Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
File:                     07chXhZgoZ79Lncvm6envcbuDSg.mft (raw, json)
Hash identifier:          ckdD31pK6//p3SMcNOBusija1QPY+gbjyt+fi9jTW+s=
Subject key identifier:   D8:3A:C0:CC:8C:17:91:1B:43:1B:BE:14:67:70:BA:B7:B4:F4:86:EC
Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28
Certificate issuer:       /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28
Certificate serial:       09E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
Manifest number:          09C2
Signing time:             Thu 16 Apr 2026 19:53:39 +0000
Manifest this update:     Thu 16 Apr 2026 19:53:39 +0000
Manifest next update:     Thu 23 Apr 2026 19:53:39 +0000
Files and hashes:         1: 07chXhZgoZ79Lncvm6envcbuDSg.crl (hash: 9JynZFTk9DvsVNsuK6Z4ov6kTj8ZxomzDwLjJzFbe7I=)
                          2: 359388D8006511F1AA0FA34B566F56BC.roa (hash: ZOtwRxhmupTieRo9qgJrLBkzO+gTqGzLiKJz701clvc=)
                          3: 0A72D294006511F1BE07F947566F56BC.roa (hash: E/Iz9/9M4AyqWvgd1aB5MPhf6Qtoegq5pv3fO35/BF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl
                          rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:53:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2532 (0x9e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BBC9, serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28
        Validity
            Not Before: Apr 16 19:53:39 2026 GMT
            Not After : Apr 23 19:53:39 2026 GMT
        Subject: CN=69e13e43-42c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2a:c1:a9:86:6d:e8:09:ac:0a:f7:af:f1:1c:
                    47:90:1d:9f:ae:be:6f:92:43:d8:15:63:9c:78:b8:
                    55:27:4f:61:42:b3:4d:ea:de:28:5e:8e:9c:df:04:
                    b3:81:c1:c8:1f:98:ee:5f:c6:9b:75:5d:4f:b5:91:
                    c7:34:c6:3f:d8:c9:01:d3:25:cd:8f:c0:e8:e5:65:
                    85:b1:73:3a:be:61:20:96:2b:22:fa:8f:94:7f:16:
                    f6:25:26:ec:e8:7c:3b:55:49:c8:eb:5f:2d:9c:b3:
                    ff:7d:73:65:0c:50:74:fd:08:dd:72:88:fd:6e:fa:
                    31:31:22:b8:98:7d:68:28:57:00:d5:ee:f2:b5:19:
                    59:4c:76:16:05:3a:68:e1:4f:a6:b9:f6:48:85:93:
                    bd:6c:70:d7:6f:0d:50:73:0f:c4:db:a2:08:1e:76:
                    c2:f8:bd:81:f1:18:7e:3c:18:9f:13:ce:e6:48:60:
                    23:47:87:cb:9f:74:9e:20:88:d9:c8:a7:7e:97:46:
                    e0:60:52:41:2b:28:48:7e:44:27:35:c6:a1:6b:fb:
                    4d:8c:3d:5d:21:f3:b7:45:e3:27:8a:c6:fd:9d:18:
                    c3:14:7f:f2:ab:93:09:7a:78:e0:70:34:03:9d:4f:
                    1a:3f:0a:ef:c2:c6:4f:13:af:93:64:08:28:0d:93:
                    4f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3A:C0:CC:8C:17:91:1B:43:1B:BE:14:67:70:BA:B7:B4:F4:86:EC
            X509v3 Authority Key Identifier:
                keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:36:ff:e7:68:8f:31:14:44:f2:23:9d:7b:d3:4c:f5:1f:51:
         b1:91:eb:32:12:38:d8:25:05:bb:fc:d5:e2:23:65:1b:9f:9b:
         18:db:38:69:91:89:b4:2a:f5:0a:ff:dc:91:6c:af:2a:73:dd:
         b3:7d:e8:e4:28:dd:b8:f2:0b:65:a4:64:4a:57:ab:e3:62:4f:
         f5:76:9d:1d:6c:d8:f8:93:f1:be:30:5d:96:b5:bf:21:45:f8:
         f1:bc:37:c8:8f:63:0e:f2:58:83:e6:c0:a2:45:c4:a9:60:b1:
         44:15:43:fc:be:0c:70:c6:c2:e1:74:21:13:42:e7:01:d0:b4:
         2e:20:4b:5a:b0:e1:5d:d5:5c:b9:a8:bf:2f:43:4c:72:88:06:
         be:2d:27:4a:30:77:65:89:0b:38:29:38:9c:30:75:4a:5f:ab:
         f3:88:17:55:5f:c8:7a:bf:19:d9:71:02:cb:7f:0f:42:ae:9e:
         e2:20:b9:49:d7:5f:b2:82:1c:74:d1:14:e6:69:bb:0d:c7:58:
         31:21:15:d1:75:29:be:6d:87:ab:a7:01:2d:b0:6c:61:92:b2:
         ed:b2:3a:32:e0:78:9c:a6:49:f5:ca:2f:6f:4e:41:35:d7:1b:
         6e:3a:ae:2d:88:55:4f:02:20:71:ad:1b:68:c6:e4:68:67:71:
         97:23:07:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:05 2026 by rpki-client