Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
File:                     78F7DRESbH-pQb1NDsp6o56TRqA.mft (raw, json)
Hash identifier:          7XH5jf2txezapc1RhMmjOnjSUq4e8qOjBld8UPZ4xNg=
Subject key identifier:   F8:BC:49:42:7D:FC:47:98:0A:DD:DF:81:EE:35:26:D6:09:70:B0:8C
Authority key identifier: EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0
Certificate issuer:       /CN=A914B0CF/serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
Manifest number:          0161
Signing time:             Fri 17 Apr 2026 04:35:58 +0000
Manifest this update:     Fri 17 Apr 2026 04:35:58 +0000
Manifest next update:     Fri 24 Apr 2026 04:35:58 +0000
Files and hashes:         1: 78F7DRESbH-pQb1NDsp6o56TRqA.crl (hash: DQdGszOXx0DfyXcz2bGD8vH8fX97hZlddB4/CASLtUU=)
                          2: 20BCACE21F1A11EFB1CD4814C4F9AE02.roa (hash: pCBDSY/5hIjT1Z07yVjRD8C3EOR5A+vR6s3eWtHwcNQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl
                          rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B0CF, serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
        Validity
            Not Before: Apr 17 04:35:58 2026 GMT
            Not After : Apr 24 04:35:58 2026 GMT
        Subject: CN=69e1b8ae-f0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:58:f1:f2:f3:e4:a6:bc:24:1d:95:58:d9:4b:
                    55:02:49:4c:51:b0:69:00:4b:5a:e9:45:f8:ce:d2:
                    9c:d0:a3:a7:54:82:f9:9a:e5:27:ac:66:23:d0:97:
                    fe:80:ce:34:2a:73:7f:85:57:3f:c3:9e:34:76:75:
                    71:4a:02:80:0d:01:f6:07:16:08:de:c5:e4:67:45:
                    73:fa:ba:a5:1d:3f:36:22:d1:0f:e6:8c:47:26:c4:
                    33:32:d1:86:b2:4b:89:90:f4:4a:d0:e4:f8:34:34:
                    68:b3:42:9b:f2:58:da:c0:c5:fd:cc:8a:36:9e:22:
                    cc:bc:f4:44:0f:03:df:a8:be:5b:3b:9f:0c:75:3c:
                    e7:cb:15:ce:46:dd:35:84:46:c5:c6:66:e8:42:b0:
                    2c:b9:28:02:59:b9:78:9e:8b:0f:a8:87:e9:a7:62:
                    c8:67:f0:7a:fb:ad:68:ff:d3:2b:da:21:a5:c3:ff:
                    af:60:3c:a7:d0:81:0c:78:1d:06:b5:c1:ad:62:6d:
                    51:33:e0:5c:63:dd:cb:ae:35:e1:aa:70:de:3b:91:
                    75:6b:f6:b9:7d:42:3a:d2:91:68:09:83:03:87:ad:
                    e4:d9:e9:81:75:53:fd:8d:18:87:22:61:7d:0b:7b:
                    91:28:bc:c8:df:94:23:ce:5e:65:03:88:94:a8:3c:
                    8f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BC:49:42:7D:FC:47:98:0A:DD:DF:81:EE:35:26:D6:09:70:B0:8C
            X509v3 Authority Key Identifier:
                keyid:EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c0:c8:12:b0:8c:e4:f4:ee:85:ca:8f:6f:0a:4f:89:e1:9b:
         01:17:a3:65:48:6a:94:86:1e:5b:98:ef:5b:6d:69:b4:13:db:
         73:3b:0e:c4:1e:b0:10:47:64:11:40:52:03:7d:88:cf:f7:46:
         46:e5:93:2a:c0:49:92:f9:dd:0b:f2:dc:0c:3a:ea:71:ae:3b:
         5e:62:40:de:d7:ee:ea:0d:11:4b:2b:ed:cf:54:33:1a:8b:44:
         cc:19:ba:dc:7c:99:35:1e:9e:3a:56:a8:60:66:3e:a6:02:9a:
         55:da:08:b3:4f:15:7f:e6:a8:37:46:65:41:98:14:34:b1:25:
         51:23:4e:56:be:51:84:55:c0:e0:cb:f1:28:c3:19:9a:a1:50:
         a1:13:8a:02:75:7a:db:d3:58:aa:6e:e4:81:da:68:d8:5b:80:
         30:b8:cb:3a:ed:0a:2d:af:5f:ef:24:92:f8:a3:d6:54:1f:04:
         1c:5d:cd:0c:5b:4d:9e:06:ce:82:0b:b3:39:7c:51:24:73:2e:
         a1:2f:7d:c3:69:5a:48:54:8f:6e:6e:06:a6:08:a3:3b:7b:11:
         30:55:45:25:36:f7:1a:0b:58:0c:f5:d1:e7:01:07:1b:a3:6b:
         e6:1c:be:38:b4:80:b2:81:df:4a:45:ce:df:87:84:86:ab:b9:
         94:9b:53:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:08 2026 by rpki-client