Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
File:                     eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft (raw, json)
Hash identifier:          gp+SoXBXjw9mpP4/8EfHiU4GfHZ4hNfE+fo6x0JtlAE=
Subject key identifier:   BA:2D:3F:DE:15:3A:63:95:DC:24:E1:EC:A2:08:5B:BF:09:4C:9F:3C
Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29
Certificate issuer:       /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
Certificate serial:       0DFA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
Manifest number:          0DCC
Signing time:             Thu 16 Apr 2026 17:51:10 +0000
Manifest this update:     Thu 16 Apr 2026 17:51:10 +0000
Manifest next update:     Thu 23 Apr 2026 17:51:10 +0000
Files and hashes:         1: eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl (hash: tCICZbeB4aJvYEsvwxe63Bo6znri9osh5P0+eDCSk18=)
                          2: 055A1A7A05FC11EFB61A7767C4F9AE02.roa (hash: Y6kv/Ft3RM4G7ZQs6aq29HExaJIwl9QZ9sCKC5oOLGA=)
                          3: 9F12E3A025A511EE87132E45C4F9AE02.roa (hash: TxDaiYQZFS4Ik//q76OvD/sE28hWkwuGs5dmTlG3+ls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl
                          rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3578 (0xdfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
        Validity
            Not Before: Apr 16 17:51:10 2026 GMT
            Not After : Apr 23 17:51:10 2026 GMT
        Subject: CN=69e1218e-2c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5e:0c:6e:3a:66:c3:c9:27:eb:6f:37:8a:40:
                    f7:82:f2:c5:96:70:c0:ec:06:fc:61:b2:ff:83:a8:
                    8b:2f:55:5a:be:5c:cf:3f:f7:f0:21:9c:34:bd:f5:
                    d3:ee:7f:bc:07:0e:12:85:16:e0:35:0d:45:dc:3c:
                    cf:ec:54:25:ae:f3:d7:28:22:47:37:5f:bf:db:91:
                    8d:7c:d2:2a:cc:bf:6c:f1:34:d7:d2:26:9a:ef:d7:
                    a8:65:eb:f3:2d:d0:9d:04:d2:75:9c:4f:87:03:2e:
                    ac:3b:52:44:cf:c2:f1:39:57:59:07:05:15:e9:87:
                    5d:ff:8b:42:67:48:d4:84:2f:bd:9f:9e:86:61:a7:
                    5c:a0:7b:ef:19:2f:2b:d1:40:cb:7c:85:2d:67:3b:
                    49:5e:ca:ac:1e:b8:99:ea:76:98:3c:a1:91:33:0f:
                    7b:80:9d:fd:72:ac:48:86:13:50:54:57:b3:30:1c:
                    93:86:c1:0d:b6:c2:9e:9f:ff:0e:9e:b9:bf:3e:db:
                    69:9f:3e:57:5a:e8:7e:21:e0:25:9c:29:23:de:9a:
                    fb:72:85:f6:fd:93:e3:f1:7b:75:13:65:d7:c1:d7:
                    1d:24:8f:03:69:04:00:5b:67:2a:f3:ca:cf:92:c9:
                    6e:2e:3a:b0:0d:ac:ae:2b:1e:29:4b:ee:1e:6a:5d:
                    fa:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2D:3F:DE:15:3A:63:95:DC:24:E1:EC:A2:08:5B:BF:09:4C:9F:3C
            X509v3 Authority Key Identifier:
                keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:26:bf:e7:10:6c:50:29:b0:f2:81:3e:97:70:d3:d3:ac:6e:
         e3:81:10:f9:c5:b4:b2:23:93:27:85:44:82:41:b0:ac:74:08:
         f9:ba:28:3a:c5:3b:54:1d:9e:2d:2d:d9:1c:e7:2c:ef:10:d0:
         58:f2:ba:a4:95:2c:da:5b:f9:d7:d9:e3:ed:98:50:b9:a4:b6:
         e9:7c:36:41:87:66:e1:8f:a1:6f:90:f4:1e:ef:6a:69:19:83:
         d2:dc:c8:c0:ec:ab:fa:b4:ed:4f:de:f5:7a:8f:2e:a5:87:58:
         8d:70:c6:e3:d5:20:3c:5c:b4:a5:f1:7e:33:90:af:73:d4:a1:
         72:1d:4f:f8:4a:79:cc:36:65:72:f1:e8:a8:b4:fb:87:d0:28:
         09:3a:8e:2a:67:a5:c9:14:cc:d3:c1:b9:01:69:f9:31:2d:87:
         d0:2f:b3:fa:da:5e:3a:25:62:31:7c:ce:07:49:30:19:e9:20:
         07:7b:f2:09:a0:26:8d:48:60:7b:e1:a8:d8:bb:e0:2e:da:b1:
         e6:a0:8c:0d:43:73:b7:cd:b5:6a:ce:a4:e1:b1:68:6c:f4:a8:
         33:21:c7:fe:ed:0b:6d:0c:53:50:a0:50:86:00:5e:34:ac:85:
         a7:e6:84:87:64:57:e4:3d:eb:ba:27:e2:d5:b2:2e:8a:79:eb:
         a1:37:d3:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ5NUMxMTAvBgNVBAUTKDc4QkVEQkVEQzA0NTlCOTAwQzI4Mjg5MkYxM0IxNzgy
QTk1NjA0MjkwHhcNMjYwNDE2MTc1MTEwWhcNMjYwNDIzMTc1MTEwWjAYMRYwFAYD
VQQDEw02OWUxMjE4ZS0yYzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoV4Mbjpmw8kn6283ikD3gvLFlnDA7Ab8YbL/g6iLL1VavlzPP/fwIZw0vfXT
7n+8Bw4ShRbgNQ1F3DzP7FQlrvPXKCJHN1+/25GNfNIqzL9s8TTX0iaa79eoZevz
LdCdBNJ1nE+HAy6sO1JEz8LxOVdZBwUV6Ydd/4tCZ0jUhC+9n56GYadcoHvvGS8r
0UDLfIUtZztJXsqsHriZ6naYPKGRMw97gJ39cqxIhhNQVFezMByThsENtsKen/8O
nrm/Pttpnz5XWuh+IeAlnCkj3pr7coX2/ZPj8Xt1E2XXwdcdJI8DaQQAW2cq88rP
ksluLjqwDayuKx4pS+4eal36pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLotP94V
OmOV3CTh7KIIW78JTJ88MB8GA1UdIwQYMBaAFHi+2+3ARZuQDCgokvE7F4KpVgQp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDk1Qy81NTkxODAwNEUy
QUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01QU1LQ2lTOFRzWGdxbFdC
Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VMN2I3Y0JGbTVBTUtDaVM4VHNYZ3FsV0JDay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDk1Qy81NTkxODAwNEUyQUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01
QU1LQ2lTOFRzWGdxbFdCQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhia/5xBsUCmw8oE+l3DT06xu44EQ+cW0siOTJ4VEgkGwrHQI+booOsU7VB2e
LS3ZHOcs7xDQWPK6pJUs2lv519nj7ZhQuaS26Xw2QYdm4Y+hb5D0Hu9qaRmD0tzI
wOyr+rTtT971eo8upYdYjXDG49UgPFy0pfF+M5Cvc9Shch1P+Ep5zDZlcvHoqLT7
h9AoCTqOKmelyRTM08G5AWn5MS2H0C+z+tpeOiViMXzOB0kwGekgB3vyCaAmjUhg
e+Go2LvgLtqx5qCMDUNzt821as6k4bFobPSoMyHH/u0LbQxTUKBQhgBeNKyFp+aE
h2RX5D3ruifi1bIuinnroTfTZA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:36:48 2026 by rpki-client