Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
File:                     C7BDH1UIA338kvd-BrSK7JVR9ls.mft (raw, json)
Hash identifier:          si03ShRMfBsubP5tpkhtANRSrxIrKiV6WEVt61JlVNM=
Subject key identifier:   51:70:23:6C:E1:EE:0D:36:A7:AF:48:FD:A3:EB:1F:19:CE:ED:E0:09
Authority key identifier: 0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B
Certificate issuer:       /CN=A918C255/serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B
Certificate serial:       1B9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
Manifest number:          1B95
Signing time:             Thu 16 Apr 2026 16:12:10 +0000
Manifest this update:     Thu 16 Apr 2026 16:12:10 +0000
Manifest next update:     Thu 23 Apr 2026 16:12:10 +0000
Files and hashes:         1: C7BDH1UIA338kvd-BrSK7JVR9ls.crl (hash: smTlWq3Qcrq8G2FmhMD3PYgwr/csPrwGoYS6TDktgWU=)
                          2: 8E810FBCD46E11E9B37C0539C4F9AE02.roa (hash: N8G4/01RtsnK/5wYFg/W/SRO8tkHccnmITaVaX2WxsA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl
                          rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7071 (0x1b9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C255, serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B
        Validity
            Not Before: Apr 16 16:12:10 2026 GMT
            Not After : Apr 23 16:12:10 2026 GMT
        Subject: CN=69e10a5a-f1b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c8:b1:a2:43:82:f6:8e:e1:1f:75:2c:74:66:
                    2e:4a:fc:bd:3b:11:b3:7b:2d:15:6e:18:92:f7:fc:
                    d4:d8:11:0c:63:30:72:81:e5:0e:9d:ba:42:dd:14:
                    57:e8:35:8e:fa:31:eb:30:2b:12:90:e0:d3:e6:e5:
                    f9:5b:01:10:64:cf:0f:ca:83:19:28:5e:05:64:dd:
                    e2:80:19:ed:b2:68:4c:91:cf:6d:13:5c:af:2e:f8:
                    9e:a5:30:aa:30:08:86:18:58:f2:b5:4c:1c:f0:53:
                    6e:42:15:08:47:c7:e5:75:d2:09:4c:f2:78:b4:36:
                    a1:da:7d:a4:98:d9:85:29:05:6a:e6:78:8d:ef:a3:
                    72:da:94:17:9d:cf:06:e7:9e:82:5d:c6:ae:de:ae:
                    ec:6a:e3:72:25:48:9f:f2:22:08:08:9f:01:6a:c0:
                    42:d0:45:13:ef:af:3f:3b:ac:27:f3:76:4e:d5:d0:
                    af:e5:82:ab:22:c2:8c:97:a2:33:3d:94:94:c7:34:
                    32:41:23:74:8e:5d:07:d7:a7:ae:6b:25:de:34:f6:
                    0e:a6:7f:db:45:6e:b8:72:17:21:e5:23:dc:45:dd:
                    f5:75:e9:28:95:2e:59:f5:e4:bd:5e:33:ca:55:bb:
                    9e:60:a5:8a:76:d1:62:85:f0:c1:f4:44:8a:e0:96:
                    09:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:70:23:6C:E1:EE:0D:36:A7:AF:48:FD:A3:EB:1F:19:CE:ED:E0:09
            X509v3 Authority Key Identifier:
                keyid:0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:58:0b:a6:c4:d4:d7:8e:e6:03:bb:63:9a:f9:bd:5d:76:08:
         2c:38:73:ac:4d:dd:15:71:83:7c:3b:8c:57:8f:6b:8d:0e:fc:
         d8:2f:a9:a4:49:92:25:67:64:f4:6a:46:2e:e2:cc:82:3d:ed:
         af:de:a3:c4:60:3c:56:ab:af:ba:90:74:0a:b4:c6:81:e4:3b:
         dc:38:4d:44:c1:bb:ec:e1:14:10:56:a4:9f:20:e6:f1:9e:6c:
         07:7c:af:31:a5:b9:02:bf:7a:95:e1:2a:93:94:08:96:24:d4:
         f4:5b:aa:4e:01:15:1e:fd:e3:76:af:fe:74:5a:37:88:73:85:
         97:5d:ff:82:e9:e9:11:21:33:10:cc:d5:f0:9c:98:e9:13:8e:
         41:0a:18:94:2e:b6:f0:b6:09:bf:54:44:ea:c9:bc:97:b2:69:
         06:78:53:6a:08:4a:eb:40:ed:ec:77:d6:9f:64:2b:d2:42:d5:
         3e:42:37:d7:ac:11:69:4f:4c:e2:ab:23:99:fc:b4:86:0e:28:
         10:d7:aa:c3:66:20:32:f1:69:e1:a5:6c:59:6d:28:1a:c1:a1:
         7f:9a:30:97:c0:08:88:76:9b:1a:13:33:02:04:cb:cb:58:29:
         86:e2:f9:07:53:65:a7:67:1a:8f:1d:7e:d3:18:b2:fe:cb:f1:
         b8:c2:74:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:02:05 2026 by rpki-client