Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft
File:                     GH7u6irWB7ylQi0JLdrMGZCPL9c.mft (raw, json)
Hash identifier:          Rt/thcSy8/JhgugZc0zWDwIOfmVMz4K7jNH0mraRJn0=
Subject key identifier:   07:65:52:7C:A8:F5:19:BF:FF:A1:B6:F8:F4:7B:E5:34:80:E8:61:3F
Authority key identifier: 18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7
Certificate issuer:       /CN=A91767B4/serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7
Certificate serial:       027B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft
Manifest number:          0275
Signing time:             Sun 05 Apr 2026 01:32:54 +0000
Manifest this update:     Sun 05 Apr 2026 01:32:53 +0000
Manifest next update:     Sun 12 Apr 2026 01:32:53 +0000
Files and hashes:         1: GH7u6irWB7ylQi0JLdrMGZCPL9c.crl (hash: Rqy81IwokSRYwhv2voNiPKsD9mG33PaIDc4T97sXsOE=)
                          2: 57C505EA708411EDA8B14246C4F9AE02.roa (hash: rnjwe5YYzLVIXlCM4/xr5SlC/j9WbCn85pwJbjVubyM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl
                          rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91767B4, serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7
        Validity
            Not Before: Apr  5 01:32:53 2026 GMT
            Not After : Apr 12 01:32:53 2026 GMT
        Subject: CN=69d1bbc6-32b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:79:89:37:92:38:ab:b3:88:01:60:c7:e7:1e:
                    e6:0f:0a:6a:fd:49:a7:9b:af:f4:39:29:51:e6:ae:
                    49:7e:ee:56:28:5c:f8:f6:85:b7:52:9f:dd:33:ee:
                    66:7d:a4:63:35:64:59:9f:04:f2:f0:a2:04:2c:03:
                    f7:07:47:21:f5:1e:18:12:cd:58:f6:fb:b2:93:ce:
                    20:97:77:df:8d:f0:c8:2b:aa:b9:66:70:a5:b6:cb:
                    59:54:45:9b:5c:1d:68:84:20:d3:65:05:dd:00:e1:
                    6e:f5:d5:28:25:d9:c0:5a:2e:b5:59:60:f7:6e:aa:
                    08:e9:d7:4a:23:bb:ad:d8:e6:4e:e7:9e:dd:42:e9:
                    69:a9:fc:4f:dd:42:7f:05:0c:73:07:06:08:dc:5f:
                    0c:0b:26:74:99:46:57:c3:c9:08:50:2b:e4:01:66:
                    5c:be:58:66:be:12:e5:27:68:58:e0:6a:81:2b:f4:
                    d3:c1:d3:94:90:be:47:99:ed:91:41:37:ea:26:08:
                    a7:c9:ba:09:6c:61:f8:5c:00:6a:09:25:92:a6:b4:
                    07:96:c0:5a:6a:fe:c5:b8:73:4e:1e:d2:a9:ec:10:
                    e9:0d:b9:6e:51:e2:27:9c:38:85:a7:de:18:42:a1:
                    f6:02:40:fa:55:58:b7:ba:f9:f1:d1:69:87:98:b4:
                    44:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:65:52:7C:A8:F5:19:BF:FF:A1:B6:F8:F4:7B:E5:34:80:E8:61:3F
            X509v3 Authority Key Identifier:
                keyid:18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:60:fd:f9:38:7e:26:de:a5:3d:1d:70:6b:e6:24:e8:54:69:
         6a:02:a1:a0:4a:ea:0a:11:95:0a:5d:96:78:de:72:f8:92:b0:
         97:ef:e3:9e:3c:64:db:d3:1a:b4:2a:2d:0b:5e:84:e5:0a:44:
         f2:c4:8e:02:c4:20:bf:40:11:91:8c:93:47:77:b1:71:e3:2c:
         3f:04:3c:cd:8f:94:03:bd:10:42:cc:0c:4f:be:14:0a:37:58:
         bd:d7:a6:24:41:9b:81:46:ad:ad:32:6c:32:82:1d:36:13:a5:
         f4:00:c8:ec:eb:be:22:7b:ff:93:ac:c7:03:04:ac:4a:63:a9:
         8e:4d:02:33:a4:d1:16:c0:54:c5:4d:80:b7:dd:66:6d:e4:6e:
         af:56:92:cc:dc:3a:41:0f:5c:76:cf:f7:4a:a5:60:b9:38:30:
         7c:1e:3d:9a:4d:c7:94:f1:19:38:57:68:7c:c4:6e:c3:69:27:
         a1:1a:b8:87:77:cb:cf:83:8a:62:54:6b:77:94:f4:02:5d:cc:
         f9:3c:f0:96:99:dd:f7:fc:cf:bb:8e:bc:8e:aa:46:e8:6d:f6:
         b0:95:dc:15:c6:a0:85:7b:e8:80:56:8b:be:21:97:da:ea:d8:
         9e:8e:92:2a:c4:86:7c:95:ee:47:a5:e1:bf:98:3f:9b:4e:9d:
         29:d6:06:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:32 2026 by rpki-client