Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
File:                     7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft (raw, json)
Hash identifier:          9JfUO9+6AAlqvwvaSkamdDcZ8Pfjz9pkhfjcV635DWI=
Subject key identifier:   D9:7F:83:FA:CC:C0:DA:3A:3D:51:46:E0:DE:C9:F6:E5:1A:D8:51:D2
Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
Certificate issuer:       /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Certificate serial:       01D1
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
Manifest number:          01C1
Signing time:             Thu 04 Jun 2026 23:44:48 +0000
Manifest this update:     Thu 04 Jun 2026 23:44:48 +0000
Manifest next update:     Thu 11 Jun 2026 23:44:48 +0000
Files and hashes:         1: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl (hash: UjjBmTTm3cWhT3aAr2yB9MxZ4h46YRTxTutkBjOQv7E=)
                          2: D66D72562EAB11EF9B369566C4F9AE02.roa (hash: BTujCOzweyrlwkqHtVbjQnXK728OLdZVZlAKuLvnySY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
                          rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 23:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7BDC, serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
        Validity
            Not Before: Jun  4 23:44:48 2026 GMT
            Not After : Jun 11 23:44:48 2026 GMT
        Subject: CN=6a220df0-2a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:71:ca:d5:da:87:36:87:7c:fe:2e:ca:7f:08:
                    e5:45:0c:1c:7c:c1:52:79:94:f9:96:f3:7d:d2:7b:
                    b0:c7:76:df:7e:28:0c:31:d5:7c:42:83:ab:07:63:
                    31:39:37:d2:30:89:52:46:8b:1e:e5:d9:0f:f2:27:
                    83:38:b8:36:11:70:74:e3:e3:6d:a1:b8:f3:e5:4d:
                    8e:29:fb:f6:78:9f:7b:84:49:d4:21:d0:c7:cc:dc:
                    3a:96:9a:08:91:7f:8c:85:78:0b:83:4a:49:dc:a2:
                    bd:9d:aa:b3:38:7f:f9:98:bb:50:ef:4e:b4:b5:56:
                    b9:61:14:e2:00:a1:22:01:d4:71:91:25:de:07:c4:
                    8c:39:8f:16:63:41:75:c8:14:7f:bd:e4:2a:c3:a6:
                    cd:90:d4:b2:7e:b8:4a:1e:53:d1:89:f5:02:53:15:
                    8c:9d:9b:a2:6c:5f:12:70:1e:8d:7c:5d:cf:37:b0:
                    92:18:1e:dd:b5:7f:b5:7b:08:a5:93:77:d9:d9:02:
                    96:86:02:3c:ba:2e:96:5c:5b:ea:99:2a:8c:a4:c8:
                    f6:54:3e:f2:60:e8:0a:fd:68:52:00:e3:53:b7:92:
                    f5:03:b4:26:15:5e:08:3c:20:3c:b3:ba:18:0c:db:
                    dd:38:17:22:00:5b:7c:1c:ae:c8:72:e3:ea:95:5a:
                    6d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7F:83:FA:CC:C0:DA:3A:3D:51:46:E0:DE:C9:F6:E5:1A:D8:51:D2
            X509v3 Authority Key Identifier:
                keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:64:fd:24:cf:cc:92:7e:31:80:53:0a:b6:9c:8e:5d:83:98:
         64:83:90:18:32:fd:5f:7b:d2:fc:90:4f:a6:5e:bf:9f:1c:8d:
         ea:21:eb:3d:e6:e8:69:21:1b:7c:a7:3d:cf:60:cb:d6:09:9c:
         5f:cf:99:e0:bf:c7:99:ee:26:05:5b:2b:81:17:35:93:d6:ef:
         8a:d0:65:03:4c:ce:1b:35:83:77:57:0e:8c:6c:44:6a:85:01:
         c3:2a:2b:51:f4:bb:b0:1b:8b:83:b0:77:7b:17:61:fc:a7:34:
         22:8a:db:a9:1d:c3:eb:dd:ae:bf:e8:b4:2f:1e:c9:ba:5a:94:
         d7:5b:27:7a:e1:b0:8c:84:e7:6d:29:d6:7a:76:07:e5:d5:f5:
         37:db:7a:fc:4f:68:97:16:9e:15:c7:85:b6:28:92:d2:64:2c:
         61:22:46:5a:bc:42:b8:c4:ed:a6:7d:f3:23:4d:21:1d:88:64:
         b9:ba:71:52:b0:e3:52:11:53:b2:70:2c:df:0f:c8:44:8e:4f:
         e4:a4:cb:ba:54:68:0d:3e:88:53:08:2d:b8:c6:07:cf:e7:74:
         f6:e4:30:42:fc:3b:ff:35:77:00:12:19:e0:74:c9:b5:9a:51:
         11:fd:42:87:f1:e2:95:c9:13:8f:bf:39:94:8d:75:85:a9:78:
         45:04:2d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:50:15 2026 by rpki-client