Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
File:                     7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft (raw, json)
Hash identifier:          uB8UA2nvUKqpvpFMYHXYNAYlCh8lnkcO2+41+pYfqAM=
Subject key identifier:   0C:6B:FC:01:DB:73:0E:D9:F6:76:CC:90:EB:4F:71:E4:7B:BB:8E:D5
Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
Certificate issuer:       /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
Manifest number:          018F
Signing time:             Fri 06 Mar 2026 23:30:33 +0000
Manifest this update:     Fri 06 Mar 2026 23:30:32 +0000
Manifest next update:     Fri 13 Mar 2026 23:30:32 +0000
Files and hashes:         1: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl (hash: Jcf7YTO20woF1PUAnOo8e6pTdBBl1BDpXmTsprPZvx8=)
                          2: D66D72562EAB11EF9B369566C4F9AE02.roa (hash: Jpr2rdfDo4+UmyigrHHOPqRZP94BLcmyPwbnjdRwNGQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
                          rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 23:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7BDC, serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
        Validity
            Not Before: Mar  6 23:30:32 2026 GMT
            Not After : Mar 13 23:30:32 2026 GMT
        Subject: CN=69ab6399-b66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a8:6c:7c:18:a9:68:e2:0e:6e:3d:57:cd:79:
                    af:71:fb:05:e2:4c:00:ac:ba:9f:b5:97:36:f4:cd:
                    b7:06:a6:12:c1:f7:16:02:44:27:30:d5:63:7b:f3:
                    6e:31:b6:fc:05:b1:51:f9:d4:45:eb:79:f3:74:a4:
                    c0:2c:77:58:5b:48:7c:b4:50:7f:24:99:2d:85:d7:
                    95:b3:8f:b4:47:b5:93:bd:2e:47:43:fb:d6:94:45:
                    d9:43:ef:2d:b7:4b:da:77:16:cf:07:75:a6:54:fa:
                    5c:c8:18:a5:eb:a8:63:de:e3:38:eb:7c:d1:b9:9a:
                    9c:67:14:6a:30:ef:01:0f:14:ed:9b:20:c6:b9:d3:
                    c6:bd:cf:b5:93:04:72:ee:4b:87:28:9c:11:5c:71:
                    a5:79:9a:54:09:c0:af:7b:8b:c7:ba:7c:a9:7e:fa:
                    b1:88:e0:a8:75:96:3f:d4:07:b7:89:3d:01:e4:00:
                    ab:9f:e5:4e:ae:20:e4:9f:1b:7b:c3:55:91:10:52:
                    67:da:29:14:74:61:3d:d0:eb:06:0e:90:00:77:4f:
                    66:b6:8e:30:57:96:da:ef:90:45:9b:86:ae:d8:19:
                    80:94:cc:ca:40:ae:80:67:f9:a1:aa:eb:9a:92:b3:
                    f7:f6:48:6a:a2:4b:e4:b4:7c:0c:2b:2e:d8:61:66:
                    85:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6B:FC:01:DB:73:0E:D9:F6:76:CC:90:EB:4F:71:E4:7B:BB:8E:D5
            X509v3 Authority Key Identifier:
                keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:25:ca:28:df:35:ee:97:79:c5:55:db:40:84:c2:47:43:4f:
         68:ca:2d:39:f8:4d:e4:8d:11:06:8e:be:bd:b5:9d:89:c3:e4:
         86:71:6e:b6:2c:40:8f:40:e1:62:63:af:f6:fb:20:61:a4:09:
         af:2d:a4:76:02:72:b1:d8:12:de:66:88:ba:99:d6:fc:54:bd:
         35:f1:04:51:43:7f:fb:de:90:a8:1e:dd:79:20:73:95:75:56:
         51:a0:71:e8:93:e1:95:92:c8:61:ae:6b:30:14:21:dc:f4:2e:
         30:b3:66:52:c4:2d:7b:d8:4b:ed:23:0c:cb:53:b1:fa:9f:c9:
         84:4d:ab:2e:7e:d2:2b:df:fe:f9:58:a4:53:c9:de:2f:eb:9b:
         25:2c:68:b3:01:42:cf:d7:16:8b:af:01:77:ad:43:b9:45:15:
         0d:2f:a9:6c:26:51:f0:71:2b:89:51:0b:90:b0:a5:96:0d:9f:
         79:d4:bc:87:3d:f5:cf:e5:6e:d4:09:42:84:81:15:3e:88:7d:
         63:46:de:fb:fb:5c:e6:b8:0c:14:98:2f:48:08:36:5b:53:29:
         6f:91:a6:41:b1:94:4b:b8:a0:3f:8e:34:ee:c3:7f:46:63:84:
         a5:18:5b:51:c8:7d:17:46:2b:64:43:a4:c4:c3:b3:45:ec:f8:
         e4:f5:d5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:35:57 2026 by rpki-client