Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
File:                     Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft (raw, json)
Hash identifier:          pBoAk6ZTSo9tRxb2G2Kn3uX58E56MzaxsmHI4tXQXWY=
Subject key identifier:   0E:8B:12:36:0A:07:28:92:C5:59:A2:C0:61:D2:A2:DE:D3:09:4D:DA
Authority key identifier: 0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E
Certificate issuer:       /CN=A91F0C45/serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
Manifest number:          7E
Signing time:             Fri 17 Apr 2026 07:29:08 +0000
Manifest this update:     Fri 17 Apr 2026 07:29:07 +0000
Manifest next update:     Fri 24 Apr 2026 07:29:07 +0000
Files and hashes:         1: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl (hash: STivRpvqVRPv6rDKVYDYhWgoxs6azsIE7yYTIbqrlQg=)
                          2: 8A80B8D69A1011F0AC6E9127C4F9AE02.roa (hash: Dpuua3C8HF/TzJDPbTHc748WAwDZUWGv1xbXjI6Ri+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl
                          rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0C45, serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E
        Validity
            Not Before: Apr 17 07:29:07 2026 GMT
            Not After : Apr 24 07:29:07 2026 GMT
        Subject: CN=69e1e144-208c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:d9:01:05:be:64:97:73:1d:66:31:5c:4c:
                    27:97:08:dc:76:55:88:51:7b:2a:b6:55:87:85:05:
                    34:ed:6f:85:6f:1c:59:ca:ca:36:ae:a8:6d:2c:a9:
                    d3:23:b3:82:f5:29:71:a1:bb:20:cc:7c:64:22:c0:
                    25:c9:13:66:ed:e5:60:10:1e:dd:a9:b7:53:c4:64:
                    d1:57:79:32:8b:34:71:c8:f8:3c:9a:f2:eb:ba:b9:
                    1d:c8:e5:d7:f9:ea:da:16:0c:6f:d8:71:ae:66:3e:
                    9a:fb:69:f7:41:4c:53:a4:68:52:86:5c:6d:4d:13:
                    2d:b9:b6:78:2c:c2:35:25:81:58:00:bc:68:e4:62:
                    b4:03:7d:af:02:e8:b1:28:fe:6b:e1:6a:da:ff:79:
                    d8:4f:a4:d0:77:80:48:c8:53:9b:3b:6d:81:20:b5:
                    a9:39:a9:4e:b6:21:65:3c:7e:45:33:bd:91:dc:2d:
                    75:05:c0:d2:ea:20:b7:62:f7:9f:96:0e:89:95:3a:
                    10:e7:16:98:06:4b:18:56:85:1a:73:9e:be:97:c7:
                    d9:eb:c5:44:30:dc:62:a8:a9:da:18:75:25:bb:bd:
                    fa:e9:40:5f:4b:33:f3:cc:a9:20:9e:66:53:94:5d:
                    0a:47:72:c0:0c:06:5a:75:4d:24:90:13:c3:53:21:
                    32:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8B:12:36:0A:07:28:92:C5:59:A2:C0:61:D2:A2:DE:D3:09:4D:DA
            X509v3 Authority Key Identifier:
                keyid:0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:97:56:15:45:04:a4:26:c8:32:ad:48:a2:90:32:c3:c1:10:
         4a:46:59:8b:49:1a:b4:10:86:c2:7e:d1:6d:fa:51:0a:c7:87:
         cc:79:36:98:c2:3d:52:c4:1f:0e:69:e6:b3:2e:2a:97:6a:25:
         f1:3a:5a:20:a0:53:09:dd:b2:d1:01:a7:a9:d9:60:60:c5:bc:
         91:69:47:6a:e1:30:b5:ae:91:f1:1e:eb:8b:51:c3:eb:da:52:
         14:e3:50:98:19:fa:1d:cd:1a:34:7e:01:5c:7f:0c:ec:f3:c4:
         bd:5d:8f:fd:1e:43:77:01:f6:24:ba:ff:d8:65:16:6f:33:33:
         76:ea:1d:58:4c:5a:3c:cb:02:9a:72:87:1c:79:28:64:16:a0:
         f2:5f:65:d0:c0:59:89:d2:26:ac:ae:5c:7a:2a:91:de:21:82:
         4f:40:00:12:07:ea:3b:98:81:2c:23:9e:95:05:a6:10:a8:c1:
         05:8b:d2:43:da:7d:5f:ac:c1:bd:a0:99:b9:d3:16:c7:a1:56:
         13:7e:9c:47:b1:45:7b:2c:3a:1b:f1:83:2f:25:a2:64:02:70:
         8a:98:e7:aa:c7:9b:93:92:27:e9:68:a3:d4:65:e4:4f:73:31:
         bc:9a:cb:51:e9:b5:44:46:10:72:12:61:ab:14:bc:e9:f9:f8:
         ba:c5:8c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:02:57 2026 by rpki-client