Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
File:                     S7U1I5SOxqyZE7LVCcHXspRtnpI.mft (raw, json)
Hash identifier:          KfOc9ooVoSY25u18iUzlDqy+qsy3BO9FobaUU2spLcM=
Subject key identifier:   49:1C:A5:2B:50:E7:F9:8D:FF:1A:88:71:B0:25:36:33:97:FC:7C:8E
Authority key identifier: 4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92
Certificate issuer:       /CN=A91AF431/serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
Manifest number:          6D
Signing time:             Fri 17 Apr 2026 07:35:56 +0000
Manifest this update:     Fri 17 Apr 2026 07:35:55 +0000
Manifest next update:     Fri 24 Apr 2026 07:35:55 +0000
Files and hashes:         1: S7U1I5SOxqyZE7LVCcHXspRtnpI.crl (hash: b9YNJ/6iKtnT7vbExmOkw5ZjP8Xa7umfPTT+iQbLoOw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl
                          rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:35:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF431, serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92
        Validity
            Not Before: Apr 17 07:35:55 2026 GMT
            Not After : Apr 24 07:35:55 2026 GMT
        Subject: CN=69e1e2dc-a14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:03:60:16:c6:d4:7f:19:53:95:68:73:a5:50:
                    66:9c:1d:39:c7:7a:23:78:47:b1:3d:b2:22:b1:41:
                    4e:ff:d9:34:4d:cc:37:77:5b:cf:87:a2:fc:2c:0e:
                    a5:f6:62:48:0a:21:bf:3a:f7:6f:d7:32:cf:80:19:
                    8a:2e:f3:65:78:ef:5d:6a:d8:46:8e:d3:78:85:9e:
                    95:66:2f:02:86:d8:61:5b:5a:bb:5f:7c:56:c8:b5:
                    d0:19:91:97:67:ff:59:b1:62:0b:df:38:af:e5:cd:
                    07:d5:65:de:24:e1:0c:d4:dc:30:da:5b:37:ba:94:
                    65:62:89:3b:b8:b6:73:a9:09:61:98:a4:9e:cc:68:
                    04:2a:24:c5:f2:02:4e:56:38:55:b1:bc:d5:29:0e:
                    13:d6:fe:2e:46:61:1a:23:9f:a7:b3:a2:91:34:82:
                    d9:90:da:cc:41:a7:d7:c0:a3:0f:78:09:86:2e:78:
                    97:8e:74:4b:02:43:e7:4c:59:28:6e:c2:a7:cf:42:
                    e3:e7:ff:a8:0b:b7:a8:62:f6:eb:16:5d:3c:ca:81:
                    b3:d6:f2:48:37:ed:b7:4e:5c:1f:c1:da:aa:e2:90:
                    f2:15:ee:90:2a:2e:ab:5d:13:b7:29:06:ff:e9:16:
                    c2:89:8c:aa:55:68:c7:5a:3e:13:b6:58:b5:53:48:
                    f9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:1C:A5:2B:50:E7:F9:8D:FF:1A:88:71:B0:25:36:33:97:FC:7C:8E
            X509v3 Authority Key Identifier:
                keyid:4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:f5:59:9e:e1:ec:7d:e6:19:7a:3b:32:31:5a:fd:51:53:84:
         2c:f9:7a:35:1e:a0:76:55:96:0e:6d:19:30:cd:43:d3:8a:a8:
         cb:5c:dd:1a:0b:66:b6:1f:ce:44:9e:11:c1:8f:e9:1b:a4:c8:
         bc:20:15:03:ae:f2:9f:2a:12:4b:0f:83:85:7b:2c:7c:9a:fd:
         d9:4e:b6:08:0d:9d:bc:ba:10:38:91:73:d9:e4:d4:70:a0:c5:
         1c:31:88:8b:19:d8:8b:d4:c8:a5:ad:a3:65:ed:ce:a9:28:94:
         81:cc:5a:6b:d7:c0:f2:0c:14:23:47:da:b7:23:b4:fb:12:6b:
         75:c5:00:ad:b7:ab:f0:8a:96:51:f2:d7:1f:72:00:54:3e:2a:
         02:9a:1b:b0:e2:db:21:34:4e:37:99:aa:e5:59:d7:56:05:41:
         37:8f:61:f0:e8:53:9b:1e:75:a3:c3:96:4f:d7:c4:6c:5b:85:
         95:40:05:29:78:da:2a:fd:25:2c:38:06:e1:04:40:06:11:5a:
         6d:db:c6:df:86:61:f7:30:00:5f:e9:82:45:e7:b8:c7:68:12:
         7e:1c:a8:1a:8b:51:d5:8c:ba:2d:75:49:84:fb:9c:13:55:12:
         89:8f:4f:f8:09:44:68:e8:53:6f:91:90:82:4e:62:bc:cb:42:
         73:c2:f9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:28:18 2026 by rpki-client