Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
File:                     -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json)
Hash identifier:          UI/t0Cjp55CoemYwyfbO6VA9m0E/UFE2qxIvOqGCRHY=
Subject key identifier:   BD:60:7F:2C:1A:CA:A5:BF:89:2A:C5:66:85:18:8F:C6:E9:88:0E:58
Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B
Certificate issuer:       /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B
Certificate serial:       101A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
Manifest number:          1007
Signing time:             Tue 12 May 2026 17:29:06 +0000
Manifest this update:     Tue 12 May 2026 17:29:06 +0000
Manifest next update:     Tue 19 May 2026 17:29:06 +0000
Files and hashes:         1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: r2NYgfglsnFyq/sftYCHpqIXQuCC+67862/AfISoWQs=)
                          2: 6AE44D5C3E4511F090A5C643C4F9AE02.roa (hash: GpIlPzjXhUM0zJ+cM7pnn7EyYVYFkBP5Hh3rm33qqKU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl
                          rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4122 (0x101a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91657DD, serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B
        Validity
            Not Before: May 12 17:29:06 2026 GMT
            Not After : May 19 17:29:06 2026 GMT
        Subject: CN=6a036362-5191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:29:eb:cd:d4:23:cc:00:6b:ea:16:d8:6c:79:
                    96:7c:8b:b3:80:fc:4b:6b:98:74:53:a9:61:90:a3:
                    c9:28:5f:b1:45:64:88:40:67:59:e9:67:ec:ec:f3:
                    44:1f:99:c4:f5:fc:c1:f7:69:bd:86:e4:f3:a3:f4:
                    bf:38:30:d6:48:84:d2:01:26:3f:db:d1:cb:9c:df:
                    4d:5e:0d:d5:65:14:e8:6a:d9:9c:a1:27:fd:f4:af:
                    d2:00:4b:a0:72:54:4a:69:d9:97:ec:63:ce:4f:2d:
                    e2:dd:e9:cf:b5:6a:94:f0:3f:6b:b3:1e:24:98:23:
                    ff:69:33:c9:84:f7:d4:d2:44:3f:77:f8:ae:e8:bf:
                    f8:6f:1c:57:e7:80:e6:fd:8f:d2:9a:d3:e9:ca:04:
                    07:76:44:91:8f:a5:3a:a3:21:88:e7:6e:40:7f:ad:
                    e7:87:58:91:c6:c5:05:2b:9c:c5:8b:2c:44:26:6a:
                    5c:9e:8b:e4:32:40:46:3c:b8:bd:bc:ce:88:95:e9:
                    b4:04:a3:c1:fa:87:c5:02:10:c5:dc:3e:60:90:63:
                    ee:10:78:86:bd:69:1e:15:7d:cd:6c:e8:ad:30:64:
                    0d:d4:dc:f2:ca:62:70:a9:4a:12:78:56:16:15:26:
                    57:50:ff:76:62:59:c4:fb:4d:5a:0b:0e:b7:d9:40:
                    f2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:60:7F:2C:1A:CA:A5:BF:89:2A:C5:66:85:18:8F:C6:E9:88:0E:58
            X509v3 Authority Key Identifier:
                keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:6a:9c:7f:7f:c6:c4:f9:9a:a7:ef:98:86:46:bb:ab:aa:f4:
         54:40:ab:a8:eb:e6:d5:55:ca:ef:31:7c:a3:6f:57:40:ca:e5:
         f3:e9:fd:73:df:b1:eb:d1:2c:db:80:1d:54:ad:70:38:01:6a:
         1a:ce:e1:36:be:ed:01:03:1e:83:f1:66:e3:b5:02:eb:9b:43:
         bd:0a:fe:e3:f7:cb:69:dd:68:77:5a:b0:52:54:85:e8:99:9a:
         7f:41:c6:e4:4f:f6:ea:c2:a0:07:42:fb:5e:d5:49:8d:64:6b:
         47:b2:6e:7e:1f:e6:08:08:af:6b:e9:f0:3a:e4:91:36:f4:f9:
         c7:f6:6f:c8:e2:2c:bd:c7:3e:0c:0f:72:bd:5e:c7:73:c6:0d:
         7a:36:96:f7:47:f6:d9:62:8e:29:9e:f8:d1:b3:bd:cb:03:f3:
         2e:02:3b:43:59:fb:f4:54:cb:a0:b5:0b:d3:c9:e6:8d:23:28:
         3d:8a:fa:6f:64:44:ef:b0:07:ee:1f:be:6c:39:d4:cb:73:7b:
         6e:cc:90:33:82:43:6e:90:0e:52:0b:c8:ad:90:bb:14:de:60:
         f6:f7:ac:1b:b8:46:76:67:4b:d2:6d:0d:cf:06:e9:cf:f1:0d:
         2f:64:d7:29:75:d3:e8:3b:b4:60:9d:15:a4:7e:b9:a7:16:af:
         84:c0:80:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:13:04 2026 by rpki-client