Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
File:                     7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft (raw, json)
Hash identifier:          Wa+gyxYLaNyPw2mhbtWt15A4xFxsQio22QPPHgW+LT8=
Subject key identifier:   F4:BA:8A:EE:98:10:AB:5F:A3:14:4B:BB:CA:B3:4C:C6:BD:C9:5D:F6
Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC
Certificate issuer:       /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC
Certificate serial:       017D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
Manifest number:          0170
Signing time:             Thu 21 May 2026 04:51:25 +0000
Manifest this update:     Thu 21 May 2026 04:51:25 +0000
Manifest next update:     Thu 28 May 2026 04:51:25 +0000
Files and hashes:         1: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl (hash: 4Air3xoGKAjO4HmVcS3LIuVtLCCQqVNScPb9Z/OfxIY=)
                          2: 86F9CBCC2AB711EF996EC819C4F9AE02.roa (hash: Ug9ILiDXqWcLa6yuD4ODzV/AkZeAMrnjdmuMuL/P0OM=)
                          3: 2C7C9DD2258E11F0B42E1529C4F9AE02.roa (hash: ooDmK99ixwmZHb01igd9edAZRWXI26i5vbPS7c6NFw0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl
                          rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A02D8, serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC
        Validity
            Not Before: May 21 04:51:25 2026 GMT
            Not After : May 28 04:51:25 2026 GMT
        Subject: CN=6a0e8f4d-e93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ff:e9:33:81:f0:c8:3c:01:e4:91:5e:0b:70:
                    60:16:0d:5b:ce:fc:1d:27:59:b9:41:e3:95:69:ca:
                    b9:72:26:81:9e:5c:1e:2d:bf:5a:6d:a4:5b:41:46:
                    1c:9a:12:96:9a:d5:c5:a9:df:36:12:d4:31:15:c2:
                    45:06:f9:bd:ef:26:25:41:6e:cf:fe:05:16:0a:7d:
                    69:fd:fe:1c:a6:ae:81:6f:e5:46:33:54:8b:56:49:
                    dd:6d:e2:05:94:a4:6a:66:d5:cd:9f:5a:fc:dc:2f:
                    71:31:e9:72:2d:19:b7:2f:b7:78:be:42:81:9b:13:
                    fc:6a:7d:cd:58:90:ee:e4:b3:34:f4:6a:38:73:c2:
                    35:ff:14:00:c5:04:29:d7:71:29:91:f5:5d:0f:10:
                    07:0e:5f:bd:34:06:ea:a0:c1:db:d3:b9:16:14:3c:
                    0f:7b:e8:86:d6:29:73:23:56:bf:16:b7:e6:d3:3b:
                    ab:b1:ea:cf:c7:95:6a:63:67:e9:1a:d9:af:30:85:
                    6a:4f:1c:67:87:08:51:f9:34:ab:41:6b:f7:1a:00:
                    2f:72:ef:1c:50:8a:92:39:dc:73:7b:2f:64:e6:e6:
                    7c:65:40:d2:26:23:20:63:f3:8e:79:63:c7:a0:d9:
                    27:38:c0:e7:50:36:e8:21:ce:1d:fc:f8:07:33:10:
                    f8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BA:8A:EE:98:10:AB:5F:A3:14:4B:BB:CA:B3:4C:C6:BD:C9:5D:F6
            X509v3 Authority Key Identifier:
                keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:06:7a:23:7a:d5:c4:b4:98:c9:50:49:22:1e:66:57:e6:12:
         24:88:8a:b1:a6:c4:f9:2f:36:59:6c:38:4e:7e:f3:06:11:f1:
         07:5b:e7:3c:ec:d2:94:dc:bb:9b:28:95:e9:16:77:df:5b:32:
         54:d7:9a:a1:38:81:10:09:89:29:d0:6c:3c:3a:54:49:89:04:
         ed:7b:c7:77:4c:98:16:73:3a:c2:c7:e3:6e:05:33:1e:06:7a:
         fd:96:e8:70:25:a2:58:44:a3:90:44:db:06:b5:1b:93:62:01:
         45:b5:35:a0:a2:b8:6e:51:21:8b:ef:4b:32:96:c0:d7:a8:a2:
         f2:be:5d:97:f2:e3:f4:84:c9:e3:2b:21:7f:30:40:2b:5e:a6:
         4b:ca:79:78:53:37:04:10:49:65:77:90:a9:37:a7:91:bf:5c:
         73:a0:a3:cb:7c:3a:8b:c7:13:6e:ed:e6:65:97:10:56:62:5d:
         84:de:50:fb:15:bc:e4:75:dd:2b:00:24:24:d4:93:db:56:0c:
         ac:7b:4d:b3:a9:7b:83:ab:ee:7f:7d:21:c0:ff:89:01:73:d2:
         2b:a3:bf:59:1d:22:8d:95:f4:e3:d5:30:ad:87:f0:18:b0:10:
         42:99:81:ec:f8:57:cf:09:90:22:cd:7b:0f:66:a1:de:f3:0b:
         ad:59:ef:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:58:26 2026 by rpki-client