Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
File:                     7qiugNcT5rItsOxgkVfwxZpS_X8.mft (raw, json)
Hash identifier:          BX9LGrAX3rEF6AYNytO+Bq4dnmckW+rxBPOd2moHPfo=
Subject key identifier:   06:F5:39:32:06:BF:BA:3D:BE:D1:82:A5:49:72:2B:85:C4:51:CA:58
Authority key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
Certificate issuer:       /CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Certificate serial:       35A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
Manifest number:          3559
Signing time:             Sat 04 Apr 2026 14:50:06 +0000
Manifest this update:     Sat 04 Apr 2026 14:50:06 +0000
Manifest next update:     Sat 11 Apr 2026 14:50:06 +0000
Files and hashes:         1: 7qiugNcT5rItsOxgkVfwxZpS_X8.crl (hash: BO3EAC86SxYF250VM4q6jlj7tu4NB+4Cab4K6fdn4Kg=)
                          2: 2ACF9E0C855C11EB8C076013C4F9AE02.roa (hash: RNuWwl4ucRlwsOZtGnFpFuiswJzOcCNas2gxr3gm8mE=)
                          3: F026CE74927411EDB020A481C4F9AE02.roa (hash: QKAwXjlAKaeSYPJnynXkKE/C3RLluritzofePdZuC8Q=)
                          4: 2A73A3403A0711F081048A4EC4F9AE02.roa (hash: dvlRe6H3F8B2GwYIE840UeTvVO5dQ86LFZ7LGPZOm2k=)
                          5: 6C0C85D0A43011ECA230771BC4F9AE02.roa (hash: LL2Fp2e55MEWgbkr5inndl6+DJiSk2JSjx4YlfL31Ys=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
                          rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 14:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13729 (0x35a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D6B7, serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
        Validity
            Not Before: Apr  4 14:50:06 2026 GMT
            Not After : Apr 11 14:50:06 2026 GMT
        Subject: CN=69d1251e-b701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:84:2c:72:ca:88:65:b6:40:4e:bc:96:ec:77:
                    d6:b3:7e:64:ab:16:fa:30:f1:15:9f:40:fb:dd:75:
                    10:3d:30:2b:fe:e9:33:01:ac:0d:47:48:91:96:83:
                    b9:7c:7b:73:0a:3a:2f:2a:75:a9:52:c1:cd:e0:cb:
                    ea:4a:ad:37:94:b2:53:54:15:7c:4a:ec:05:db:dd:
                    b0:46:cd:86:1f:78:3a:fc:49:06:8b:4c:f7:11:fa:
                    98:a8:d6:d5:08:0f:ea:e8:73:4d:71:97:48:57:69:
                    e1:50:c9:0d:73:72:8c:7b:e3:46:f4:cc:b4:29:d7:
                    04:2c:73:3c:f2:d3:0d:55:f9:92:69:99:fb:3e:36:
                    8f:de:86:b6:d7:d5:d8:b8:b9:a1:93:b5:31:bb:e6:
                    bc:58:68:22:4b:51:03:d4:c6:a6:3b:34:bc:47:1e:
                    bf:12:d4:fc:ff:64:cf:e5:1a:b2:e6:c0:66:ca:95:
                    cc:e7:f1:a3:cb:e4:84:45:3b:7d:94:fa:f2:bd:ac:
                    66:1c:0c:1b:12:e6:0a:67:44:15:61:bc:05:ee:1a:
                    46:aa:48:d9:d4:a8:12:b9:0c:4d:c7:90:50:be:a2:
                    8a:dc:7b:57:e7:df:8d:27:6d:47:f2:4e:36:09:fb:
                    b0:d0:11:dd:0b:7e:3f:8e:52:4a:28:06:dc:11:78:
                    74:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F5:39:32:06:BF:BA:3D:BE:D1:82:A5:49:72:2B:85:C4:51:CA:58
            X509v3 Authority Key Identifier:
                keyid:EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:1f:c7:e3:9c:61:a1:c9:d2:e7:bb:66:94:0c:98:44:2d:34:
         23:7c:a5:05:7b:62:b2:b9:c8:9a:32:44:bd:ee:9d:9d:a7:ad:
         12:da:27:8a:80:e7:0a:bf:21:2e:0c:db:ac:60:eb:dd:fb:94:
         4f:94:b2:44:f8:fb:3c:57:96:22:e8:e5:aa:73:fd:1a:af:38:
         04:d9:ee:00:87:a2:0f:f6:49:b9:00:03:40:c5:e6:13:a4:4a:
         89:78:1d:7e:40:dd:7d:4f:d6:a6:67:04:e4:b8:62:d0:53:64:
         44:58:f1:51:12:c1:1c:da:e1:7e:ff:14:91:24:6c:5c:5d:91:
         e6:82:e2:00:21:c6:a7:6d:bc:39:57:78:2a:dd:bb:b8:4b:5e:
         dc:63:54:1d:04:88:1c:c5:2a:8c:08:7f:a1:2a:4f:52:4c:d2:
         ef:90:91:b7:cf:4c:95:cc:e2:9e:b5:a2:7a:65:92:8e:9f:0d:
         44:0b:4c:05:96:c6:08:26:e4:71:ae:ef:0a:58:62:47:73:bb:
         09:80:6d:d8:b7:15:b4:22:db:62:fa:e2:bc:95:e2:97:7b:cf:
         06:30:87:ec:df:05:6c:06:87:15:38:07:d2:fb:06:fa:d8:47:
         4b:38:f9:81:88:94:54:2c:df:ec:f4:b0:3a:03:06:67:ac:02:
         b1:e0:be:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:03 2026 by rpki-client