Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft
File:                     -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft (raw, json)
Hash identifier:          ygPjEOw+yb/dD1ninGMlKzAGmNox7JK4F87UN33aXek=
Subject key identifier:   42:DD:E8:B0:C8:21:B8:1B:78:A3:55:70:D7:52:6A:BA:F8:AC:9B:12
Authority key identifier: FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68
Certificate issuer:       /CN=A91230B8/serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668
Certificate serial:       0273
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft
Manifest number:          026A
Signing time:             Fri 17 Apr 2026 01:56:32 +0000
Manifest this update:     Fri 17 Apr 2026 01:56:31 +0000
Manifest next update:     Fri 24 Apr 2026 01:56:31 +0000
Files and hashes:         1: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl (hash: +BENLAuxoE023rBkW2OfxKclO78DF9HlU5cIbU8HK90=)
                          2: B966D678C0C611EE8F5F0458C4F9AE02.roa (hash: BSe/xrmnbVtCYEoOzBEdpUE2pH3SuWmeYFTTZjAJbc8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl
                          rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 627 (0x273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91230B8, serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668
        Validity
            Not Before: Apr 17 01:56:31 2026 GMT
            Not After : Apr 24 01:56:31 2026 GMT
        Subject: CN=69e19350-7432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:31:1a:78:fa:be:d0:83:b0:a9:c1:20:02:a0:
                    c7:66:4e:7a:ca:e6:9a:13:aa:a3:e0:65:44:05:33:
                    b8:6b:63:4d:e3:40:c7:6d:4a:7b:a9:2d:ec:85:aa:
                    d4:29:35:8d:79:a7:38:64:5a:b9:10:1a:f8:ed:48:
                    07:f9:4b:5b:9e:c2:5c:44:c5:d7:61:7b:e9:06:84:
                    d3:62:d2:cb:2f:2d:7f:56:b8:2e:48:f4:40:58:84:
                    b6:57:db:14:2b:68:24:87:e8:f1:cf:f1:e8:ac:7b:
                    46:d8:3e:a1:76:34:af:b7:20:64:d9:ae:e9:d2:65:
                    c6:52:db:5d:16:fd:ea:b9:6d:52:86:fc:93:f1:8d:
                    ae:ea:0a:f4:ce:28:df:d7:7e:6e:e7:6e:f6:55:68:
                    bb:d5:d5:2c:b3:0f:b4:f2:e5:e0:9b:92:46:a3:9e:
                    b0:1d:16:8d:2c:40:49:ac:5a:db:43:57:24:a6:90:
                    36:9e:df:c5:9b:5c:e3:a0:27:a2:66:2b:9a:d8:26:
                    c4:7c:8f:8b:65:b7:70:23:b4:32:ba:ca:97:1e:f1:
                    cb:ac:33:20:79:9d:d1:c1:1b:31:a1:06:b7:d6:a3:
                    2f:00:72:40:db:e7:f3:08:94:2c:f7:7b:f9:8c:65:
                    64:0b:61:49:37:8a:c6:57:94:c2:d0:c1:62:1f:7c:
                    cd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DD:E8:B0:C8:21:B8:1B:78:A3:55:70:D7:52:6A:BA:F8:AC:9B:12
            X509v3 Authority Key Identifier:
                keyid:FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:18:c1:f4:e7:b1:56:37:62:aa:08:04:5e:69:e8:12:cc:2d:
         d8:97:0a:39:c9:e5:15:64:6e:eb:9b:f5:c3:15:0b:78:8e:78:
         0f:54:f4:bf:55:15:26:f4:74:d5:d0:05:9c:4e:6c:cb:d1:75:
         39:07:10:9c:2b:69:04:fb:0d:c6:b6:b5:49:5c:e4:51:f2:9f:
         c7:46:64:3f:5c:d3:5b:34:ad:7d:13:e9:f7:2a:b2:44:2a:78:
         ee:eb:7d:6d:17:b8:db:8c:0c:b1:96:f5:0c:0b:64:8e:ea:4c:
         a7:e5:f9:53:dd:3d:8c:8e:d8:d6:82:df:c8:21:c5:c3:f8:0b:
         b9:e4:1b:a3:e5:38:f0:37:1b:1b:e7:38:a5:ce:cf:cd:c6:ff:
         b9:7a:f8:68:65:50:00:41:66:99:45:da:8f:16:26:f3:4c:52:
         4f:e8:c3:fb:3e:d0:77:ca:25:a5:f4:bc:e5:38:23:25:bd:78:
         c9:ae:66:e1:2c:a4:6d:e8:de:4f:68:60:fd:ff:69:52:dc:ee:
         aa:45:b3:90:9b:2a:00:04:a0:d0:04:44:63:fd:b6:f9:5c:e0:
         ec:e7:ca:0c:2f:46:d5:d7:dd:70:de:ca:33:9e:7d:1a:92:e5:
         17:d3:92:4d:19:57:e3:75:36:72:cc:bb:c2:ac:c0:52:24:39:
         13:1c:9b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:47 2026 by rpki-client