Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
File:                     7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft (raw, json)
Hash identifier:          BwwKrHJXe8lA4UHE6oJpOKfHdoOO9oLsbfD5qqTDjwY=
Subject key identifier:   55:35:B7:43:5F:E8:22:D8:E7:2C:9A:DD:18:68:30:AE:7F:A9:E5:46
Authority key identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1
Certificate issuer:       /CN=A912B12A/serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
Manifest number:          0107
Signing time:             Fri 17 Apr 2026 05:48:47 +0000
Manifest this update:     Fri 17 Apr 2026 05:48:47 +0000
Manifest next update:     Fri 24 Apr 2026 05:48:47 +0000
Files and hashes:         1: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl (hash: X6Z7Op9TyeBTS4W5/VIDBIro6nFkhVYDgKIxZeBRQsY=)
                          2: C41B6A98396E11F1992DA1BA96833773.roa (hash: BPXuBuSemYn/E+9Uo6D+b9G7/Ig6Oc1u1YHeb89/AEQ=)
                          3: 246315A2AE5811EFAFE7FF84C4F9AE02.roa (hash: hENFINj2b9wOIFxjK3nr2DrkTGbz4MTQ9pqxVPQHBxY=)
                          4: 2346577EAE5811EFAFE7FF84C4F9AE02.roa (hash: 1MNrxKgQIdnkp7DGKWCKsge4/v205nBecHy5tmcmZDU=)
                          5: 23F9E186AE5811EFAFE7FF84C4F9AE02.roa (hash: WDWRrI/KRtPcAbR2bWOuMpgztLrYoQZ12yzCIYDgRAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl
                          rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B12A, serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
        Validity
            Not Before: Apr 17 05:48:47 2026 GMT
            Not After : Apr 24 05:48:47 2026 GMT
        Subject: CN=69e1c9bf-4e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:98:e7:a8:3f:16:80:33:41:3d:d3:0b:ca:
                    1d:2e:d5:aa:99:4e:99:68:8f:9d:ae:1d:a3:d0:52:
                    ce:e1:b3:fd:91:47:2b:a4:17:4d:27:c7:c9:1e:74:
                    6d:02:29:ea:ab:a0:0a:ee:be:bf:0e:a7:c7:59:21:
                    dc:56:fc:bd:45:bf:90:d4:b4:3f:ab:49:70:50:41:
                    90:31:a2:87:76:96:16:2a:a4:36:a5:02:ee:34:12:
                    33:62:6b:68:6d:db:3b:6d:84:1e:50:66:a8:42:3e:
                    14:78:24:d8:7d:0b:d2:e9:40:f6:d5:ba:7d:d9:62:
                    19:ef:f8:fc:c6:7d:79:7f:5f:16:91:bf:11:e3:3c:
                    5c:88:a7:8a:3d:69:2b:fc:e2:6b:3d:36:64:66:26:
                    29:f3:37:5f:7f:09:1a:84:1e:b4:b3:9d:98:c3:28:
                    a4:83:ce:d1:77:3a:e1:a1:21:6f:42:47:d2:0c:cc:
                    dc:a9:b0:03:73:7b:db:bc:72:79:cb:04:da:60:f1:
                    ea:46:49:76:59:98:cc:40:fd:21:47:01:cc:13:48:
                    46:90:d3:21:8e:38:13:ca:6a:b9:25:8a:2a:c8:17:
                    99:00:01:a6:fc:81:74:bf:22:69:19:08:d0:d5:2f:
                    b9:81:2d:96:a9:3c:25:43:f7:d2:13:33:a4:b3:78:
                    d5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:35:B7:43:5F:E8:22:D8:E7:2C:9A:DD:18:68:30:AE:7F:A9:E5:46
            X509v3 Authority Key Identifier:
                keyid:EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:01:99:c7:d6:18:a1:7b:93:67:6a:ce:06:8f:87:19:04:f2:
         83:81:39:50:fb:ef:05:1e:aa:1d:38:a8:3b:15:54:25:f8:85:
         6c:a2:fb:d5:3f:f8:3e:16:74:ff:6f:86:1b:e7:98:40:ec:f2:
         42:75:d9:00:f1:c0:6c:c2:e7:05:36:dd:94:ae:79:d4:d4:28:
         8f:84:17:ea:ec:a8:5b:0a:4c:94:81:41:82:95:dd:d3:0b:74:
         18:e5:2d:d5:64:ee:c7:83:0d:ef:15:70:01:00:71:42:ff:28:
         33:85:79:c4:0e:4b:69:97:29:8c:27:22:85:83:c4:25:24:96:
         f0:3b:98:4d:c5:d0:3b:7c:26:d4:3e:b8:86:bf:fa:1d:87:fa:
         fd:fa:b1:2e:b2:4f:18:8a:c4:88:d1:27:32:67:a8:fe:65:44:
         21:5a:14:05:1c:8b:e1:d0:08:4d:87:f8:15:db:d3:af:98:a2:
         b9:fd:5f:b4:8a:4e:0e:4a:32:18:ff:0f:29:b1:ac:53:35:39:
         53:82:1e:41:98:d9:c5:07:bd:53:1f:d9:7f:5f:44:09:99:37:
         19:20:ba:8a:bf:bd:a8:23:b5:ec:0c:41:4a:df:ad:9f:7d:37:
         96:75:d7:fc:32:b8:1e:d1:4c:c3:68:76:da:a7:d9:13:99:64:
         0f:7b:51:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:15:53 2026 by rpki-client