Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.mft
File:                     no_7TgVT0H7Q35t9_tC1PETL_gQ.mft (raw, json)
Hash identifier:          thlZKurV9TDWdwacOaBsf8SmxW9YFbNxj9OCGHtDvHY=
Subject key identifier:   DE:D7:32:A2:77:F5:B4:1C:52:91:DC:D7:E4:DD:8B:67:BF:11:F3:DA
Authority key identifier: 9E:8F:FB:4E:05:53:D0:7E:D0:DF:9B:7D:FE:D0:B5:3C:44:CB:FE:04
Certificate issuer:       /CN=A91E10B0/serialNumber=9E8FFB4E0553D07ED0DF9B7DFED0B53C44CBFE04
Certificate serial:       0D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/no_7TgVT0H7Q35t9_tC1PETL_gQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.mft
Manifest number:          0B
Signing time:             Mon 01 Jun 2026 12:49:03 +0000
Manifest this update:     Mon 01 Jun 2026 12:49:03 +0000
Manifest next update:     Mon 08 Jun 2026 12:49:03 +0000
Files and hashes:         1: no_7TgVT0H7Q35t9_tC1PETL_gQ.crl (hash: 35Fyg5ydHRxt4zpoWcbe3W1WZcV2b5/wSKMjVCQaqYg=)
                          2: 423B6B5E5DB811F1966FAE05AC833773.roa (hash: TIfZzZzg/QXy0NCiF0a1I+19CdyJj4ReyDwnAPzzoOM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/no_7TgVT0H7Q35t9_tC1PETL_gQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 12:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E10B0, serialNumber=9E8FFB4E0553D07ED0DF9B7DFED0B53C44CBFE04
        Validity
            Not Before: Jun  1 12:49:03 2026 GMT
            Not After : Jun  8 12:49:03 2026 GMT
        Subject: CN=6a1d7fbf-2a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b8:50:5f:2f:60:3a:84:fe:48:7e:97:7a:62:
                    69:ad:99:9c:10:89:ae:ad:de:4f:1c:63:91:1c:64:
                    2d:a1:36:e9:ac:81:cc:db:65:57:05:c7:3d:09:9f:
                    40:f9:bd:f2:89:a7:a6:12:7f:45:f7:ae:ea:25:27:
                    62:c5:d9:78:32:72:58:97:98:79:7e:97:c3:e1:41:
                    90:c0:ad:d6:a5:86:d6:17:11:23:a3:09:e2:a1:bf:
                    0f:de:1d:59:43:55:91:8c:b7:db:2a:c7:e3:e2:a8:
                    37:2e:28:4f:8b:96:ab:d9:29:63:06:10:45:85:82:
                    f9:7a:2c:59:95:6a:59:86:e4:1a:4c:63:3f:37:f9:
                    40:2e:37:64:e9:de:12:9a:aa:c9:73:d6:10:f0:64:
                    e4:70:67:f3:68:59:41:24:95:81:cc:8c:69:d7:b9:
                    3e:96:f7:15:20:5e:23:ca:ec:54:9a:c0:1f:a1:bc:
                    66:dd:af:be:4e:7b:d0:b4:1a:dc:44:0b:d8:48:8e:
                    e7:e2:a2:e1:3c:4c:f2:2b:5d:85:a1:66:9b:b6:38:
                    ca:a4:12:42:55:48:ee:c2:ad:7c:a2:1f:4a:8e:74:
                    00:6a:0e:2c:32:51:57:79:32:b3:a0:ee:d3:83:bb:
                    e6:fc:08:4d:18:df:d3:d5:c4:0d:79:67:47:dd:6d:
                    19:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D7:32:A2:77:F5:B4:1C:52:91:DC:D7:E4:DD:8B:67:BF:11:F3:DA
            X509v3 Authority Key Identifier:
                keyid:9E:8F:FB:4E:05:53:D0:7E:D0:DF:9B:7D:FE:D0:B5:3C:44:CB:FE:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/no_7TgVT0H7Q35t9_tC1PETL_gQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:4d:fb:f2:04:d1:a7:7e:58:68:be:70:14:f1:0f:f8:d5:7e:
         60:68:3e:2e:07:2a:a0:02:5a:3b:18:bc:9f:bc:4e:62:67:5e:
         7f:0c:55:c5:22:10:27:d3:62:93:10:ec:a4:fe:b9:a2:43:40:
         32:9e:fc:c8:62:71:98:6a:a3:f8:59:d8:dd:46:9c:98:6d:e7:
         87:21:1b:2d:6b:07:f6:22:27:48:95:d5:b8:8c:ab:91:2a:5e:
         0b:73:0a:ca:d1:42:2f:2a:65:b6:b0:bf:02:20:d5:1b:84:88:
         5b:73:0e:c1:6d:e9:5b:00:01:70:d7:84:df:d1:9f:39:c3:b2:
         ee:6f:6b:3f:c7:74:58:af:ca:ee:71:db:92:d1:07:da:24:f9:
         58:d6:51:c0:d9:81:0e:da:66:f2:14:aa:bf:07:f5:f3:76:fc:
         3f:5a:38:2b:4d:72:ad:88:bc:98:a3:d8:8d:ef:75:51:86:a2:
         3e:c7:be:53:f3:be:4e:a4:03:7e:88:d9:12:a5:62:29:d3:f9:
         70:50:53:fa:0a:f8:bc:3b:c1:69:4d:dc:d5:be:c9:ed:31:74:
         6e:68:ec:cb:ac:83:72:34:8c:a2:34:9b:a9:89:1b:d9:8d:13:
         e8:93:e9:94:b9:bf:8b:0c:10:b3:fe:d6:9f:4d:12:05:7b:b0:
         f2:bc:12:c8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MTBCMDExMC8GA1UEBRMoOUU4RkZCNEUwNTUzRDA3RUQwREY5QjdERkVEMEI1M0M0
NENCRkUwNDAeFw0yNjA2MDExMjQ5MDNaFw0yNjA2MDgxMjQ5MDNaMBgxFjAUBgNV
BAMTDTZhMWQ3ZmJmLTJhMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD2uFBfL2A6hP5Ifpd6YmmtmZwQia6t3k8cY5EcZC2hNumsgczbZVcFxz0Jn0D5
vfKJp6YSf0X3ruolJ2LF2XgycliXmHl+l8PhQZDArdalhtYXESOjCeKhvw/eHVlD
VZGMt9sqx+PiqDcuKE+LlqvZKWMGEEWFgvl6LFmValmG5BpMYz83+UAuN2Tp3hKa
qslz1hDwZORwZ/NoWUEklYHMjGnXuT6W9xUgXiPK7FSawB+hvGbdr75Oe9C0GtxE
C9hIjufiouE8TPIrXYWhZpu2OMqkEkJVSO7CrXyiH0qOdABqDiwyUVd5MrOg7tOD
u+b8CE0Y39PVxA15Z0fdbRk7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3tcyonf1
tBxSkdzX5N2LZ78R89owHwYDVR0jBBgwFoAUno/7TgVT0H7Q35t9/tC1PETL/gQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxMEIwLzAwRjhBMjc4NTcx
RjExRjE4MzQwQzI2QzkxODMzNzczL25vXzdUZ1ZUMEg3UTM1dDlfdEMxUEVUTF9n
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbm9fN1RnVlQwSDdRMzV0OV90QzFQRVRMX2dRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx
MEIwLzAwRjhBMjc4NTcxRjExRjE4MzQwQzI2QzkxODMzNzczL25vXzdUZ1ZUMEg3
UTM1dDlfdEMxUEVUTF9nUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCeTfvyBNGnflhovnAU8Q/41X5gaD4uByqgAlo7GLyfvE5iZ15/DFXFIhAn02KT
EOyk/rmiQ0AynvzIYnGYaqP4WdjdRpyYbeeHIRstawf2IidIldW4jKuRKl4LcwrK
0UIvKmW2sL8CINUbhIhbcw7BbelbAAFw14Tf0Z85w7Lub2s/x3RYr8rucduS0Qfa
JPlY1lHA2YEO2mbyFKq/B/Xzdvw/WjgrTXKtiLyYo9iN73VRhqI+x75T875OpAN+
iNkSpWIp0/lwUFP6Cvi8O8FpTdzVvsntMXRuaOzLrINyNIyiNJupiRvZjRPok+mU
ub+LDBCz/tafTRIFe7DyvBLI
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:17:40 2026 by rpki-client