Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft
File:                     MO7z6BnpmwANZl9r1ZSvpMYiai4.mft (raw, json)
Hash identifier:          VfuVuSBGHWe6rbqaokGN2jRdgELPWf77zHgbw+g4C6I=
Subject key identifier:   BC:02:0F:58:CD:AE:92:FA:D0:A9:FF:40:E2:93:30:CE:D3:79:24:01
Authority key identifier: 30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E
Certificate issuer:       /CN=A91D5D9F/serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E
Certificate serial:       02B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft
Manifest number:          02AE
Signing time:             Fri 17 Apr 2026 01:22:19 +0000
Manifest this update:     Fri 17 Apr 2026 01:22:18 +0000
Manifest next update:     Fri 24 Apr 2026 01:22:18 +0000
Files and hashes:         1: MO7z6BnpmwANZl9r1ZSvpMYiai4.crl (hash: TU8k+WMecPGGOBmlAznPlUzfpYIEN/NXEYLdz2WHvJQ=)
                          2: D7803F3A3A5511EDB9410C50C4F9AE02.roa (hash: LkrylPJMa1lM5G24m9Hp0wuID2HJBSNqucTHJxmRA2A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl
                          rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5D9F, serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E
        Validity
            Not Before: Apr 17 01:22:18 2026 GMT
            Not After : Apr 24 01:22:18 2026 GMT
        Subject: CN=69e18b4b-afbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:82:dc:47:6d:af:f9:49:f6:e0:b0:c2:9f:
                    e4:5d:68:f6:fe:e4:ed:3c:a7:31:13:4a:7a:6c:d0:
                    17:75:75:86:31:04:86:eb:57:72:8b:3b:d8:8f:d7:
                    f4:8a:21:57:09:ac:f4:fc:0d:29:38:79:91:66:f6:
                    1a:9f:33:b9:fb:c5:02:4a:9d:79:1a:be:a9:23:02:
                    3a:2c:24:cb:1b:03:ad:98:f2:d4:0c:c2:0e:2d:26:
                    eb:5d:6a:2a:09:1c:05:69:57:c8:72:ee:aa:60:94:
                    00:17:9c:d3:2f:e1:c0:7a:91:b1:45:0e:5f:2e:7f:
                    68:fc:14:c5:90:39:ad:e3:88:3d:70:c7:a1:74:8e:
                    12:4b:aa:b9:ba:e1:b6:d4:5c:3b:d5:a1:bd:95:fe:
                    c8:4e:d6:75:5a:aa:79:8a:b2:e6:0c:c5:7f:35:3c:
                    32:10:b6:08:b1:4a:6b:69:11:c5:c7:f6:f2:a1:54:
                    9c:73:d9:54:84:32:0d:97:b4:1f:cf:3f:7b:80:75:
                    83:bb:3d:b3:df:70:6b:b9:e1:ba:37:ae:f7:f0:d7:
                    29:9a:2d:5a:08:d6:9f:e6:db:be:17:13:66:b0:45:
                    67:0c:57:3e:52:15:11:d3:62:24:8a:16:af:f8:e3:
                    d6:20:16:e2:94:dc:05:4f:52:be:f7:78:6c:d4:ec:
                    3e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:02:0F:58:CD:AE:92:FA:D0:A9:FF:40:E2:93:30:CE:D3:79:24:01
            X509v3 Authority Key Identifier:
                keyid:30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d4:38:99:1b:7c:ea:ec:bb:9a:7c:41:27:8d:6b:c2:82:ad:
         04:fc:30:79:94:f5:43:ad:8a:53:ea:cd:11:70:9c:ab:12:f0:
         c9:de:c4:98:7d:d6:31:c4:ea:68:a6:e7:57:39:f7:1c:ac:a0:
         c3:cf:b6:53:0d:05:22:f9:8a:b7:4e:af:b0:72:e4:f8:61:e7:
         92:a1:5b:9e:3b:2f:26:b7:ef:87:f1:3d:d1:f5:5a:eb:1e:f3:
         cd:c6:70:09:2d:fe:31:e5:d2:3a:62:1a:31:c4:f6:67:40:80:
         b4:c8:36:42:e8:2d:a2:fa:ff:0a:a5:c4:30:26:2b:4b:22:58:
         d0:6e:e7:cd:01:f5:b5:8c:c7:a4:cf:f8:c5:d5:70:68:3b:f6:
         4a:c7:91:1a:32:0c:2a:9c:a7:4a:20:c7:cb:09:59:b5:c8:08:
         58:63:30:41:53:11:b5:64:b8:9d:a8:8a:f6:4f:10:b1:db:64:
         a1:d5:11:25:ae:34:dc:d9:8a:36:5f:51:c0:a2:ab:86:aa:aa:
         36:8c:93:14:8f:28:48:5f:04:29:2c:90:6e:a0:ec:91:15:4e:
         75:e1:3e:37:07:7e:a3:42:fe:c6:e5:2d:1a:71:0d:56:96:d0:
         59:a5:63:7e:56:c5:1e:cf:de:5f:a0:d9:67:6e:e5:e3:d2:f5:
         d0:67:cb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:18:49 2026 by rpki-client