Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
File:                     MLwu5bdWT-D98gDnibI6LA2OkiQ.mft (raw, json)
Hash identifier:          liqUP7gkmTzQUMG4oT4mlhV7LblbEHJdqz+9CU9ufPg=
Subject key identifier:   58:7E:76:99:56:5A:B4:E6:1D:0C:73:C7:F8:59:26:AF:A0:F5:B7:DB
Authority key identifier: 30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24
Certificate issuer:       /CN=A916CAC7/serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224
Certificate serial:       0D05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
Manifest number:          0CFD
Signing time:             Sun 26 Apr 2026 18:05:29 +0000
Manifest this update:     Sun 26 Apr 2026 18:05:28 +0000
Manifest next update:     Sun 03 May 2026 18:05:28 +0000
Files and hashes:         1: MLwu5bdWT-D98gDnibI6LA2OkiQ.crl (hash: y9mZebUPMMhEyOKCm454gZW/4TcPxRyMtSxHqvgeocM=)
                          2: 9E5B75C0022D11EAAD80DA48C4F9AE02.roa (hash: BxdToQUnq7s7IiCDOp8OROzzu8gjSdJZbTs5vKx24f4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl
                          rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 18:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3333 (0xd05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CAC7, serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224
        Validity
            Not Before: Apr 26 18:05:28 2026 GMT
            Not After : May  3 18:05:28 2026 GMT
        Subject: CN=69ee53e9-274b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:e3:c4:5e:6d:66:03:5d:b0:f9:4e:fe:1a:
                    73:4b:52:e2:e6:56:37:0b:b5:55:e3:1f:ac:66:bd:
                    e9:c1:9c:82:29:ef:e6:3e:f4:3c:ba:b4:d2:2b:99:
                    2e:e0:6b:34:a4:b4:f9:d1:10:e3:fa:fc:e2:97:0d:
                    27:3e:02:47:4d:c9:cf:57:17:7b:9b:f6:85:31:be:
                    f1:cd:12:6e:f5:db:bc:80:0c:9b:bc:f7:20:2e:d1:
                    d4:bb:ff:ba:e9:ca:09:6a:bf:9d:91:21:fc:94:c4:
                    63:2b:ef:ff:a6:58:5d:bd:23:66:37:cf:70:42:5f:
                    3f:4f:bd:71:d7:be:85:c5:db:8d:ab:ec:58:b7:81:
                    7b:8f:10:12:3b:c7:f8:c6:c5:58:24:fe:a8:fc:20:
                    22:cd:a5:f1:a3:60:c1:4d:82:72:70:54:c6:bb:81:
                    57:1b:3e:1f:7b:0f:3e:7d:b5:ba:c5:27:f2:e6:7a:
                    ea:e6:ad:90:2a:10:a4:85:b7:ab:4d:c4:34:18:06:
                    fb:65:d5:c8:e5:c6:76:03:c3:6b:32:8b:10:18:a9:
                    86:d7:14:df:a1:c9:66:85:30:c5:e0:98:bc:e1:92:
                    ab:72:af:55:0b:7a:04:9e:db:d9:af:63:19:84:7c:
                    27:95:b3:6c:51:c3:c0:0d:c9:4b:06:aa:2d:e9:aa:
                    35:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7E:76:99:56:5A:B4:E6:1D:0C:73:C7:F8:59:26:AF:A0:F5:B7:DB
            X509v3 Authority Key Identifier:
                keyid:30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f1:20:89:d4:46:53:7a:fb:80:6b:96:aa:61:d5:7a:8d:71:
         36:9d:ac:2e:b3:70:b3:52:de:d1:9f:87:1e:4b:6f:6a:74:83:
         0e:29:26:03:e6:80:18:d5:2e:fa:f5:66:cb:bd:3d:33:49:86:
         ab:e0:fa:14:72:c2:4d:7c:dd:41:c0:1d:8b:19:cc:88:bb:5c:
         eb:c6:c7:83:b4:52:08:d7:83:07:d0:df:a9:c7:af:74:3b:cf:
         da:08:c8:ce:7b:44:f5:42:a0:10:49:8d:17:ac:37:01:05:ae:
         d1:41:14:1b:33:72:27:08:a0:cf:06:d5:bf:03:86:58:87:45:
         1e:f9:b1:27:1d:27:1e:dd:5d:a8:5f:c6:8b:13:2e:6e:5d:58:
         2b:24:df:2a:87:03:32:5a:2e:b2:16:2b:29:6d:0f:4f:5d:9e:
         c5:1c:82:ca:96:16:3b:33:14:d0:0b:84:06:1e:88:60:3b:67:
         96:92:e4:11:9c:b2:ea:a2:21:c9:a7:c3:e9:3f:3a:34:6b:00:
         c1:9e:56:b4:09:c4:1a:91:71:8c:3b:fb:4c:54:84:12:d8:70:
         55:ec:dc:2d:17:4a:4c:10:1e:ef:36:e8:6b:45:ed:1c:7f:a4:
         e2:ac:d3:5b:29:17:07:f5:91:85:10:d0:1a:0f:b6:6a:0e:18:
         ff:d9:86:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:20:52 2026 by rpki-client