Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
File:                     bGZwF1JoMcwYJ1GN4StiH28_N4g.mft (raw, json)
Hash identifier:          uu5fYk7EiE1img9ltyXkECwYfB2UFxqxGYTVArRyVOs=
Subject key identifier:   4F:23:03:F5:47:54:6F:B7:D7:80:8B:20:7B:BA:70:9F:A8:6B:96:C3
Authority key identifier: 6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
Certificate issuer:       /CN=A9183704/serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
Manifest number:          7B
Signing time:             Wed 25 Mar 2026 07:00:33 +0000
Manifest this update:     Wed 25 Mar 2026 07:00:32 +0000
Manifest next update:     Wed 01 Apr 2026 07:00:32 +0000
Files and hashes:         1: bGZwF1JoMcwYJ1GN4StiH28_N4g.crl (hash: jC/ezDSx9UPM9OP3Md3iozjZXzZ8icN/gGLRVmlznvk=)
                          2: 7ECD6624D8F411F0885FED3572D3641D.roa (hash: kEwnH7Od+kt8tebTEN6qNlYk79LWf5Il0l1R0uvP8ro=)
                          3: B25E5954768D11F091768048C4F9AE02.roa (hash: XBpapngz5dr5cXTfIZvo3z58b3+Y9S6acFpjx4E21A4=)
                          4: DC1B4E64768D11F0BC42C048C4F9AE02.roa (hash: dVCUtpZknoGOXbCPR2t9DsP1/pKxGj7UhMl3FB7miV4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
                          rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183704, serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
        Validity
            Not Before: Mar 25 07:00:32 2026 GMT
            Not After : Apr  1 07:00:32 2026 GMT
        Subject: CN=69c38811-0241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:57:74:09:0a:dc:f8:aa:a6:2c:fc:b0:30:72:
                    4d:e8:4d:ac:c5:be:bf:d0:58:aa:1f:4f:86:db:e5:
                    0d:75:39:64:e6:58:30:4c:1c:41:80:79:c9:04:ca:
                    09:b8:4e:24:54:d8:8f:c1:70:29:c9:67:89:a4:bb:
                    26:69:99:23:2c:a7:c3:84:0b:d7:d7:cb:a2:a5:e1:
                    b8:53:dd:e2:3a:e6:3d:db:10:1c:bd:11:c2:75:a5:
                    30:2f:19:49:16:da:f7:8b:4a:b2:51:e3:88:69:04:
                    a9:cd:bd:b4:ec:8a:23:fc:a0:ee:4b:55:1e:d2:a4:
                    16:f5:ea:b6:49:ce:e7:72:c9:3f:df:cf:d2:87:f0:
                    23:41:4b:16:1d:df:de:d1:62:49:a5:c5:c9:61:43:
                    05:fc:f0:ab:5a:60:89:61:29:89:ed:9a:f2:ab:a9:
                    5f:a8:3e:3d:f1:e0:65:16:8e:57:93:22:6e:c2:32:
                    52:8e:ac:21:50:b8:a9:79:f5:b8:e1:b1:54:ad:6d:
                    c1:63:c0:a1:70:35:0b:ff:e7:27:17:b4:31:01:15:
                    32:a9:c0:b3:46:31:8a:b0:11:25:d5:74:fb:b1:f3:
                    4e:38:62:3b:98:f5:2f:9e:ad:be:a0:32:d7:9b:06:
                    3b:27:d2:47:6f:d5:b6:5e:b9:6f:b6:2f:f3:a6:fa:
                    57:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:23:03:F5:47:54:6F:B7:D7:80:8B:20:7B:BA:70:9F:A8:6B:96:C3
            X509v3 Authority Key Identifier:
                keyid:6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:53:9e:65:41:8b:c6:80:b4:5a:e2:33:2b:b6:e8:a3:46:14:
         67:54:98:3c:26:91:9e:92:9e:76:dd:7b:af:29:29:a6:43:8d:
         71:c6:0d:26:c1:34:1d:52:b2:ad:00:53:58:aa:93:7d:a8:74:
         63:37:48:9e:a1:61:37:db:75:cc:fe:e0:25:9e:7a:f0:aa:33:
         09:48:07:47:80:7d:ce:70:52:08:f7:d1:56:19:0a:b1:ff:51:
         ed:85:e9:6d:50:de:97:90:83:96:c8:84:4d:75:3f:47:3c:73:
         0b:67:38:2b:ee:f8:33:03:df:dc:bf:0f:a4:96:c0:ef:56:73:
         e2:b4:32:10:c5:16:75:a6:db:d4:0f:cf:2d:04:2e:8c:13:63:
         ee:25:c9:2c:c3:3f:48:38:6e:4c:4a:21:ba:3c:7e:69:03:d7:
         b4:94:1c:fb:c1:7a:82:a3:78:6a:88:d8:03:37:b5:42:5d:e7:
         4c:41:f2:e4:4f:df:b2:6d:7b:5a:fd:04:4d:fe:e6:72:97:b6:
         b6:14:d1:10:ee:95:5c:ad:ac:24:02:7a:f2:db:7d:20:56:5f:
         a2:9b:fd:b6:11:68:d5:b5:09:e1:9b:3f:cb:bd:65:0a:12:8e:
         22:1b:d0:18:de:1e:c6:b7:49:66:8b:90:3e:a5:e9:4f:ab:17:
         3f:ef:84:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:51:40 2026 by rpki-client