Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
File:                     mgI7gKvPTmeX04jA3oFgoW6xXf4.mft (raw, json)
Hash identifier:          tS7siG45vJjk1SzxduHLcpCbgrOguaW6t34o+iDkPjM=
Subject key identifier:   CC:1C:F0:ED:B8:32:1A:E1:CB:96:29:CA:A1:67:CF:33:F3:D4:43:B2
Authority key identifier: 9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE
Certificate issuer:       /CN=A91EF6EF/serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE
Certificate serial:       AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
Manifest number:          9B
Signing time:             Fri 17 Apr 2026 07:08:14 +0000
Manifest this update:     Fri 17 Apr 2026 07:08:14 +0000
Manifest next update:     Fri 24 Apr 2026 07:08:14 +0000
Files and hashes:         1: mgI7gKvPTmeX04jA3oFgoW6xXf4.crl (hash: bJ7QJ7pv6rudQKV0Aq2tnLLyQdtt30AawLNYBBbqF7c=)
                          2: 3C15F928579311F0B296C030C4F9AE02.roa (hash: BNr56w4gucIUPsbq13wgpUL195UkxJVM3QKa9wUEfME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl
                          rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF6EF, serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE
        Validity
            Not Before: Apr 17 07:08:14 2026 GMT
            Not After : Apr 24 07:08:14 2026 GMT
        Subject: CN=69e1dc5e-4a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b1:54:4b:3f:55:a9:01:4a:0e:cb:77:87:27:
                    fa:5e:6b:14:66:80:ed:34:c6:b0:c4:b3:c9:b1:5e:
                    dd:a2:71:97:6d:6d:cc:b6:a7:1b:50:27:6c:ba:bc:
                    ee:16:15:80:b6:f6:dc:6e:0c:35:73:3e:2f:a9:2c:
                    30:dd:e0:8b:45:a9:cb:d1:5b:fc:0b:9c:e9:73:aa:
                    a3:1a:38:8d:72:bb:c7:3d:be:24:af:39:09:46:01:
                    f8:3c:95:b2:7f:11:7d:80:c9:86:25:71:18:28:91:
                    48:d8:af:ce:e4:66:e2:ae:70:5a:51:29:36:fe:db:
                    f5:da:83:2a:66:c8:da:fb:5c:8e:ac:3f:62:8e:24:
                    71:be:37:bb:e5:c1:8a:65:29:19:90:0a:3f:4c:69:
                    f3:38:83:d2:8e:af:10:14:b1:97:b3:cf:a4:11:ef:
                    cb:a5:60:26:ca:01:95:b0:33:bc:0d:5e:e0:2c:af:
                    68:7d:ee:9f:09:45:58:65:c9:6c:54:90:06:a0:6d:
                    a1:fb:9b:c0:b1:77:a8:c9:35:3a:3e:a8:e0:51:29:
                    d4:e7:f3:9d:49:39:41:71:21:28:80:a7:a1:8f:8a:
                    45:d1:50:a3:1d:f3:90:b7:7d:78:94:df:ac:78:ca:
                    29:ba:cb:d3:83:cf:93:7b:e8:f2:fc:db:e7:a5:bf:
                    f5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1C:F0:ED:B8:32:1A:E1:CB:96:29:CA:A1:67:CF:33:F3:D4:43:B2
            X509v3 Authority Key Identifier:
                keyid:9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:59:a9:9b:4f:e8:0f:d6:75:bd:74:c8:d5:7a:5a:9d:6a:1b:
         dc:9f:8d:b6:41:ca:b6:1c:03:d0:b5:7c:fa:b0:99:d5:64:eb:
         75:41:2e:5b:00:5b:b2:14:97:f7:da:3d:60:07:46:eb:38:f3:
         fa:5f:0f:e3:fa:87:84:67:f0:a4:1f:ae:c8:df:92:1a:03:0b:
         84:d7:0f:29:ba:c7:6f:20:48:05:b9:04:05:32:d0:04:a0:72:
         60:61:34:1d:fe:a1:00:73:0f:fd:c7:7b:bf:10:b9:cb:fa:31:
         5a:d2:3a:26:19:b1:af:67:86:08:16:55:04:d9:ad:17:7f:5c:
         57:9d:6a:f4:f9:3e:b2:97:ba:71:6f:fc:b3:ac:bf:33:ef:87:
         9a:98:67:b5:13:7b:71:af:c6:16:7f:01:cd:5c:fb:c1:5a:b6:
         29:7c:c8:0e:3b:ba:eb:77:58:b1:a2:fc:7f:7e:b1:4f:37:19:
         e8:8e:ce:ad:6f:41:bf:ac:d0:f0:8d:f7:08:e7:20:d9:3a:65:
         94:df:dd:63:6f:31:f9:01:0e:fb:4f:db:77:cc:37:1a:57:91:
         a7:c9:63:d0:2d:55:87:9a:37:ad:86:80:e4:21:ed:c5:31:c7:
         51:bc:05:05:ac:be:64:65:4a:ef:a8:27:f1:28:64:9d:af:68:
         37:fb:64:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:31:04 2026 by rpki-client