Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
File:                     0NbEemjLQdEG6wQtcma5y7_Bpzs.mft (raw, json)
Hash identifier:          fs4wIByHnb9F0x/waMaf2RX+TBzJxWTxCif74piOg1g=
Subject key identifier:   F2:BE:6F:78:AB:E0:93:EC:2C:B3:02:6E:AE:8E:7B:8E:E1:D6:2A:1B
Authority key identifier: D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B
Certificate issuer:       /CN=A91EBF76/serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B
Certificate serial:       0702
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
Manifest number:          06FA
Signing time:             Sat 04 Apr 2026 21:49:09 +0000
Manifest this update:     Sat 04 Apr 2026 21:49:09 +0000
Manifest next update:     Sat 11 Apr 2026 21:49:09 +0000
Files and hashes:         1: 0NbEemjLQdEG6wQtcma5y7_Bpzs.crl (hash: VOz9ZszqPose1geBG6KxVucukmEWsgGxtSoFsmMk90Y=)
                          2: 5FBDA400853011EBA1AF1D76C4F9AE02.roa (hash: 2cGQ0cYN6rxm/5CfWmmTTZtEMPdc416gyQEzwHIqQ5k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl
                          rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1794 (0x702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBF76, serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B
        Validity
            Not Before: Apr  4 21:49:09 2026 GMT
            Not After : Apr 11 21:49:09 2026 GMT
        Subject: CN=69d18755-8832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0f:e0:be:94:37:34:1e:dd:d2:b8:0c:50:c5:
                    44:c7:d5:23:7f:3f:fd:51:bf:47:c9:fd:c5:13:4e:
                    f7:ee:76:4a:e5:a5:30:51:c3:91:dc:f7:3e:1b:30:
                    68:18:7a:9d:d3:50:15:c3:81:e1:84:d7:c6:dc:07:
                    66:64:4b:3a:1a:f0:21:aa:62:ae:6a:0d:f7:b0:1c:
                    7f:d5:2b:c1:c0:a3:92:36:6e:fd:31:e1:47:0f:b3:
                    b6:8a:08:8c:da:9e:dc:f7:f1:9f:0a:48:cb:8e:34:
                    fb:87:7c:78:e0:b0:a5:ca:93:f4:c0:97:4d:be:eb:
                    4f:a0:bd:5c:89:3d:f4:fc:aa:69:4a:ef:ff:73:b1:
                    6d:40:b4:9d:fe:00:8f:b2:21:c2:c2:31:bd:de:e0:
                    fe:0a:75:d6:87:5f:a9:14:51:b6:18:84:e0:65:53:
                    e9:9b:82:b1:41:53:07:49:ef:76:ae:f6:97:07:62:
                    67:98:b5:25:66:90:80:77:9a:1a:55:ac:44:2c:cd:
                    59:7e:26:8b:66:2d:fb:28:2d:16:26:e8:3a:64:c1:
                    54:ac:9b:7e:3f:a4:bc:b0:01:4f:07:f0:58:26:3c:
                    76:4f:64:f6:ef:d4:51:92:1e:8a:32:1a:c7:f5:f9:
                    96:e8:08:82:4c:24:49:34:e8:72:c5:aa:4a:9d:73:
                    06:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BE:6F:78:AB:E0:93:EC:2C:B3:02:6E:AE:8E:7B:8E:E1:D6:2A:1B
            X509v3 Authority Key Identifier:
                keyid:D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:b0:1a:b5:eb:5d:a1:e2:1b:f8:48:12:b1:1a:f8:9d:f6:d1:
         e3:31:0f:8a:be:19:e4:3a:ab:72:bc:d7:85:3d:6f:b4:27:53:
         a0:17:77:38:6b:14:10:56:69:04:9d:76:c6:93:56:88:a0:c9:
         62:70:0a:39:8c:1b:4d:c2:8b:2d:af:b9:32:43:ee:5e:8d:94:
         fd:c2:27:f3:36:59:0b:cf:43:f9:97:78:71:58:c7:35:31:de:
         6b:b9:7a:71:ba:40:42:83:44:8b:d0:b5:7c:06:53:c7:dc:89:
         cf:50:cf:d8:ec:11:8e:97:2d:91:20:96:87:6e:cf:51:1c:1a:
         bc:75:a8:31:f2:55:bc:14:1b:84:28:fd:65:dc:b1:30:b5:f8:
         8a:34:b2:9b:a9:16:df:6d:1a:5c:d8:21:0e:41:10:d2:a5:1e:
         54:e1:0e:b4:4a:d0:f7:22:ee:83:3f:1c:4c:fb:93:e9:2e:e3:
         1c:95:ec:9e:f9:17:00:e0:8e:ed:a4:f4:0a:6e:16:e4:ce:84:
         f2:7b:c7:d3:6e:5b:b9:2e:dc:da:94:f0:57:44:50:7f:f8:6c:
         48:70:26:9b:42:07:f6:80:4c:a3:46:d6:49:22:66:3e:dd:d0:
         58:62:5e:cb:f1:2b:a1:13:6a:6e:0c:60:7c:78:1f:1c:2d:cd:
         97:04:a0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:53:47 2026 by rpki-client