Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
File:                     _7jr91F1lPQetjZXPZajVwaXSbk.mft (raw, json)
Hash identifier:          Q6nWE3w0Rl8SZJJKnUMeEPVHGX5FA5dtWKsBVm9OJoc=
Subject key identifier:   AC:44:B8:07:13:F9:ED:AB:7D:40:FE:32:A3:AB:AD:F2:CE:DE:AE:39
Authority key identifier: FF:B8:EB:F7:51:75:94:F4:1E:B6:36:57:3D:96:A3:57:06:97:49:B9
Certificate issuer:       /CN=A9191136/serialNumber=FFB8EBF7517594F41EB636573D96A357069749B9
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
Manifest number:          6A
Signing time:             Fri 17 Apr 2026 07:37:00 +0000
Manifest this update:     Fri 17 Apr 2026 07:36:59 +0000
Manifest next update:     Fri 24 Apr 2026 07:36:59 +0000
Files and hashes:         1: _7jr91F1lPQetjZXPZajVwaXSbk.crl (hash: VUrSnOWK5QuNBUvadiR05I00YF9I4iCiBbxW6oa+0Lk=)
                          2: 97B512889AA911F08374FE83C4F9AE02.roa (hash: S1UvrempQuAJU92CzhHT6GIApLC8+2XtBw15QdJaVbM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.crl
                          rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191136, serialNumber=FFB8EBF7517594F41EB636573D96A357069749B9
        Validity
            Not Before: Apr 17 07:36:59 2026 GMT
            Not After : Apr 24 07:36:59 2026 GMT
        Subject: CN=69e1e31c-e327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:74:13:10:6a:4a:7c:f3:8b:6c:90:b0:d9:fc:
                    28:9e:7d:54:1c:af:03:a4:a2:e1:16:17:06:b8:e3:
                    81:6a:be:12:a3:6f:14:d4:5e:66:7a:0f:9e:94:fe:
                    ad:b8:f5:e8:e9:5b:a1:b6:ba:63:04:13:54:cb:66:
                    4e:b0:8b:16:2f:9d:55:e1:9d:b3:1e:71:c4:9b:0a:
                    76:c4:38:d6:a6:f3:60:da:84:07:5c:3f:5c:04:f9:
                    e8:78:2c:5b:48:19:81:b9:41:14:b6:dd:a9:63:bc:
                    cf:03:46:d4:24:86:e6:b6:59:6f:77:2f:b4:38:e9:
                    d1:d8:f0:04:d2:30:87:54:0f:fa:e6:36:dd:9f:ef:
                    20:2f:5b:50:0e:f1:fc:e5:86:77:d7:f1:67:a6:0c:
                    94:99:f6:09:c0:71:88:39:16:fc:4d:a7:48:05:2a:
                    0a:79:2a:70:55:db:cf:c7:27:e3:c3:15:a5:82:d5:
                    a3:7b:61:6a:68:7f:0b:f2:28:d8:74:30:aa:da:83:
                    80:e1:f3:5d:9d:c8:e6:c8:d9:83:2a:8a:40:88:76:
                    7d:3e:f3:94:b2:92:6e:c8:c7:89:c8:b6:43:9b:08:
                    6a:a5:f3:ee:27:65:59:59:81:bf:14:27:f4:cd:07:
                    eb:71:2e:46:11:24:0e:be:87:43:45:b7:fb:e2:47:
                    28:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:44:B8:07:13:F9:ED:AB:7D:40:FE:32:A3:AB:AD:F2:CE:DE:AE:39
            X509v3 Authority Key Identifier:
                keyid:FF:B8:EB:F7:51:75:94:F4:1E:B6:36:57:3D:96:A3:57:06:97:49:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:16:a5:00:04:e4:27:8b:fa:26:3b:34:90:40:e9:a9:88:be:
         74:6b:53:8b:d0:cf:ec:f5:fd:9c:8b:6c:7e:ae:b8:02:4d:1d:
         11:72:58:f4:fd:7e:73:9b:96:4c:9c:b1:d4:5c:c9:e4:20:1b:
         18:7a:03:3a:fa:df:00:c8:9e:75:15:39:fd:28:c5:0d:97:97:
         e9:d8:94:5a:f8:4b:b1:31:6e:62:d8:d1:0c:1a:5e:a7:f7:14:
         e6:3d:3d:6e:64:74:34:fa:83:9d:3e:6b:75:e2:9a:20:5b:97:
         fa:d5:08:46:cf:34:a7:83:48:5d:ef:ad:f0:ec:88:ea:74:5f:
         dc:76:8c:52:3b:fb:be:e4:e9:bb:d2:e0:a1:6a:22:29:11:da:
         e1:a4:11:64:04:13:df:68:31:f5:e2:58:4a:cd:36:94:4c:a1:
         91:1b:98:a3:af:cf:ab:11:39:ce:da:43:a5:ad:0f:bc:97:f9:
         ad:22:2c:0c:65:8d:9f:fa:e0:e1:a5:c9:59:da:99:fa:4d:97:
         86:a9:c0:17:32:ad:50:8e:bc:bf:83:c9:02:5c:5d:5d:89:d5:
         e4:ea:4b:1e:d0:6c:30:a6:e6:33:8e:de:82:35:3f:47:fe:7a:
         b7:d9:48:1b:df:96:5c:b8:79:fa:26:a6:c2:1d:fb:88:84:73:
         be:1a:be:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:28:19 2026 by rpki-client