Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
File:                     iR7Yuqwsc70TrcqhoWqvANIkqHc.mft (raw, json)
Hash identifier:          vAzE9t51Vp+OZeVBpxIdIG3d55v4aTKj3n4k2rMUfIA=
Subject key identifier:   53:AD:08:32:8D:A1:91:98:86:C7:46:08:4C:5C:9B:63:07:F9:00:1E
Authority key identifier: 89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77
Certificate issuer:       /CN=A91394E7/serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
Manifest number:          010D
Signing time:             Sun 19 Apr 2026 05:43:22 +0000
Manifest this update:     Sun 19 Apr 2026 05:43:22 +0000
Manifest next update:     Sun 26 Apr 2026 05:43:22 +0000
Files and hashes:         1: iR7Yuqwsc70TrcqhoWqvANIkqHc.crl (hash: QpmzskcDuEvBuBB8dfYMsBN5ttaCiKe0VOszeqqYWSo=)
                          2: F7078BC4B73511EF8537DE81C4F9AE02.roa (hash: dcnfcfiViSeBV+zFTXFLZ3LN0enm0ZKeSScFAnyxpAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.crl
                          rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91394E7, serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877
        Validity
            Not Before: Apr 19 05:43:22 2026 GMT
            Not After : Apr 26 05:43:22 2026 GMT
        Subject: CN=69e46b7a-0748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:ef:2a:31:94:5b:e4:43:f2:6b:13:88:5c:
                    84:19:9f:58:24:c8:53:cd:84:04:09:12:7e:77:09:
                    f7:47:54:ab:6d:6e:da:df:24:b7:3b:3b:bb:b9:a7:
                    1a:73:42:fd:50:8d:59:c5:15:59:c7:49:3e:32:1e:
                    6a:90:35:eb:51:1c:ba:72:ad:97:00:ac:88:14:fa:
                    8c:16:70:8a:33:66:ae:7f:79:f6:10:64:93:5d:d3:
                    70:66:87:3d:04:7f:b2:56:b5:cf:d2:4a:7a:19:ec:
                    20:37:2f:4f:3f:8f:fb:58:8a:9e:1e:3d:f2:60:e3:
                    c9:1c:c8:48:61:35:4b:9f:28:63:c3:85:e8:a0:6b:
                    ff:a4:14:22:04:3d:cb:dc:9b:c5:57:50:9c:39:c2:
                    06:7d:28:aa:7f:08:e2:ca:09:2a:dc:8b:38:d0:75:
                    98:0b:90:37:01:6c:6d:3a:3a:56:40:d3:b9:45:f1:
                    f7:3f:04:b2:86:3c:7d:54:07:9d:07:5f:8e:9d:5c:
                    1a:a6:b2:a9:ad:d8:64:03:86:3f:de:c6:15:63:29:
                    04:08:d0:78:ca:f6:f0:7e:c3:9e:f2:b1:76:03:e2:
                    68:d7:95:e0:f2:bf:a9:5c:b0:91:62:b7:ae:57:c1:
                    59:76:52:14:ce:8a:1e:cd:c7:af:07:e3:94:5e:a4:
                    c5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AD:08:32:8D:A1:91:98:86:C7:46:08:4C:5C:9B:63:07:F9:00:1E
            X509v3 Authority Key Identifier:
                keyid:89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ef:5d:93:bf:d4:81:65:f1:2a:80:8b:31:1a:46:78:47:38:
         1b:23:71:04:b5:92:1d:c2:16:d0:a9:4f:7c:e2:e5:3c:e7:04:
         4b:3c:ff:f8:73:2c:2d:d2:04:69:71:30:02:2f:2e:59:42:fe:
         50:4f:27:7f:2d:25:4c:1e:ff:5e:bf:2d:7b:45:ab:71:d3:f9:
         07:85:44:cf:69:c5:0a:bc:e0:c4:51:02:68:ed:6a:2d:26:2a:
         e8:ee:52:e0:f5:e7:d9:32:75:4f:df:cc:a0:31:33:be:cb:fe:
         bd:51:21:9e:5d:51:14:f4:cc:5c:67:36:fd:4b:b4:3f:c0:ee:
         8d:5f:58:4b:0e:f2:92:7d:b9:52:3f:0a:e8:1a:a9:04:35:5b:
         7f:e4:cf:21:49:a8:d9:9b:5c:6c:0a:68:df:ef:33:b9:5d:70:
         26:39:33:35:3f:ff:7f:13:26:c1:a2:45:6b:e3:0c:ca:2a:89:
         a3:f9:a4:77:2d:63:19:7c:f3:70:f6:70:c5:34:f9:44:be:e8:
         a0:cc:2d:34:b5:43:ca:49:1e:ff:35:49:4e:c0:50:7d:47:1e:
         e6:3a:eb:f9:b2:b3:df:64:78:c5:cf:b3:4c:4a:05:b6:cc:3a:
         21:29:ea:40:42:6f:23:d2:63:1f:39:b8:35:66:ae:91:4b:c5:
         99:cb:ed:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:04 2026 by rpki-client