Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File:                     7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier:          fiu/ADRuiEJB7Xg7FI0Sdi+orEIgjLt0xeuleyrfdCE=
Subject key identifier:   6F:F2:1F:5A:A6:92:34:43:4A:D3:25:5D:1C:25:1D:D0:2A:61:E6:13
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer:       /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial:       0298
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number:          028F
Signing time:             Fri 29 May 2026 01:37:58 +0000
Manifest this update:     Fri 29 May 2026 01:37:58 +0000
Manifest next update:     Fri 05 Jun 2026 01:37:58 +0000
Files and hashes:         1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: EkLmHcRLn4HeHJgcsGQWsp607dJjxPNR6oIgSoD/0I8=)
                          2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
                          rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Jun 2026 01:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
        Validity
            Not Before: May 29 01:37:58 2026 GMT
            Not After : Jun  5 01:37:58 2026 GMT
        Subject: CN=6a18edf6-f683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e1:98:f2:a9:12:43:d9:4c:10:d4:b8:0f:f7:
                    c0:e5:da:24:26:06:75:ae:e3:2e:b9:3e:9f:3b:eb:
                    88:ad:8a:c5:02:e6:11:2c:82:9c:6f:ed:9a:df:e3:
                    ce:44:4a:1f:1a:a4:86:94:51:ce:43:8b:62:06:9f:
                    09:ed:1b:8b:6e:66:67:e5:11:d9:b3:54:27:79:69:
                    51:22:be:d0:1b:37:13:9f:ab:0b:08:61:54:56:36:
                    7c:e7:a2:4c:b5:f4:55:5d:39:e0:24:0c:a1:40:27:
                    4a:cc:e2:5c:2a:48:d5:f2:7e:7a:cb:08:dd:d6:6c:
                    8d:90:82:63:b8:ee:01:77:e7:e0:f3:ec:73:7a:37:
                    0d:a8:9b:3c:a5:24:c9:e6:03:c2:3d:3e:af:6b:bd:
                    71:74:95:cf:14:8a:93:6f:90:60:b8:d9:e9:cf:4d:
                    15:4f:01:89:04:38:b9:3a:c6:9c:6f:32:b2:30:ea:
                    f0:a5:e3:94:5c:3f:4e:fa:33:8a:ad:54:b4:3b:83:
                    77:55:6b:1e:7d:51:e8:da:a0:a4:bd:df:87:e4:5a:
                    b4:44:93:83:4c:16:4f:13:c1:8e:48:f4:17:e5:dd:
                    9e:70:58:47:b1:74:02:59:a7:b3:21:12:c4:35:66:
                    e8:cf:4d:db:c8:99:5b:eb:f0:b5:ed:c5:a3:bc:2e:
                    79:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F2:1F:5A:A6:92:34:43:4A:D3:25:5D:1C:25:1D:D0:2A:61:E6:13
            X509v3 Authority Key Identifier:
                keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:63:ac:b4:7a:0b:14:91:68:7a:b8:ea:cc:4a:b0:a7:e3:1a:
         4e:3a:df:9e:fc:37:c7:3b:81:0b:29:1a:98:16:5a:cb:ab:be:
         3f:98:43:5f:3f:f2:6b:2d:0f:90:07:60:71:b2:46:dc:3b:6f:
         37:ac:e1:b9:aa:45:60:50:4c:5a:bd:83:43:67:f7:bb:82:6e:
         df:5b:43:92:e4:eb:e0:0e:52:ea:84:49:14:46:a4:74:27:7b:
         48:4b:f9:d2:5e:24:1b:c8:f5:fb:bd:40:1c:f2:e5:71:bc:16:
         96:a2:d0:af:3f:1c:f3:86:ad:26:54:10:15:bb:34:6e:d7:b7:
         43:a3:fa:48:24:fd:60:49:4e:c5:45:81:bd:0f:d8:d3:fe:4a:
         ac:5c:c9:bc:89:31:86:49:8c:83:27:3b:ab:84:12:05:24:9b:
         eb:6f:fa:6c:c1:a3:90:87:b3:39:0f:fc:07:5f:68:b3:53:3e:
         cf:5e:aa:4e:84:4f:71:1c:62:dc:5d:94:ae:a2:95:ba:7b:ee:
         42:22:ea:30:34:7a:37:6b:83:06:98:9e:b0:1c:29:9e:19:ad:
         4b:8a:82:2b:e9:aa:24:9c:6c:c8:47:57:0a:58:35:2d:69:e2:
         34:29:4b:d0:47:55:40:34:92:79:bd:8c:a9:92:f7:fa:92:1d:
         29:ee:4c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 11:24:38 2026 by rpki-client