Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
File:                     S7U1I5SOxqyZE7LVCcHXspRtnpI.mft (raw, json)
Hash identifier:          PYW+X/IVja5YElvzcQxXAGMJiZrGmPfNi5mdhWxo1v0=
Subject key identifier:   1A:CF:4B:A8:C8:CF:42:9E:75:1D:DE:86:3E:F3:EF:51:32:C4:8E:05
Authority key identifier: 4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92
Certificate issuer:       /CN=A91AF431/serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
Manifest number:          7E
Signing time:             Thu 21 May 2026 07:47:30 +0000
Manifest this update:     Thu 21 May 2026 07:47:30 +0000
Manifest next update:     Thu 28 May 2026 07:47:30 +0000
Files and hashes:         1: S7U1I5SOxqyZE7LVCcHXspRtnpI.crl (hash: jJdV/GmrKMwVSwoDoSPqH+K9Z7qnROj5Wlo2fMiXfQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl
                          rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF431, serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92
        Validity
            Not Before: May 21 07:47:30 2026 GMT
            Not After : May 28 07:47:30 2026 GMT
        Subject: CN=6a0eb892-473b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:bf:c4:c2:d8:5a:2f:34:20:09:d1:99:cc:
                    87:36:a5:13:45:94:71:c6:f1:2b:ca:7e:f8:82:96:
                    55:c1:6b:d7:69:33:e5:b0:30:27:c7:0f:6a:88:de:
                    72:a8:e1:59:0a:ac:49:b5:94:e5:56:02:a3:75:df:
                    96:b1:3c:5d:47:ce:98:2e:18:8b:b5:49:56:3d:62:
                    49:f9:38:d1:6b:7d:2d:76:41:fc:66:a7:3d:08:87:
                    a4:e2:ab:2f:c1:bc:2a:b7:19:61:48:97:89:75:20:
                    56:30:96:46:71:27:23:94:0b:a4:94:d1:7b:bd:c7:
                    ec:1f:89:de:78:f6:71:ce:ec:6f:36:a8:6c:7a:12:
                    59:ae:bf:9c:14:ef:44:08:6d:d7:15:44:16:03:32:
                    15:25:cc:9f:7e:ec:4b:b6:77:39:63:50:2e:54:58:
                    5d:f0:84:6b:0a:d6:cb:63:28:27:1e:ec:7b:e0:9c:
                    a0:19:f1:5b:d2:b6:7f:66:7c:c9:38:34:06:1b:4f:
                    50:52:42:95:e4:b6:f7:d3:54:31:a2:94:96:ea:07:
                    29:7a:c6:47:92:0c:de:77:1d:99:8f:87:a4:22:17:
                    ca:d7:2e:ff:08:93:46:11:45:72:98:44:c1:5d:0a:
                    d5:ad:5c:6b:ab:1b:7b:8f:db:77:47:ac:e9:1a:a5:
                    b1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CF:4B:A8:C8:CF:42:9E:75:1D:DE:86:3E:F3:EF:51:32:C4:8E:05
            X509v3 Authority Key Identifier:
                keyid:4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:2b:dd:ea:e7:14:c4:cb:24:e3:7f:97:89:a8:67:e4:d3:a0:
         d4:c3:3c:a1:8f:c3:82:48:dc:ec:d2:36:b7:bc:bc:cc:09:8f:
         33:4a:c9:2f:2e:b7:b7:04:d2:fd:09:e5:17:bd:0c:4b:1f:35:
         56:79:bf:81:f0:f5:0c:4f:a2:df:91:e7:52:d6:06:78:c1:bf:
         9f:4c:55:0f:6a:f0:59:53:81:3e:16:ec:17:e1:5e:e5:7b:eb:
         60:24:8a:06:5b:86:12:86:36:fd:b9:74:73:1d:c6:92:2b:97:
         9c:68:06:05:cf:16:24:9a:d1:49:2f:34:ea:29:1f:ec:16:b7:
         97:ed:24:af:e2:eb:29:ab:dc:a8:3b:37:36:fa:af:1c:a5:d2:
         f6:48:81:34:3b:16:77:c4:08:78:6e:7f:c5:dc:8a:4e:e4:f5:
         5f:94:4b:fc:84:5f:17:fa:cf:c8:0d:b9:05:35:ec:cb:5a:18:
         47:62:9b:21:a3:cf:05:0a:5f:bf:96:4c:17:9f:57:6c:44:d1:
         34:d6:65:2a:5f:cf:f7:69:df:96:93:af:e9:21:d3:57:9c:68:
         5e:46:ad:ab:d6:e9:61:77:a4:06:c7:52:4f:d9:18:30:ac:39:
         ab:c6:25:b3:1b:16:88:96:76:c1:7a:7a:cd:d9:a4:1b:72:67:
         27:f8:15:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:52:40 2026 by rpki-client