Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
File:                     w7rY8KXaBY6fklA30EqnHJKLoXM.mft (raw, json)
Hash identifier:          a38jJiCXaHNEf0JD8+N4yVg6tlbQNzKJcyDrJll2Ygk=
Subject key identifier:   FF:05:24:E9:86:1A:F4:EA:E4:3A:EF:CB:C8:08:29:92:68:43:C3:0E
Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73
Certificate issuer:       /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173
Certificate serial:       1A71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
Manifest number:          1A65
Signing time:             Sun 26 Apr 2026 16:15:24 +0000
Manifest this update:     Sun 26 Apr 2026 16:15:24 +0000
Manifest next update:     Sun 03 May 2026 16:15:24 +0000
Files and hashes:         1: w7rY8KXaBY6fklA30EqnHJKLoXM.crl (hash: NyX9yJFtsVL/A6IVYdO3QwaPFXSNmzGMSxWyxxrLmgY=)
                          2: 885DA760AA8811E799348329C4F9AE02.roa (hash: OgMqHQ2yVMx+7d3BSt5zC2aY7l1q21WR4K+bA1B1tR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl
                          rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 16:15:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6769 (0x1a71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189265, serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173
        Validity
            Not Before: Apr 26 16:15:24 2026 GMT
            Not After : May  3 16:15:24 2026 GMT
        Subject: CN=69ee3a1c-6332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d9:43:dc:92:07:17:29:78:cc:ec:82:8d:0e:
                    fc:96:86:28:ac:b5:c7:e1:50:ee:cc:9c:f9:28:48:
                    57:9a:2a:5e:09:eb:93:5e:29:c0:4a:72:8b:b1:44:
                    3f:04:d8:06:91:d5:e3:bf:96:4b:aa:92:03:af:58:
                    c1:0d:e5:96:dc:39:b3:d1:a8:7e:5e:0c:9f:13:a1:
                    6a:62:b7:5a:0c:0a:46:22:b6:d9:e0:ff:07:25:af:
                    2a:0b:ca:29:3c:47:98:92:69:8a:4a:10:cd:88:b3:
                    89:2b:ed:01:f8:f9:8e:9b:a8:ab:73:19:81:29:e6:
                    a9:bc:4b:9c:c1:ae:2a:8d:d4:31:24:58:16:25:11:
                    9d:e0:aa:20:25:05:2b:38:5a:41:3c:b3:bc:15:ec:
                    8e:c4:00:a3:a3:95:67:08:c9:6f:b0:d2:c0:79:62:
                    4f:38:ac:28:c2:6a:3b:1b:0b:24:35:17:bd:65:cc:
                    b0:b5:d6:d6:a0:f6:71:8e:83:d3:1c:13:c7:5f:d3:
                    ec:ea:2c:a8:45:81:c9:9c:87:02:47:8e:72:f3:7d:
                    a3:71:33:ba:9c:d9:e8:d4:8e:c3:a8:ac:cf:7d:71:
                    93:ee:38:2a:34:e1:6a:42:31:ad:6f:9a:71:3a:cc:
                    0c:89:22:83:be:4f:45:e0:68:dd:e5:e7:c2:db:99:
                    a1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:05:24:E9:86:1A:F4:EA:E4:3A:EF:CB:C8:08:29:92:68:43:C3:0E
            X509v3 Authority Key Identifier:
                keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f5:a1:a4:9f:28:12:49:45:be:5a:ae:f7:4d:b3:ba:e9:63:
         45:7c:f3:01:3a:90:5e:67:c8:46:3d:47:cc:18:c9:ab:2b:a3:
         d4:c7:7c:de:a6:8a:9a:21:06:fe:7f:8f:0d:59:06:20:e5:72:
         e1:07:5a:73:05:3e:0f:8f:7f:61:fc:cf:38:be:36:73:1e:99:
         8d:ed:68:f7:d5:97:07:70:0c:f3:35:8d:73:25:e1:bd:cd:1e:
         15:ff:5a:8b:da:97:f0:c2:38:fa:65:3f:bc:5f:5f:5c:bf:f0:
         f3:17:0f:f9:49:dc:8c:88:f6:8e:3e:0f:ee:d7:6c:33:66:fc:
         21:67:3b:da:ec:5e:4b:ca:24:ff:52:8b:0e:a7:61:a9:0e:79:
         9a:a0:da:22:12:7c:e9:70:91:78:c5:fe:11:5d:c5:12:09:7d:
         e3:5a:2d:e3:7c:1c:1e:f6:59:f4:9b:85:8e:cd:50:4b:4b:a0:
         bc:4f:cd:24:84:07:0c:a8:98:a4:37:f4:06:5f:da:df:f8:6d:
         e9:ba:3d:0d:a2:cb:b3:97:fd:27:3a:79:8b:8f:82:c3:ea:8a:
         c5:17:3e:29:2e:a7:26:62:ac:33:b9:8a:a0:7a:c1:cf:16:fd:
         23:7c:b1:21:e6:1d:0a:b4:e8:bc:95:00:b9:aa:d3:af:73:5a:
         66:1f:f2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:25:53 2026 by rpki-client