Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
File:                     n7dBtymAPGtDKbw7QOduUqvYufg.mft (raw, json)
Hash identifier:          AdOcXqcBOZIXd78ioWaq9zmqqLabSMC4/1gMM0RXLfo=
Subject key identifier:   78:1E:6B:D0:3B:FC:78:BA:12:CB:10:48:A4:26:C5:72:79:45:C4:A6
Authority key identifier: 9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8
Certificate issuer:       /CN=A91A7F56/serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8
Certificate serial:       01CD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
Manifest number:          01C7
Signing time:             Mon 01 Jun 2026 04:31:53 +0000
Manifest this update:     Mon 01 Jun 2026 04:31:53 +0000
Manifest next update:     Mon 08 Jun 2026 04:31:53 +0000
Files and hashes:         1: n7dBtymAPGtDKbw7QOduUqvYufg.crl (hash: +w7C4bPVxW7nXpfTzLpclpX60tg/8iqMCVIaJQiStyA=)
                          2: 1FFCF508ADF211EE93DC0A12C4F9AE02.roa (hash: 01Z3o9E/9a1yoPoDH4foZI/dUy6PRT7K5bZ7LbnHM+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl
                          rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 04:31:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7F56, serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8
        Validity
            Not Before: Jun  1 04:31:53 2026 GMT
            Not After : Jun  8 04:31:53 2026 GMT
        Subject: CN=6a1d0b39-c1c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cb:82:3b:b6:a2:c6:f9:8e:e6:72:af:c8:bf:
                    18:45:03:45:6d:6a:a4:48:aa:f8:22:3f:de:43:5f:
                    29:bc:79:11:1d:56:f8:ba:fa:ae:a5:5b:07:9c:1b:
                    bc:a1:9b:4e:80:89:c8:5d:95:86:bf:e0:43:23:9c:
                    62:ef:37:a5:6d:7b:f2:ee:95:77:99:87:ed:d4:c9:
                    ff:b0:a2:c9:d3:14:1e:e0:86:6e:17:12:00:3b:c9:
                    30:d4:8e:59:25:8b:d0:8f:24:df:a8:e6:ec:14:15:
                    ca:e1:d6:8d:0e:75:fd:35:25:f3:a8:b3:c2:2c:54:
                    09:1e:a2:3b:f7:a5:1d:37:d3:38:15:db:66:c3:b0:
                    6b:d0:2e:93:57:14:09:84:94:f0:d1:37:fa:19:93:
                    1b:79:34:50:de:e9:cb:c4:6e:49:7e:4b:db:98:0d:
                    1f:99:37:a1:b9:3e:4c:c1:3e:52:7c:a5:32:02:3c:
                    b7:e6:b8:3b:01:5e:15:a0:0b:1f:74:06:a0:57:ab:
                    65:d5:49:d2:5d:17:6b:78:eb:8f:75:9e:95:29:8d:
                    9c:20:f1:e3:95:d7:7e:0e:f7:d3:46:1b:20:16:0d:
                    ef:27:3c:d9:9f:58:26:a7:f1:09:e8:97:80:77:a2:
                    d2:b1:21:f5:58:e7:96:7b:4f:16:1c:42:ad:5b:47:
                    ee:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1E:6B:D0:3B:FC:78:BA:12:CB:10:48:A4:26:C5:72:79:45:C4:A6
            X509v3 Authority Key Identifier:
                keyid:9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:9f:b4:5b:03:54:54:34:f3:27:23:e4:64:81:44:e3:02:6e:
         b7:4d:e4:0a:fa:d4:d4:69:78:fd:a0:01:9a:1c:c0:ab:25:69:
         07:96:01:15:b1:05:aa:8b:a4:30:3b:91:89:3f:c1:60:ba:5a:
         5e:3b:4e:63:eb:c7:f7:19:50:2d:dd:27:1d:1c:27:84:81:dc:
         3d:c1:cf:7d:9c:77:1b:aa:cb:ce:f5:5d:22:a3:dc:7e:9b:7d:
         f4:2f:d6:d2:1d:73:94:06:d6:d1:2b:7b:52:fc:8a:6a:b7:2e:
         05:26:c7:b0:93:03:ff:dc:c1:5c:f0:e4:67:73:72:33:f0:0b:
         dd:93:11:8a:0d:67:f4:97:91:a1:9d:13:f8:9c:dd:6e:f7:af:
         a4:6a:b0:c6:fa:2f:6c:e2:3b:9d:5b:f9:08:e6:d2:42:fc:34:
         88:2c:d2:a9:b5:0c:43:87:d2:cd:88:b7:b1:76:f8:d2:19:2a:
         a4:9a:a8:3b:ca:fc:c5:4e:96:20:c0:dd:38:9a:2e:b5:d3:a6:
         c4:be:69:22:39:5b:ad:7b:a0:fd:73:0c:07:c0:18:a8:0d:08:
         b7:67:bb:dd:11:63:0c:d2:f9:99:ad:70:c7:99:3b:4d:0a:39:
         e0:92:dd:71:a4:93:63:00:ff:2e:36:22:60:d3:54:69:ac:17:
         83:89:f5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:33 2026 by rpki-client