Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
File:                     Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft (raw, json)
Hash identifier:          gy8uboHvQYZ+XSvo4ew9sskAA+P6Vn6BEvawRwRsPfQ=
Subject key identifier:   24:ED:AF:1A:28:FE:81:4E:AA:F4:82:5E:4D:22:C6:F7:EF:D0:46:E6
Authority key identifier: 43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7
Certificate issuer:       /CN=A9192A47/serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7
Certificate serial:       E7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
Manifest number:          E7
Signing time:             Tue 03 Mar 2026 06:04:13 +0000
Manifest this update:     Tue 03 Mar 2026 06:04:12 +0000
Manifest next update:     Tue 10 Mar 2026 06:04:12 +0000
Files and hashes:         1: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl (hash: XCxxa9mJ4GM5bVTDfMH8TakNq0OkfJtL45CbbMm8oZE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47, serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7
        Validity
            Not Before: Mar  3 06:04:12 2026 GMT
            Not After : Mar 10 06:04:12 2026 GMT
        Subject: CN=69a679dd-3bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5f:e3:42:37:8c:c8:c6:2c:aa:59:90:02:a9:
                    47:e7:a9:11:c0:87:09:f7:52:8a:6c:91:46:0b:4a:
                    18:98:7a:d9:ca:56:88:03:4e:b6:18:7a:0c:0b:da:
                    ba:f4:9a:be:88:03:a3:44:2d:78:d8:a1:27:de:35:
                    b2:44:d1:d6:10:b1:40:09:88:43:75:02:ca:e6:15:
                    82:54:d9:2d:d8:77:c6:9f:fc:fa:87:ed:b0:76:c8:
                    87:23:ae:d0:99:07:c6:2c:57:3b:2b:51:9b:39:5f:
                    ea:ce:7e:46:d8:45:b0:7c:69:01:b8:1c:e3:fc:fd:
                    45:90:7e:bd:b8:cc:4f:78:11:99:63:87:ce:da:7c:
                    cb:7c:c5:9c:13:fb:7b:c0:a5:15:82:28:65:66:d5:
                    84:fa:d5:63:6a:1f:4b:8c:13:6d:7e:60:3c:28:ab:
                    6a:32:28:8e:0b:8d:13:87:dd:2c:96:7f:2a:60:c2:
                    8f:b2:f9:6f:e3:46:c5:ed:08:e6:97:59:5e:0a:87:
                    d5:07:51:1a:33:60:9c:38:56:4a:0e:88:47:54:a1:
                    6c:5b:e5:82:ef:c1:69:94:4e:3f:1d:40:3f:08:50:
                    df:7b:0c:18:29:4f:fc:1b:1c:c8:a3:b7:4b:e4:1f:
                    ea:fe:f6:30:77:45:84:ca:6e:65:cb:65:c6:34:3d:
                    88:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:ED:AF:1A:28:FE:81:4E:AA:F4:82:5E:4D:22:C6:F7:EF:D0:46:E6
            X509v3 Authority Key Identifier:
                keyid:43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ac:8c:2b:b0:82:fc:d0:05:ae:c6:fa:13:5c:27:9f:52:6b:
         a4:94:bf:8b:95:62:3a:0f:d5:44:16:5d:91:99:ef:78:fb:7f:
         e0:f0:64:57:a1:54:ab:56:3e:28:8a:b4:36:52:5e:c2:c4:a7:
         9e:3c:4b:b5:dc:24:2b:b7:58:59:98:cb:52:9f:57:2b:0b:84:
         d3:a4:40:d2:f1:5e:ce:e3:a2:93:ce:77:f3:00:5f:9d:dc:35:
         f2:c6:23:15:9c:6b:04:a6:4c:0f:45:98:73:2a:b7:9c:f0:28:
         12:e5:a0:f4:eb:bb:10:97:a7:20:b6:9f:d6:ae:32:80:8d:22:
         da:06:25:c5:6c:bc:e9:f5:17:85:b9:6a:fa:cc:75:b2:71:1e:
         15:f0:da:54:92:bf:b6:e0:11:8f:22:be:14:a9:bf:18:53:f2:
         dc:a8:18:31:e4:c2:65:bb:3e:6c:98:da:6a:e8:ba:62:90:51:
         be:b4:06:76:ab:58:f6:1e:56:d8:74:6e:9d:14:19:aa:73:d3:
         3d:60:6d:cf:4a:56:8f:6f:d8:03:9d:b1:0c:f0:51:67:85:f3:
         2d:27:ea:1a:41:59:95:a7:e8:6a:7b:a9:36:48:13:d5:78:f4:
         c0:b4:95:f3:9d:8b:08:23:9c:81:ad:91:80:cb:b6:54:0b:63:
         fa:88:87:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:05 2026 by rpki-client