Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
File:                     7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json)
Hash identifier:          mdoWN/jgfJhnPyybUqBYyXvoWExog5MjaSPZCABc5MQ=
Subject key identifier:   FC:08:B7:56:99:C2:EC:23:EC:03:13:8E:35:9D:4C:61:EE:B3:6E:F5
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Certificate issuer:       /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial:       0376
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
Manifest number:          0353
Signing time:             Fri 17 Apr 2026 00:54:38 +0000
Manifest this update:     Fri 17 Apr 2026 00:54:38 +0000
Manifest next update:     Fri 24 Apr 2026 00:54:38 +0000
Files and hashes:         1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: qRDVBHh7aVksMzX5PQarooAeA2EPowV5Gbc+tyFHTtM=)
                          2: 1C7AC7FE4B0711EFBB12B717C4F9AE02.roa (hash: nnwYsXqpriKdgHZ6F2Bjskh6Ji1AomhewkLa8SUVYYs=)
                          3: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: 9v4NKBdRQhuU8DQv3Rod5Fcc10899zvHWabiZx6Nun8=)
                          4: 652A87CC65EC11F0BAEF8066C4F9AE02.roa (hash: QTw/GKnqOzom+7g2Vy0ugUBB+pLhZarT5O8cic2MYbc=)
                          5: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: WYNTjnlZgwrqZBIU4k28zQZnPO22jdEa1SzcgGRQAiQ=)
                          6: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: vM0A7WnGvcxI52gcg6mHL5DanZRChz8WZQbZNCoxjuM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
                          rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886 (0x376)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
        Validity
            Not Before: Apr 17 00:54:38 2026 GMT
            Not After : Apr 24 00:54:38 2026 GMT
        Subject: CN=69e184ce-82f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:21:85:15:9c:8b:90:4e:42:57:df:a1:15:e2:
                    76:16:fd:2a:0c:ca:51:67:ab:e5:1d:60:b0:1d:a0:
                    c9:56:a1:31:94:f8:df:0c:1b:a8:66:72:b0:e0:65:
                    88:3e:40:85:34:e2:5d:e1:52:b7:f4:c7:4d:50:f6:
                    0d:9b:44:11:6f:4f:ef:61:ee:ed:46:c2:55:47:5c:
                    13:48:c1:6b:fa:57:1d:64:fb:18:6a:66:82:17:3a:
                    05:27:6a:05:53:d0:23:36:de:6b:f0:30:b6:c7:ca:
                    c6:43:02:38:f3:63:96:fe:b9:a8:60:14:96:9a:8a:
                    d7:f7:7d:ce:b5:6e:99:d0:3c:cb:2d:74:9e:ae:4e:
                    ea:1a:48:0b:df:49:8e:15:84:f5:10:96:a6:8c:7c:
                    be:85:40:3f:26:76:3e:ff:e0:1b:70:75:1f:42:70:
                    43:dc:58:9d:40:67:9e:20:76:b3:6b:a9:7c:35:1e:
                    7b:4d:8e:74:80:08:be:b6:7a:62:3d:8a:89:a5:20:
                    b1:26:37:7a:ba:44:82:3e:c9:18:6b:12:ae:73:b9:
                    50:3b:3d:5d:86:4c:6b:dd:97:b9:81:03:1a:4b:10:
                    8f:20:62:ae:af:da:39:52:d7:c7:5d:5a:d0:52:fe:
                    c6:4f:86:05:cc:8b:c7:86:8c:10:3d:99:d4:12:52:
                    bf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:08:B7:56:99:C2:EC:23:EC:03:13:8E:35:9D:4C:61:EE:B3:6E:F5
            X509v3 Authority Key Identifier:
                keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ea:ad:31:c4:6c:da:37:08:d1:b6:2a:e4:ed:89:55:13:8e:
         4c:cc:fa:1b:59:01:0d:0e:f9:ac:da:88:42:4c:1d:b6:49:30:
         5e:7c:c8:00:cb:0b:89:03:07:4f:06:de:f4:86:bf:64:25:32:
         56:4d:7b:cb:7c:e5:b7:9a:b9:0c:69:c0:e5:f3:41:e7:53:e6:
         17:e0:2b:42:9a:2b:6d:3d:54:f0:67:60:ae:23:c2:c0:ad:37:
         57:7d:02:42:9a:f9:96:16:8d:00:0b:b3:f6:66:94:b5:c8:2d:
         57:7e:02:1d:3b:b0:04:69:b3:07:5d:a3:af:2f:83:18:9a:ea:
         b8:58:e9:c6:3c:60:e5:c7:f8:c4:1f:cd:b1:0b:9f:50:43:fd:
         ad:cd:73:58:87:b3:87:c4:a0:29:d0:18:5f:73:55:9e:94:7f:
         07:ee:08:62:e2:5b:81:59:5d:80:65:b1:d9:ab:0f:8b:f8:9e:
         b0:6a:1a:ff:a3:23:2b:64:a1:86:84:84:88:2d:cd:67:60:67:
         b4:95:24:b2:f9:3f:2e:43:20:73:b5:96:bc:a4:e4:de:b1:b4:
         00:1b:71:b8:07:3f:99:f4:24:04:eb:c1:77:39:85:3f:ee:0a:
         eb:e1:e9:7f:d8:b6:1b:53:c1:82:94:8b:5f:db:be:1a:ed:34:
         95:b1:35:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:50:16 2026 by rpki-client