Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
File:                     7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft (raw, json)
Hash identifier:          VKVinf5chpN4A8hq9ynnhpifrHoOh2ISE4raEQhCGOE=
Subject key identifier:   43:CE:C1:5B:40:86:8E:3C:65:5D:59:FA:E0:41:64:A4:1D:FF:66:1C
Authority key identifier: ED:23:A8:E8:9E:56:BC:BD:A1:C0:0E:49:7C:48:83:D7:95:E5:2D:54
Certificate issuer:       /CN=A91652B5/serialNumber=ED23A8E89E56BCBDA1C00E497C4883D795E52D54
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
Manifest number:          50
Signing time:             Fri 17 Apr 2026 07:56:16 +0000
Manifest this update:     Fri 17 Apr 2026 07:56:15 +0000
Manifest next update:     Fri 24 Apr 2026 07:56:15 +0000
Files and hashes:         1: 7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl (hash: Z0ZeRhDOAG9QAcRpB2qYNPaSbL8Yl6rmO0TTH6c8Pfw=)
                          2: 53D55B1CD1AF11F0AD05C10CC4F9AE02.roa (hash: m0+z5eRLT8pv0TnouBrk5fUb2HbYM2GEY2LCpA+SYWw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl
                          rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91652B5, serialNumber=ED23A8E89E56BCBDA1C00E497C4883D795E52D54
        Validity
            Not Before: Apr 17 07:56:15 2026 GMT
            Not After : Apr 24 07:56:15 2026 GMT
        Subject: CN=69e1e7a0-ad54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b6:fa:81:c9:c9:fa:d0:e4:5a:ad:a0:07:ff:
                    dd:38:ad:30:a2:f1:b3:71:e6:e5:d8:f8:64:59:47:
                    2a:8c:26:32:57:69:6f:60:d5:09:29:9c:d4:08:00:
                    f0:9f:4d:22:08:61:2e:91:28:59:9f:b0:7a:78:a0:
                    23:4c:c3:74:f9:72:62:65:e1:ca:b7:7a:85:41:a8:
                    22:78:08:77:ab:37:4d:9d:af:40:d3:4d:da:92:5a:
                    0c:37:46:65:e6:05:39:df:95:1e:c3:b0:73:a9:e3:
                    76:d8:ee:ae:45:12:c5:96:bb:e2:3f:d9:82:26:1c:
                    4e:8f:95:53:c4:dd:fa:65:a0:16:11:3e:fa:ea:45:
                    43:4b:18:a8:19:b6:ae:96:f6:55:fe:16:0a:64:cf:
                    18:53:4d:1c:76:35:e9:eb:78:07:74:53:1f:19:a7:
                    e6:a7:92:24:36:f2:1b:58:02:c1:53:d8:87:49:bd:
                    c2:f6:86:89:e0:63:f0:ed:66:f2:bf:81:95:4a:42:
                    c5:c0:bc:f7:ec:47:6d:be:6e:48:aa:df:65:32:8f:
                    62:b2:f9:65:41:66:0e:df:fc:c2:6b:df:4b:bb:fa:
                    c9:46:cf:3a:d7:f2:cc:db:a6:16:b0:02:15:dd:87:
                    a7:97:31:f7:ae:3d:8e:08:0b:ee:20:e1:72:7f:fc:
                    a4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CE:C1:5B:40:86:8E:3C:65:5D:59:FA:E0:41:64:A4:1D:FF:66:1C
            X509v3 Authority Key Identifier:
                keyid:ED:23:A8:E8:9E:56:BC:BD:A1:C0:0E:49:7C:48:83:D7:95:E5:2D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:40:52:f7:f0:1f:69:45:c2:9d:c0:a6:3e:48:1c:e3:55:46:
         30:92:73:88:18:94:57:b4:88:d9:a1:6a:dd:53:0b:6e:3f:62:
         08:ce:59:3c:65:a5:76:ad:26:4a:bb:9b:9c:3b:0c:5a:d0:29:
         71:0f:6f:ec:43:ee:09:a1:66:85:66:17:b6:94:61:91:95:e6:
         76:5c:5b:63:65:a3:57:da:98:ce:61:f2:37:cc:85:74:1e:3d:
         08:73:36:f2:91:b5:21:39:ae:31:42:46:ef:81:d8:65:3b:4f:
         d8:c3:d4:c5:4c:b4:4a:8b:59:cc:2e:f5:53:dc:8a:b8:f9:26:
         84:d2:47:23:94:bf:b9:31:6a:18:f9:7f:c3:74:ca:48:aa:c9:
         3c:75:0b:d1:a7:4a:fd:0f:06:ef:b6:70:56:84:a7:6c:cc:d9:
         ac:5b:7b:1d:ba:ca:b1:44:e5:2c:80:5a:c2:7a:6f:75:29:30:
         22:88:25:3f:7e:af:2b:58:ba:23:1a:42:c3:2d:3e:b4:27:e2:
         9c:3a:7f:53:cb:a3:b0:7d:f3:e1:22:61:fc:ee:c6:32:35:70:
         d8:64:3f:e3:ea:49:4d:26:19:f5:c1:4b:c9:30:19:83:cc:af:
         dd:f3:aa:3a:fb:c3:56:dd:d0:5d:94:d6:7e:a3:d9:c6:b8:41:
         ef:ce:9c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:24:17 2026 by rpki-client