Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
File:                     R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft (raw, json)
Hash identifier:          Y2L/pHlpBMEQyeMn2K1VLN+pBNJ9MC8zop0Vbk75acg=
Subject key identifier:   F5:95:A4:22:F6:2F:25:67:EE:30:0C:A1:32:7A:ED:29:50:34:9A:FA
Authority key identifier: 47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1
Certificate issuer:       /CN=A91BB000/serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
Manifest number:          6A
Signing time:             Sun 19 Apr 2026 07:29:57 +0000
Manifest this update:     Sun 19 Apr 2026 07:29:57 +0000
Manifest next update:     Sun 26 Apr 2026 07:29:57 +0000
Files and hashes:         1: R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl (hash: NPG4C4DCt9zqlctcB3xpEx4zUe4raKlqS4kPhnm4YXE=)
                          2: 98F8A43C9D2611F0951DD30BC4F9AE02.roa (hash: 1KJtvHLYngoP+8r1UhG8albB+7arFBcFljE2p+6yMsE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl
                          rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB000, serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1
        Validity
            Not Before: Apr 19 07:29:57 2026 GMT
            Not After : Apr 26 07:29:57 2026 GMT
        Subject: CN=69e48475-2a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:69:97:21:ac:80:8c:b8:a6:14:cd:74:e4:e2:
                    66:d6:b2:c1:6b:b6:3a:7d:ab:36:d7:bb:c6:c2:53:
                    43:71:1a:13:50:0f:40:cc:7d:5c:56:8d:b8:da:4b:
                    d8:26:45:6d:d4:a4:62:97:01:22:2f:49:1e:93:f0:
                    f7:2b:02:47:6c:90:2a:be:cb:fa:7b:4a:6d:2a:08:
                    07:d3:8a:6e:61:b9:22:09:01:a9:3c:5e:5a:5c:14:
                    d5:a9:4d:01:97:18:02:53:b4:56:34:93:78:8d:15:
                    ed:57:b0:54:80:67:15:b7:45:cb:eb:3d:51:2b:21:
                    94:cf:a4:6f:58:2d:2b:43:e9:2d:ca:d5:db:d0:24:
                    db:0a:1d:8a:6b:e4:0b:fe:b1:c2:e8:1d:0f:c5:17:
                    59:e4:43:32:2e:fe:f6:ae:14:07:b5:24:95:07:7f:
                    e8:91:1e:44:d1:f7:f9:0e:35:77:70:4f:48:ad:2b:
                    1d:09:fa:fd:4f:a4:7a:25:02:fc:0d:1e:db:71:2f:
                    7b:49:a8:49:66:a2:cc:6f:35:e7:e0:da:58:3d:39:
                    fa:19:b3:da:3e:f3:f1:b5:cb:70:e8:8c:29:33:11:
                    e7:e2:06:f1:75:2b:7a:89:74:f5:6c:84:a4:fd:bd:
                    29:8e:93:a0:e6:73:d5:67:c5:e4:9a:89:e0:7a:07:
                    7c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:95:A4:22:F6:2F:25:67:EE:30:0C:A1:32:7A:ED:29:50:34:9A:FA
            X509v3 Authority Key Identifier:
                keyid:47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:2c:48:7f:63:64:d1:97:22:79:36:a7:2c:26:5b:0a:81:ac:
         ac:fd:55:00:27:dd:66:7b:a3:7c:88:d4:c9:e5:6b:73:c8:82:
         bd:fc:12:d8:08:c3:1e:64:70:4f:67:d3:9a:f5:ef:11:86:02:
         e0:b6:d3:85:33:d4:56:5e:0f:97:68:98:ae:48:b6:ac:1f:d0:
         0b:91:9e:bd:f7:6b:6f:18:23:a0:6e:23:84:f0:a2:0b:ed:82:
         7d:8d:02:64:6c:c1:31:bb:56:99:a2:98:8d:ef:4e:0c:58:82:
         ed:fd:f8:f6:89:30:c2:6a:cb:9b:14:37:2f:2e:df:30:94:dd:
         4f:c3:4e:ef:10:68:41:87:a8:2c:a5:e1:ae:8f:e7:d4:b6:d3:
         15:cd:28:a0:d9:37:5d:cf:ec:b8:cb:31:30:47:cd:d5:86:20:
         60:f8:a8:74:39:80:51:d8:05:25:39:63:07:02:66:5b:a5:e2:
         75:77:9c:aa:ec:57:4c:31:a8:a7:28:8a:b6:20:9c:d1:a9:a0:
         88:3d:8b:60:6d:3f:38:06:75:58:ee:77:7c:69:76:10:f4:3a:
         23:58:93:9c:ca:27:48:e1:c8:02:51:2c:c3:9a:3d:6e:72:c7:
         12:a4:27:b6:a7:4a:a3:72:90:6c:96:5b:64:2e:aa:56:99:35:
         6f:d7:53:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:10 2026 by rpki-client