Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft
File:                     7F7zNU5M1TSrhiW5m3MS1vTkixU.mft (raw, json)
Hash identifier:          wyS8YYKw7bERoYH2Ti0aR4VjnFmsr056BSrf8SL/hz8=
Subject key identifier:   65:E0:F9:44:B1:29:BC:87:D2:D2:EB:67:07:DA:D5:F1:D0:98:28:82
Authority key identifier: EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15
Certificate issuer:       /CN=A91EF175/serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15
Certificate serial:       0177
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft
Manifest number:          01DC
Signing time:             Sun 05 Apr 2026 04:10:18 +0000
Manifest this update:     Sun 05 Apr 2026 04:10:18 +0000
Manifest next update:     Sun 12 Apr 2026 04:10:18 +0000
Files and hashes:         1: 7F7zNU5M1TSrhiW5m3MS1vTkixU.crl (hash: dkTow/eTjwcoJpcJwWEIRxlgG8XryIcGzCp95T3TKqI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl
                          rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:10:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF175, serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15
        Validity
            Not Before: Apr  5 04:10:18 2026 GMT
            Not After : Apr 12 04:10:18 2026 GMT
        Subject: CN=69d1e0aa-6b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:86:a9:fe:c3:19:a6:08:6d:4a:12:8d:2d:c1:
                    9f:1d:91:2e:21:da:34:2d:a8:4e:29:4f:01:3f:c0:
                    ca:c7:5b:04:32:f8:8a:29:67:f6:53:1a:25:ce:8e:
                    0d:d2:61:fd:e6:c4:8f:a7:bc:46:3c:68:87:f9:b0:
                    27:0a:4a:4c:47:b4:1e:01:a7:f5:11:08:27:b3:ac:
                    89:ac:1c:00:95:73:fa:59:0f:c3:0a:2e:24:d3:0b:
                    86:97:15:0a:2a:54:be:10:98:c8:83:23:23:02:38:
                    71:5d:6b:96:e0:e8:1d:a3:a9:54:63:4f:ff:76:52:
                    30:3f:a4:9c:6b:a1:2b:45:52:c6:83:0f:ab:52:c3:
                    24:33:d5:cb:9d:44:1d:9d:4f:5a:17:29:11:96:de:
                    31:38:ff:66:3c:89:eb:57:a6:5f:bf:68:8e:20:b2:
                    a9:6e:db:28:9e:3b:6f:28:0c:46:a4:80:5c:0b:31:
                    05:78:10:fc:34:cb:a5:35:7a:92:e4:d0:9a:8f:fb:
                    49:9f:a6:29:85:7a:c6:20:1a:ff:85:e9:88:bf:e4:
                    f7:b5:53:2b:dd:02:4d:82:91:d1:a1:65:4f:df:26:
                    cc:20:a0:1a:33:e1:db:64:d0:48:5f:58:c0:7e:48:
                    53:46:38:72:1f:af:c5:18:c9:11:28:1c:65:94:94:
                    4e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E0:F9:44:B1:29:BC:87:D2:D2:EB:67:07:DA:D5:F1:D0:98:28:82
            X509v3 Authority Key Identifier:
                keyid:EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:72:b9:e6:39:a0:5a:88:99:0d:ec:5f:6c:c2:f9:29:2f:80:
         bf:19:e3:4e:cd:e6:fe:16:8d:4e:6a:b8:de:e4:38:18:16:9e:
         25:1d:c7:05:cf:f1:e4:10:df:39:0c:a7:00:0a:a6:b1:72:35:
         bb:35:b9:08:3c:f5:95:4a:41:75:92:72:ac:e0:96:f8:24:54:
         55:4f:91:67:52:cc:c0:69:ab:fb:e3:01:a4:b7:8f:7a:5e:8f:
         9f:e0:99:68:cf:2e:86:4f:15:57:e5:7f:44:82:ce:82:4e:8e:
         cb:a5:8c:ea:6c:9f:b3:f7:59:d9:37:9a:70:08:cd:78:c7:aa:
         ff:d8:a3:34:01:85:15:dd:8e:b4:66:a2:02:20:af:52:ac:91:
         0b:af:92:37:b1:ea:72:7f:12:24:16:cd:27:66:61:fb:04:aa:
         2e:a0:ad:23:a1:18:8a:83:95:80:4a:aa:bf:1b:8f:43:40:61:
         5e:ef:e1:a1:f3:17:20:54:a6:3c:0e:84:63:7c:fb:24:89:f8:
         36:50:f9:f2:7a:97:3f:5f:55:45:d3:1d:c2:65:b3:16:66:97:
         50:77:16:35:e9:d1:f3:66:68:22:03:9a:bd:26:78:d5:56:cc:
         4a:8d:42:52:80:1e:32:cb:1f:46:dd:d8:08:bf:f4:de:60:c5:
         d4:74:3e:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYxNzUxMTAvBgNVBAUTKEVDNUVGMzM1NEU0Q0Q1MzRBQjg2MjVCOTlCNzMxMkQ2
RjRFNDhCMTUwHhcNMjYwNDA1MDQxMDE4WhcNMjYwNDEyMDQxMDE4WjAYMRYwFAYD
VQQDEw02OWQxZTBhYS02YjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtoap/sMZpghtShKNLcGfHZEuIdo0LahOKU8BP8DKx1sEMviKKWf2Uxolzo4N
0mH95sSPp7xGPGiH+bAnCkpMR7QeAaf1EQgns6yJrBwAlXP6WQ/DCi4k0wuGlxUK
KlS+EJjIgyMjAjhxXWuW4Ogdo6lUY0//dlIwP6Sca6ErRVLGgw+rUsMkM9XLnUQd
nU9aFykRlt4xOP9mPInrV6Zfv2iOILKpbtsonjtvKAxGpIBcCzEFeBD8NMulNXqS
5NCaj/tJn6YphXrGIBr/hemIv+T3tVMr3QJNgpHRoWVP3ybMIKAaM+HbZNBIX1jA
fkhTRjhyH6/FGMkRKBxllJROZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGXg+USx
KbyH0tLrZwfa1fHQmCiCMB8GA1UdIwQYMBaAFOxe8zVOTNU0q4YluZtzEtb05IsV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3NS8wNDYwQUExOEZC
RkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFUU3JoaVc1bTNNUzF2VGtp
eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdGN3pOVTVNMVRTcmhpVzVtM01TMXZUa2l4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjE3NS8wNDYwQUExOEZCRkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFU
U3JoaVc1bTNNUzF2VGtpeFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHHK55jmgWoiZDexfbML5KS+AvxnjTs3m/haNTmq43uQ4GBaeJR3HBc/x5BDf
OQynAAqmsXI1uzW5CDz1lUpBdZJyrOCW+CRUVU+RZ1LMwGmr++MBpLePel6Pn+CZ
aM8uhk8VV+V/RILOgk6Oy6WM6myfs/dZ2TeacAjNeMeq/9ijNAGFFd2OtGaiAiCv
UqyRC6+SN7Hqcn8SJBbNJ2Zh+wSqLqCtI6EYioOVgEqqvxuPQ0BhXu/hofMXIFSm
PA6EY3z7JIn4NlD58nqXP19VRdMdwmWzFmaXUHcWNenR82ZoIgOavSZ41VbMSo1C
UoAeMssfRt3YCL/03mDF1HQ+DQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 10:08:36 2026 by rpki-client