Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
File:                     7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft (raw, json)
Hash identifier:          ihawjy97W581ZTp7bO6oWg368ktJS/CdtLGAD/72vYc=
Subject key identifier:   33:54:35:BA:78:B0:98:87:47:46:FB:59:3D:83:DD:29:75:F7:14:D1
Authority key identifier: EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6
Certificate issuer:       /CN=A91982B6/serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
Manifest number:          F1
Signing time:             Fri 17 Apr 2026 06:00:54 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:54 +0000
Manifest next update:     Fri 24 Apr 2026 06:00:54 +0000
Files and hashes:         1: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl (hash: Hch/Ep0K6zzgHi5eSywYqvYiplgEnc1D7W2ipJl4ujE=)
                          2: 739C8BDECB5A11EFBEE64062C4F9AE02.roa (hash: 9KLT865tYEymgriQqOzA9F8VKTM5qw8pmJPKAk9mtkQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl
                          rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982B6, serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
        Validity
            Not Before: Apr 17 06:00:54 2026 GMT
            Not After : Apr 24 06:00:54 2026 GMT
        Subject: CN=69e1cc96-5a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e0:df:43:38:f8:3d:7b:11:14:1c:70:ea:ec:
                    19:ec:1d:7a:a6:b7:56:d1:16:a9:ba:0a:6f:75:68:
                    fc:57:86:74:16:0f:dd:dc:75:18:f3:38:47:b9:89:
                    3a:77:72:22:ea:98:ad:87:01:05:6a:2f:a3:e3:b8:
                    6f:d0:ae:4a:bc:57:ed:b2:96:b1:5d:61:88:10:b4:
                    b0:ab:31:ad:e7:3b:ef:19:7f:4a:42:f3:ff:52:04:
                    df:f4:3d:93:9e:89:a7:83:69:f3:63:1d:58:b3:08:
                    7f:ee:fd:4e:d2:c4:d5:b6:e2:c3:14:f8:b8:db:f3:
                    05:07:9a:df:59:1c:9f:c7:6f:50:b3:2e:08:1f:a2:
                    1d:cb:8e:e3:5c:15:fc:e9:71:05:00:e7:17:93:c4:
                    36:34:6a:2a:a0:9d:80:c8:a1:b0:18:d6:50:dd:df:
                    ac:9b:36:1d:b0:c7:68:22:ec:11:1a:22:1e:a1:56:
                    88:6e:1b:44:dc:14:a8:12:43:f2:8c:d9:df:7e:e7:
                    8d:7c:2e:3f:11:7b:2f:e7:c3:a1:a2:64:dd:b3:18:
                    5c:ca:e6:b0:c8:d5:d0:ac:b7:d2:3e:fc:a6:e3:ca:
                    b7:16:2b:ce:b2:00:d1:45:69:c2:87:07:3e:01:43:
                    8e:23:77:bf:3c:82:ba:f5:20:b9:81:66:80:69:7f:
                    ab:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:54:35:BA:78:B0:98:87:47:46:FB:59:3D:83:DD:29:75:F7:14:D1
            X509v3 Authority Key Identifier:
                keyid:EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:cc:ca:78:43:ef:f0:f2:1b:9f:dd:17:2b:8b:57:30:ed:fd:
         a9:6d:0a:20:18:58:9c:39:f7:ac:45:53:87:e4:a7:aa:e2:5a:
         b6:80:cd:64:d7:c1:1d:41:3d:de:1f:a5:ac:98:26:80:4e:19:
         d5:62:52:e7:3d:2e:f0:03:23:74:65:ae:7d:af:14:59:ac:8c:
         c2:02:74:c6:13:3a:f9:92:08:e8:01:f4:3b:48:3b:10:fb:c9:
         43:ef:24:2c:52:2d:91:0a:9b:ef:bc:52:e4:00:60:ab:e2:3c:
         3e:24:17:41:dd:3d:db:dc:b8:16:a6:08:eb:9c:5e:a7:ca:ca:
         fa:4b:6b:2f:8d:3d:2a:54:8a:b7:dc:f4:48:d4:e2:cd:2a:4e:
         6d:2b:77:cb:49:d6:49:ac:d1:92:d5:aa:e8:13:a2:8f:14:c1:
         3b:d3:60:70:21:bb:b2:45:ee:69:0c:19:e8:19:60:6d:74:7c:
         0a:1d:5d:90:db:5b:9a:23:78:1c:16:17:0f:1f:75:7f:9a:11:
         55:7d:2b:ef:84:ea:a2:bc:97:ed:78:6a:14:96:e1:6d:96:e0:
         07:cf:29:4d:17:11:01:5c:20:5d:f6:39:2b:1f:27:82:9a:e1:
         6d:c8:53:b0:cf:5b:b1:a7:69:e4:e7:2e:1a:ce:8e:f6:c9:16:
         24:8e:b3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:02 2026 by rpki-client