Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
File:                     rroZtvzB0hrnExdw57HaPhR17JA.mft (raw, json)
Hash identifier:          Idq1TE4JrGBKGAbhzSL2S2uFLCNmy/ZdieJ26RWynKQ=
Subject key identifier:   2F:45:5B:B3:58:30:F1:84:2E:A1:A8:5E:92:B2:0F:45:93:52:29:8A
Authority key identifier: AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90
Certificate issuer:       /CN=A91FE7DB/serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90
Certificate serial:       0BCA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
Manifest number:          0BC0
Signing time:             Sat 04 Apr 2026 18:47:11 +0000
Manifest this update:     Sat 04 Apr 2026 18:47:11 +0000
Manifest next update:     Sat 11 Apr 2026 18:47:11 +0000
Files and hashes:         1: rroZtvzB0hrnExdw57HaPhR17JA.crl (hash: 48u0P21S9QG0JZDeMJVOzJOS5zWtMTL1cOlEFAlGn2w=)
                          2: 078AE946642A11EAA019224CC4F9AE02.roa (hash: 31whv5fvX3GHhn8oNBBfKndDfzOhLiKe+vMmbXanShU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl
                          rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3018 (0xbca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE7DB, serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90
        Validity
            Not Before: Apr  4 18:47:11 2026 GMT
            Not After : Apr 11 18:47:11 2026 GMT
        Subject: CN=69d15caf-74e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5e:0f:ec:8e:e6:f0:0f:a8:e0:bc:9d:47:ce:
                    2d:b5:a8:d8:0e:bd:7e:a2:8b:70:08:05:8b:2c:b3:
                    89:bc:08:22:49:ae:f8:5a:0d:81:78:a0:17:e6:2f:
                    e4:96:15:22:20:a0:93:11:1f:59:1e:2f:bf:6e:9e:
                    0d:b0:7a:a1:19:da:96:8d:37:24:a9:4c:4f:1d:10:
                    40:0f:0b:93:e6:ae:7c:7b:43:8e:fa:57:97:02:e5:
                    49:7f:e3:fd:4e:1d:65:df:3b:19:cd:aa:74:b4:69:
                    c0:59:93:d5:ae:13:ca:10:c7:82:28:d6:c2:9a:a8:
                    23:2f:38:ac:de:61:3b:bf:1b:f4:28:f5:ea:d3:f0:
                    c5:3f:c7:f5:4b:5b:08:f0:48:83:b0:dd:1a:e2:61:
                    2f:68:82:51:13:06:2a:3e:b3:95:98:cd:49:ee:c3:
                    2a:6c:5e:e0:48:d1:51:43:f4:bc:cd:4e:1b:47:60:
                    a5:38:7f:d5:9a:28:a6:4d:2e:fe:5a:aa:14:59:3d:
                    16:cb:1a:3b:96:7e:7e:ff:15:ed:f5:8a:7e:6c:2a:
                    ea:66:a0:4c:1e:34:ca:b8:9e:a6:fb:2e:b1:ca:31:
                    cf:b7:4a:59:c8:e9:46:b9:b0:03:b3:55:9f:61:f3:
                    89:09:e1:d7:cf:56:3e:13:4f:34:f6:35:e5:3a:c5:
                    23:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:45:5B:B3:58:30:F1:84:2E:A1:A8:5E:92:B2:0F:45:93:52:29:8A
            X509v3 Authority Key Identifier:
                keyid:AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:14:97:0f:c7:20:e5:35:4d:26:9e:1b:46:1f:85:de:20:46:
         fd:a9:23:c3:84:72:5e:da:4c:25:80:3c:78:c9:64:cf:7f:49:
         c7:da:ad:e7:7c:69:f4:99:4f:2e:52:0e:39:8e:94:0c:ef:2e:
         25:08:3d:84:30:7b:2b:7c:c8:4f:aa:69:a2:59:d9:26:55:aa:
         a5:4f:b0:ef:b0:f0:94:53:ef:ed:69:f7:64:e7:33:fc:52:17:
         c0:53:02:57:92:2f:e7:67:be:70:1d:15:74:e6:25:67:d4:93:
         e8:6d:9b:a2:8f:c2:5d:69:41:03:53:d1:b6:73:ae:ea:e4:6f:
         24:69:59:0c:da:c1:de:a5:b4:6b:61:36:d8:97:0a:79:0a:ae:
         2a:09:83:00:2d:b7:a2:78:58:c3:63:51:63:0d:29:d4:99:50:
         dd:48:ed:54:e1:de:74:a9:74:c4:c1:1c:89:3f:e4:ed:2d:ac:
         a1:fb:54:16:14:12:ce:8e:95:ec:9d:10:61:8a:0b:2e:43:7b:
         ba:c3:8a:ba:c2:8d:5f:5a:53:9c:70:30:7d:92:4c:47:20:ae:
         e8:c9:9a:32:02:7e:e1:39:d4:4d:d0:9c:83:44:65:4c:07:31:
         ce:c1:14:58:46:f5:83:0d:a6:60:8c:a6:7a:97:9c:79:98:36:
         42:97:6a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:20 2026 by rpki-client