Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft
File:                     7a8emnnZ_ssQeIOv03V_qPcKMtc.mft (raw, json)
Hash identifier:          YCIRBRXQ51IsQkD+X+WcCbsvvNnxZ5WqE4l/raJWE0Q=
Subject key identifier:   39:E4:1E:F5:FE:B1:AA:5A:A0:D3:49:5C:46:C7:32:12:69:CB:F2:6B
Authority key identifier: ED:AF:1E:9A:79:D9:FE:CB:10:78:83:AF:D3:75:7F:A8:F7:0A:32:D7
Certificate issuer:       /CN=A91A2F6C/serialNumber=EDAF1E9A79D9FECB107883AFD3757FA8F70A32D7
Certificate serial:       0A45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft
Manifest number:          0A3D
Signing time:             Thu 16 Apr 2026 19:37:55 +0000
Manifest this update:     Thu 16 Apr 2026 19:37:54 +0000
Manifest next update:     Thu 23 Apr 2026 19:37:54 +0000
Files and hashes:         1: 7a8emnnZ_ssQeIOv03V_qPcKMtc.crl (hash: AP2rEN3rQN2cclNELmJIziywoYcQ5lq2FHn9t9BfV3U=)
                          2: FA7CB46C8AB411EA89D83541C4F9AE02.roa (hash: 0VT5Qaia6m9lZiwgE5nQayNqKU8C2FZbz9qJZgerMEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.crl
                          rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2629 (0xa45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2F6C, serialNumber=EDAF1E9A79D9FECB107883AFD3757FA8F70A32D7
        Validity
            Not Before: Apr 16 19:37:54 2026 GMT
            Not After : Apr 23 19:37:54 2026 GMT
        Subject: CN=69e13a93-efa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1b:74:dc:21:82:b4:ef:9e:67:97:0e:78:93:
                    76:8b:ee:ba:4b:27:fc:9d:88:fc:64:4d:ba:56:50:
                    59:44:f0:9e:ba:63:2d:e6:47:8b:a3:d7:f0:d5:b6:
                    41:b9:57:7d:ac:b9:5e:35:83:d1:99:92:c4:27:0d:
                    d0:14:8c:b8:f7:1c:a5:eb:3f:16:26:dc:5e:a2:f3:
                    5d:b9:fe:3f:c3:b4:34:21:57:9b:45:e6:00:2e:6a:
                    ce:c3:df:84:c5:49:28:31:74:fd:e0:a0:dd:d6:79:
                    27:01:16:ca:0d:8b:e9:d9:c4:6b:bd:8a:d2:cc:9a:
                    e1:e1:e3:dd:00:58:0d:5d:ec:fe:e0:9a:09:8f:c5:
                    42:08:a0:a3:c4:7f:3a:ae:4f:a5:a5:c9:16:48:d9:
                    2e:1f:a3:b2:e0:18:09:3e:d3:8b:5e:35:8a:c1:85:
                    2d:ac:3b:ad:e6:0e:34:8a:78:3c:cb:4c:f8:15:20:
                    99:97:f3:95:14:99:c1:08:88:7f:99:41:a3:f4:58:
                    93:75:ec:00:9f:b2:8f:8d:6a:35:03:fa:d1:8b:c4:
                    38:3e:c6:9b:6b:46:f4:4f:ea:26:bc:83:01:49:23:
                    fd:23:44:b7:20:38:c6:b5:d8:57:29:67:a0:fb:da:
                    31:b5:89:04:00:45:c5:6e:b2:6c:c4:e7:01:37:b6:
                    13:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E4:1E:F5:FE:B1:AA:5A:A0:D3:49:5C:46:C7:32:12:69:CB:F2:6B
            X509v3 Authority Key Identifier:
                keyid:ED:AF:1E:9A:79:D9:FE:CB:10:78:83:AF:D3:75:7F:A8:F7:0A:32:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:c2:56:3e:2e:e9:e3:2f:98:e6:49:c4:e1:4b:71:72:da:a6:
         f1:9b:18:95:ae:3d:52:21:c3:8c:4a:ba:ca:2d:bf:8e:df:c0:
         b9:9a:28:70:86:44:ee:80:1c:c8:50:94:92:e6:36:3a:e2:2d:
         49:94:6a:a9:73:da:74:28:6a:fd:58:8a:50:d9:ab:65:92:a1:
         73:e4:7d:2f:f3:a8:23:37:f9:5d:45:66:3b:3c:76:03:de:8f:
         19:0e:ee:da:aa:e2:9d:f9:f1:95:95:1a:73:57:9c:44:3d:09:
         42:b6:ed:71:cf:1e:6b:e5:3f:bc:a8:06:2d:26:92:fa:4a:29:
         91:74:06:2d:b5:56:e1:42:0a:3d:8c:0c:27:7c:94:99:34:3a:
         47:e5:db:88:91:f4:d6:9c:b5:76:a2:10:9a:49:a8:00:86:e5:
         90:72:5e:b7:02:16:11:e0:94:7d:32:b9:9b:80:75:e5:ee:21:
         90:8b:e3:37:41:dd:a6:a4:b8:f5:cd:3b:74:c9:86:e3:03:17:
         b8:c6:d2:8e:1a:6e:5c:00:6d:50:18:ff:48:87:70:7c:4e:8b:
         a2:f2:4d:d6:65:81:fb:1c:8d:86:f8:93:10:89:00:f6:e0:47:
         d4:4e:73:65:d9:8d:f1:e5:7a:0b:8d:d3:64:79:31:19:e3:a4:
         0f:2a:dd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:54 2026 by rpki-client