Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
File:                     7drOQHH9qFhc8SNEuCUSze8H860.mft (raw, json)
Hash identifier:          55chH8UAOmVQWUeZKBGcXp8vdZvWGDgzF1El7Ao/FMg=
Subject key identifier:   6E:6A:26:33:0C:9E:6A:41:0E:54:2C:93:98:E5:81:B8:84:DB:9E:08
Authority key identifier: ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD
Certificate issuer:       /CN=A91D9335/serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD
Certificate serial:       352B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
Manifest number:          352B
Signing time:             Thu 16 Apr 2026 14:35:42 +0000
Manifest this update:     Thu 16 Apr 2026 14:35:41 +0000
Manifest next update:     Thu 23 Apr 2026 14:35:41 +0000
Files and hashes:         1: 7drOQHH9qFhc8SNEuCUSze8H860.crl (hash: RQkHykItl+gorR76hCybSz59qSsJ75tZHslLRNBBRO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl
                          rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:35:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13611 (0x352b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9335, serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD
        Validity
            Not Before: Apr 16 14:35:41 2026 GMT
            Not After : Apr 23 14:35:41 2026 GMT
        Subject: CN=69e0f3be-f933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:83:ba:ae:fa:fa:dc:84:36:9d:ff:73:be:d8:
                    29:e3:0e:63:b7:36:8c:54:10:62:b4:ff:2e:d5:84:
                    57:f9:5b:5c:b1:3b:58:dd:4a:f6:b4:ad:41:38:0f:
                    70:b1:51:46:0f:da:92:84:a9:34:41:d2:e9:71:4f:
                    f8:ad:1c:af:fb:86:cd:02:5a:bf:e1:dd:2b:64:f9:
                    93:96:5a:b7:ce:2b:b7:eb:f6:91:b0:bb:1f:f8:f3:
                    ed:61:b6:64:dd:af:15:d0:46:06:11:2a:d6:e6:f7:
                    b5:aa:2d:46:5c:9b:80:95:0a:4d:9b:55:7f:4d:d0:
                    08:4e:ba:6e:b4:0b:25:f3:29:51:00:6b:f5:56:3c:
                    63:79:fe:1e:39:ba:ee:1f:b0:df:f3:ad:9b:a8:d7:
                    48:40:6a:6e:cb:88:53:dd:c0:1c:cf:58:d9:4d:d0:
                    29:d8:d2:f2:12:bc:b4:40:81:19:49:9f:7c:49:c6:
                    2b:7c:38:dc:6a:05:6a:74:1a:c8:cf:d8:89:5f:cd:
                    4f:5c:bf:4d:09:77:bf:1b:fc:01:43:d7:52:24:a3:
                    8f:7d:83:8b:db:2b:f5:2f:ba:4a:87:e0:3f:99:7e:
                    02:c2:ff:b1:06:a5:00:ce:65:e3:2e:a1:32:41:ec:
                    56:c2:3d:03:fe:ad:9e:2d:16:b9:f8:fc:26:e9:3d:
                    22:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6A:26:33:0C:9E:6A:41:0E:54:2C:93:98:E5:81:B8:84:DB:9E:08
            X509v3 Authority Key Identifier:
                keyid:ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:49:e6:55:46:cd:eb:5f:f3:fc:06:db:92:e3:8b:92:1e:6d:
         73:0c:2a:e8:97:cd:93:bc:2d:46:f5:19:1f:40:e1:10:02:69:
         9c:04:fa:ea:2a:3e:63:0a:16:a8:19:1a:f5:a6:c7:73:93:9c:
         e9:11:1a:ab:81:75:5b:29:64:9a:9c:3b:99:c0:df:81:62:53:
         43:d0:1a:64:2b:8f:26:33:1d:89:44:37:22:07:8e:3b:0b:95:
         04:90:3f:af:23:ea:a4:fd:9a:ab:09:86:6d:84:86:cd:9b:c0:
         7d:40:c4:73:86:9e:7f:cd:8f:0c:3a:56:67:7c:44:7d:11:45:
         21:03:b7:a8:35:00:14:5e:95:c0:48:e7:56:d1:0e:e6:1a:14:
         d3:05:60:d5:5d:92:d9:7f:db:9e:66:e1:ff:0d:69:9e:e4:f1:
         ec:da:b0:d5:c9:7e:9f:df:26:5a:d7:d3:85:88:54:f7:b9:99:
         4d:50:b0:bd:d6:cf:60:8c:f3:f8:f2:e0:95:4e:f0:70:75:9a:
         be:2a:c5:e6:29:b7:0b:cb:6b:e8:ad:87:01:2c:ca:5a:b5:57:
         60:be:d0:d8:dd:01:80:8b:08:c2:a9:e7:3a:10:37:cb:4a:1d:
         0d:39:e5:81:f1:32:e0:02:d6:b9:0f:48:54:f2:af:d3:f8:4a:
         cb:31:ca:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDkzMzUxMTAvBgNVBAUTKEVEREFDRTQwNzFGREE4NTg1Q0YxMjM0NEI4MjUxMkNE
RUYwN0YzQUQwHhcNMjYwNDE2MTQzNTQxWhcNMjYwNDIzMTQzNTQxWjAYMRYwFAYD
VQQDEw02OWUwZjNiZS1mOTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz4O6rvr63IQ2nf9zvtgp4w5jtzaMVBBitP8u1YRX+VtcsTtY3Ur2tK1BOA9w
sVFGD9qShKk0QdLpcU/4rRyv+4bNAlq/4d0rZPmTllq3ziu36/aRsLsf+PPtYbZk
3a8V0EYGESrW5ve1qi1GXJuAlQpNm1V/TdAITrputAsl8ylRAGv1Vjxjef4eObru
H7Df862bqNdIQGpuy4hT3cAcz1jZTdAp2NLyEry0QIEZSZ98ScYrfDjcagVqdBrI
z9iJX81PXL9NCXe/G/wBQ9dSJKOPfYOL2yv1L7pKh+A/mX4Cwv+xBqUAzmXjLqEy
QexWwj0D/q2eLRa5+Pwm6T0ipQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG5qJjMM
nmpBDlQsk5jlgbiE254IMB8GA1UdIwQYMBaAFO3azkBx/ahYXPEjRLglEs3vB/Ot
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTMzNS9FNjI2RTVEMDFE
OEIxMUUyQUVGRERBRTYwOEIwMkNEMi83ZHJPUUhIOXFGaGM4U05FdUNVU3plOEg4
NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdkck9RSEg5cUZoYzhTTkV1Q1VTemU4SDg2MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OTMzNS9FNjI2RTVEMDFEOEIxMUUyQUVGRERBRTYwOEIwMkNEMi83ZHJPUUhIOXFG
aGM4U05FdUNVU3plOEg4NjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUEnmVUbN61/z/AbbkuOLkh5tcwwq6JfNk7wtRvUZH0DhEAJpnAT66io+YwoW
qBka9abHc5Oc6REaq4F1Wylkmpw7mcDfgWJTQ9AaZCuPJjMdiUQ3IgeOOwuVBJA/
ryPqpP2aqwmGbYSGzZvAfUDEc4aef82PDDpWZ3xEfRFFIQO3qDUAFF6VwEjnVtEO
5hoU0wVg1V2S2X/bnmbh/w1pnuTx7Nqw1cl+n98mWtfThYhU97mZTVCwvdbPYIzz
+PLglU7wcHWavirF5im3C8tr6K2HASzKWrVXYL7Q2N0BgIsIwqnnOhA3y0odDTnl
gfEy4ALWuQ9IVPKv0/hKyzHKEw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:43:05 2026 by rpki-client