Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft
File:                     379fgwtQs7_B5TULnGBbt1YSLhE.mft (raw, json)
Hash identifier:          7hg1H1OTM/+q96NVwTQmSin/MXe7HoLhZSj5olV2d0A=
Subject key identifier:   1E:18:F8:AC:3F:EF:16:B0:75:3D:FE:BD:B8:64:54:FF:79:25:41:CC
Authority key identifier: DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11
Certificate issuer:       /CN=A91DBB7D/serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11
Certificate serial:       0572
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft
Manifest number:          0568
Signing time:             Thu 16 Apr 2026 23:16:23 +0000
Manifest this update:     Thu 16 Apr 2026 23:16:22 +0000
Manifest next update:     Thu 23 Apr 2026 23:16:22 +0000
Files and hashes:         1: 379fgwtQs7_B5TULnGBbt1YSLhE.crl (hash: Y2xRmnuI3XkrKFoC+6D8pWPHRTREpPTHE22Nb7iAFfw=)
                          2: D5C4A54A617B11EC82058668C4F9AE02.roa (hash: bUHBBf5sOas57JoBnuGlqh7PgAmJoHgi2CnQkJdmpgY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl
                          rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1394 (0x572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBB7D, serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11
        Validity
            Not Before: Apr 16 23:16:22 2026 GMT
            Not After : Apr 23 23:16:22 2026 GMT
        Subject: CN=69e16dc7-5712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:44:6b:3e:e3:b7:db:08:0a:e5:8f:d5:bc:c1:
                    df:38:94:a1:45:2d:e5:22:51:c1:ae:1a:09:1d:0e:
                    fd:cf:55:df:0e:f3:91:48:6f:90:74:30:ac:07:9d:
                    66:ca:24:b5:9c:7f:bd:79:fe:01:8f:36:6c:ae:d7:
                    7b:37:0f:a4:e6:8c:20:5b:eb:e1:49:5d:25:05:13:
                    d4:a9:bb:50:b6:32:31:03:85:18:45:77:0d:83:f0:
                    f8:22:91:a8:32:ba:59:4a:04:70:38:9e:51:b5:17:
                    42:3f:7c:3c:98:3b:e6:08:18:f0:00:3c:8a:a8:17:
                    0f:ec:6c:eb:c1:14:32:3f:fd:57:b3:cb:a7:a3:39:
                    fb:87:ec:f6:09:cc:a3:84:d3:d8:77:f9:54:13:6b:
                    1a:38:29:02:d7:61:09:db:ec:7e:18:99:7a:8a:45:
                    a3:f1:98:5d:2c:37:39:5b:1d:95:4d:16:46:f0:0d:
                    c1:c6:f7:3c:c1:3d:74:bd:d9:14:ec:c1:f7:2b:8e:
                    9e:7f:8c:e3:32:2d:be:cc:38:c0:56:08:ae:c8:32:
                    2b:75:34:3e:33:7e:bd:0a:ee:65:1e:bc:da:8f:ea:
                    70:a9:c6:c1:92:94:6e:a7:d6:d3:bf:7d:c4:a1:d4:
                    12:0a:13:cf:0b:01:5c:87:9a:4d:94:67:a7:d5:43:
                    1d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:18:F8:AC:3F:EF:16:B0:75:3D:FE:BD:B8:64:54:FF:79:25:41:CC
            X509v3 Authority Key Identifier:
                keyid:DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f6:18:98:e8:e6:ed:62:9d:c7:a5:47:6e:22:40:3b:43:93:
         1f:33:dd:bf:56:a1:6b:c4:fb:65:f5:ab:7b:6f:f0:d9:63:77:
         d5:a4:c5:53:98:66:4a:24:65:20:68:9a:d2:64:a3:87:25:6e:
         66:8e:5c:2c:6d:eb:3a:71:91:ef:11:0c:ca:86:0c:95:32:bf:
         be:b6:32:f5:e5:3b:6b:1d:23:cb:8f:16:70:79:f8:b5:6e:b4:
         49:06:7e:fa:6c:0e:c8:3f:b0:f2:7a:f0:af:28:dd:1f:1e:28:
         a6:ef:5d:fb:6c:80:e3:b3:47:58:08:33:68:1b:7f:6c:ce:84:
         a8:f6:9e:1e:5e:2d:f9:e7:09:29:84:ae:6e:a3:1c:c7:e5:21:
         10:2d:1d:4b:f5:79:2d:68:e8:28:59:81:60:b8:8c:41:b3:9a:
         08:55:2b:97:75:9b:49:bf:12:e9:bb:d5:d7:1f:bc:bb:05:ac:
         f5:ec:4c:53:2c:1f:f1:c2:15:af:e0:0d:52:3d:dd:6f:32:76:
         52:3b:0d:2f:3d:c1:e5:ee:45:47:13:0e:9f:72:73:60:1f:14:
         9f:15:fd:54:db:97:8b:9a:c4:29:e9:26:ce:29:13:28:da:99:
         ca:82:3c:c4:a0:e8:18:44:bc:d3:0f:b6:07:01:36:03:f6:07:
         87:01:a7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:06:36 2026 by rpki-client