Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft
File:                     7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft (raw, json)
Hash identifier:          k3VnFKy48NY4pqG8eyaSE877xczsJlPsMeaZGEP/zn4=
Subject key identifier:   DF:F1:D4:73:F1:7D:A4:73:C5:3C:B7:E9:A4:D7:2A:EB:EF:8A:98:01
Authority key identifier: EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C
Certificate issuer:       /CN=A9193369/serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C
Certificate serial:       01E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft
Manifest number:          01E8
Signing time:             Sun 19 Apr 2026 03:02:39 +0000
Manifest this update:     Sun 19 Apr 2026 03:02:38 +0000
Manifest next update:     Sun 26 Apr 2026 03:02:38 +0000
Files and hashes:         1: 7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl (hash: flSJkBSuopNFIxJx+Itw1XLjV2Kx1l262FkxDmn46vI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl
                          rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 03:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488 (0x1e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193369, serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C
        Validity
            Not Before: Apr 19 03:02:38 2026 GMT
            Not After : Apr 26 03:02:38 2026 GMT
        Subject: CN=69e445ce-9ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:63:d2:56:a2:ed:fd:fd:7b:e4:8c:13:38:80:
                    07:1f:cc:14:28:1d:7b:e3:0a:00:6a:63:40:2b:41:
                    88:e4:02:98:8b:48:a9:e3:9d:02:1a:8a:ad:40:33:
                    09:23:d1:fd:7a:1d:f7:02:68:37:d3:03:72:a3:85:
                    85:ac:f0:99:e4:f6:72:8d:36:e0:bb:2a:6a:8b:7b:
                    0a:00:93:1c:5c:52:77:10:e6:91:27:81:0f:9a:0e:
                    83:a6:d4:b2:5e:83:00:e8:a4:4c:d7:d3:ea:5e:13:
                    c8:56:dc:85:b4:20:e0:7a:48:0b:9e:4c:24:06:e6:
                    f0:88:f8:17:92:94:d6:ef:e0:90:3a:19:c2:75:80:
                    79:f0:82:52:7b:2a:e8:24:d8:e0:6d:7b:11:f9:cd:
                    bb:c4:b0:ad:ce:99:3f:0d:de:7a:b4:8f:44:a8:59:
                    e8:a4:df:1d:b2:9f:8d:52:81:88:38:26:de:bf:f6:
                    32:3a:95:7b:e6:04:53:fa:28:c2:e0:19:b8:24:94:
                    69:a6:59:21:7a:05:fc:93:8c:a3:a3:0e:bf:d1:fa:
                    ab:8f:dd:c6:d0:05:72:05:04:b6:ab:71:55:31:11:
                    80:33:f3:01:e1:a7:99:d3:c2:b0:5f:c9:d0:10:db:
                    47:7b:53:1e:4a:a5:59:73:44:7f:59:89:07:93:30:
                    14:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F1:D4:73:F1:7D:A4:73:C5:3C:B7:E9:A4:D7:2A:EB:EF:8A:98:01
            X509v3 Authority Key Identifier:
                keyid:EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:09:c3:19:5a:ec:b9:6a:39:54:cd:84:92:04:e0:d7:c1:e9:
         88:0e:c5:48:24:e1:29:07:2f:3e:85:20:35:5f:cf:30:1c:f0:
         28:b0:65:27:00:02:31:ab:29:f2:69:72:72:15:76:ab:a4:12:
         bf:a1:4d:6c:32:eb:3c:d8:7f:5c:9b:c4:4c:5f:d9:65:78:35:
         91:da:db:85:2a:7c:ec:83:5f:03:cc:3e:01:9a:d3:a2:c3:37:
         77:bb:dc:72:f4:48:dd:6b:23:74:ed:cc:92:85:5e:2d:20:cf:
         a0:62:37:ed:fb:0f:ea:3b:d5:3c:04:2e:b6:86:cb:a9:be:97:
         cb:7b:73:ef:64:c4:1d:3d:58:90:cb:d1:82:04:19:11:53:89:
         fe:0f:a6:c3:1c:e9:ac:bc:84:9e:41:da:87:50:c9:e7:34:1e:
         37:20:49:fa:92:53:ae:8b:b4:de:f2:f4:9f:7f:00:c8:18:de:
         14:d8:8d:bb:4f:c8:a2:18:ca:8c:05:5c:62:16:df:18:68:0d:
         34:e5:ee:7a:5b:65:4d:57:c4:6c:5e:c8:9f:dd:d9:48:f4:6a:
         fc:f5:6b:44:67:b6:f2:66:4e:8c:45:54:0b:0a:fe:c8:e2:13:
         45:98:c7:fb:f1:15:13:0e:8c:d3:8c:7d:b4:68:1c:8a:87:0a:
         34:bc:83:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:20:43 2026 by rpki-client