Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
File:                     P7w69DECztpPoPf6m9kbLWU0bW4.mft (raw, json)
Hash identifier:          5V9/1I9QTbNVgyKtAN4BEyef3e6KDdrHgya2xrZ7l0M=
Subject key identifier:   4B:A1:1E:2F:63:4F:D5:B9:4E:C9:11:08:DE:5E:C2:85:50:BD:A9:C8
Authority key identifier: 3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
Certificate issuer:       /CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Certificate serial:       0314
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
Manifest number:          02DD
Signing time:             Mon 11 May 2026 01:39:48 +0000
Manifest this update:     Mon 11 May 2026 01:39:48 +0000
Manifest next update:     Mon 18 May 2026 01:39:48 +0000
Files and hashes:         1: P7w69DECztpPoPf6m9kbLWU0bW4.crl (hash: SatPlg10RkxT2rvFZTXdQFe4RqNQkH2YD2F1rrSBp1c=)
                          2: 845D92BAFC5111EFA8505536C4F9AE02.roa (hash: E6jRmVhR8Wb8IiIIspZxX6LgF3mhurpDSKUcMeN6BpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
                          rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 01:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788 (0x314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161DF8, serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
        Validity
            Not Before: May 11 01:39:48 2026 GMT
            Not After : May 18 01:39:48 2026 GMT
        Subject: CN=6a013364-62c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7e:cb:a4:78:66:55:9f:ee:50:9b:2f:45:eb:
                    7c:55:d7:b6:24:79:c4:65:18:a3:55:e0:1b:2e:3b:
                    d9:fd:f6:f0:01:79:10:c9:fb:a2:77:be:5f:be:f2:
                    53:f2:71:fb:74:d8:6c:de:26:c6:86:9f:ce:57:42:
                    1d:80:88:55:7a:55:1b:6e:b5:70:8a:4b:2e:ef:bd:
                    e9:3e:37:25:53:0f:9f:e2:11:c4:df:9e:80:77:eb:
                    7d:cc:4e:c4:0a:7b:83:d3:d8:a3:4f:d7:2a:2a:00:
                    dc:50:f6:49:8d:3b:45:79:63:0a:4a:77:12:a4:16:
                    65:b5:76:76:f2:e8:3e:51:1c:a6:97:ed:0e:eb:8c:
                    a6:a9:71:d0:58:0c:39:57:af:b1:1f:04:25:f6:0d:
                    bb:4d:6d:3c:d9:3f:11:e5:15:68:51:50:7b:35:97:
                    86:cb:69:7d:31:3f:03:18:23:51:24:5b:7b:fb:ee:
                    be:73:be:e1:c9:fc:0d:fa:e6:e8:5f:82:a4:c1:ed:
                    c6:31:f3:65:f7:c1:6a:72:a6:2b:01:e0:89:0f:46:
                    f3:ed:f2:2a:53:47:51:cc:cc:8d:21:62:5e:4c:80:
                    50:e1:e4:47:85:b9:b2:15:27:6f:88:b5:ac:8e:d1:
                    a8:b3:c1:cb:b7:dd:01:5d:34:87:74:6f:28:7b:9a:
                    c8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A1:1E:2F:63:4F:D5:B9:4E:C9:11:08:DE:5E:C2:85:50:BD:A9:C8
            X509v3 Authority Key Identifier:
                keyid:3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:12:fb:f0:e0:bd:df:7d:87:48:f7:1e:53:a2:62:38:52:b2:
         71:a6:71:25:1c:90:58:50:ed:cb:fa:81:b1:97:2a:eb:0d:61:
         3f:70:ef:d6:cf:6e:46:08:47:6b:91:58:bf:50:f2:a9:bf:c0:
         54:4e:86:5a:35:d5:fa:ca:9c:29:13:cd:48:ed:68:38:0a:86:
         f6:08:e5:10:5d:12:ec:b8:c3:cd:33:b1:f4:fa:55:9e:bd:ec:
         8a:76:b6:43:e3:f9:2e:3c:32:73:01:44:82:d1:d8:eb:ec:36:
         e6:40:a1:c7:cf:23:5b:ad:66:a2:8b:c3:48:34:80:75:74:e0:
         97:2b:6e:94:51:42:74:19:92:44:29:c5:67:81:e3:96:f1:0a:
         e3:30:9c:64:ea:cf:82:8a:26:02:67:54:9f:92:fd:0c:0f:73:
         fb:19:1d:3f:8d:5f:61:25:60:80:9f:de:01:61:05:78:7d:f5:
         07:bc:67:76:7b:5b:6b:ab:58:e5:78:6c:25:3e:25:c4:c0:cc:
         0c:d1:1d:80:ca:28:0c:99:f6:54:3a:f2:0a:2d:19:3d:45:0d:
         0f:c8:64:89:b3:0c:4b:be:f4:2a:fa:a9:a6:14:28:d8:bc:62:
         89:a5:67:a7:a3:0c:90:2f:96:2d:e4:f6:c2:2d:4f:11:e7:92:
         ac:23:8b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:53:15 2026 by rpki-client