:48:c3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:39 2026 by rpki-client