Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
File:                     Ps7q_orHtLE44oRfeGEtk9XFMMY.mft (raw, json)
Hash identifier:          EYcGrWAgBlE504LzzxGUpBCvXjLzAPl0DhKkUHrhTEM=
Subject key identifier:   C4:F0:5A:C2:ED:BE:1E:D6:12:C4:48:06:87:8E:AF:54:02:3E:F8:1C
Authority key identifier: 3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6
Certificate issuer:       /CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
Certificate serial:       0AFA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
Manifest number:          0AEA
Signing time:             Tue 12 May 2026 19:27:37 +0000
Manifest this update:     Tue 12 May 2026 19:27:37 +0000
Manifest next update:     Tue 19 May 2026 19:27:37 +0000
Files and hashes:         1: Ps7q_orHtLE44oRfeGEtk9XFMMY.crl (hash: wa3V7RVSABAcl7A57tyxgUtHEsoqU/xL2uwe+gr4j84=)
                          2: 74637BD8AB5911F0A8E57D4AC4F9AE02.roa (hash: th+/tvMvg+ad5+YQ/zoIufkXoQMlFYiSs+rYqVFCmXs=)
                          3: C50E0D60B31F11EF9044054FC4F9AE02.roa (hash: dcrlUq/LfqIpPMteaZR03KFsAdJIOdisOuX79mITHI0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl
                          rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:27:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2810 (0xafa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186537, serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
        Validity
            Not Before: May 12 19:27:37 2026 GMT
            Not After : May 19 19:27:37 2026 GMT
        Subject: CN=6a037f29-77e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1f:40:db:c8:c2:81:c1:8e:6f:47:c8:24:67:
                    eb:82:48:46:71:d7:a6:4b:07:c8:40:92:7e:95:9f:
                    9a:39:58:a2:94:11:2c:35:07:c7:ee:49:21:b9:0e:
                    3c:99:6a:d5:60:2c:50:48:24:80:7f:ce:4c:dd:e0:
                    c2:22:14:3a:55:0d:3d:dc:ea:3c:2c:be:f5:a4:85:
                    f0:ba:91:23:2e:73:96:14:c0:fd:d6:ae:be:2a:89:
                    22:66:b1:3f:f0:e8:11:cd:55:b7:2f:41:95:41:c1:
                    e8:0b:59:3b:90:92:c2:45:ad:a6:00:bc:b6:12:72:
                    b2:91:27:96:47:4a:ab:2e:62:e4:2a:72:83:94:fb:
                    06:29:92:bc:d2:30:16:22:d6:77:59:03:42:9b:c2:
                    19:b0:44:a1:0c:8f:ae:ec:7a:1e:6d:65:ef:43:33:
                    ac:e3:dc:f8:18:57:9b:90:2c:0e:bd:ee:f0:39:c4:
                    ca:35:77:29:a2:ea:28:22:5a:e7:ce:97:41:7e:ce:
                    18:fd:19:0d:91:28:0b:35:12:5c:0d:8d:21:9b:fc:
                    92:ca:76:89:28:8d:68:cb:de:d0:95:ee:f8:11:4b:
                    bb:cf:47:e3:5f:13:bf:53:c6:27:b1:62:07:3b:9b:
                    35:54:26:00:6e:ee:88:c3:c6:dd:a0:1a:10:af:d5:
                    16:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F0:5A:C2:ED:BE:1E:D6:12:C4:48:06:87:8E:AF:54:02:3E:F8:1C
            X509v3 Authority Key Identifier:
                keyid:3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:d3:4a:0d:64:01:16:e2:bc:ca:20:27:a5:be:3e:90:10:7a:
         1f:b1:48:e8:e5:a2:5e:f8:37:7e:e1:a7:98:c3:30:71:5d:15:
         8b:1f:8a:7f:bc:2c:67:a7:52:4c:c4:8a:ee:d4:da:9a:06:8c:
         0f:27:03:25:31:0f:95:26:29:82:80:db:a0:64:df:74:9d:dd:
         6b:b4:b6:43:fb:e1:5e:da:4f:2b:61:1d:f9:0d:f3:c6:48:e7:
         1f:59:74:7c:ba:2f:f3:bc:a2:5b:c4:55:50:49:a2:95:6e:c8:
         3e:cf:ba:7a:e9:71:e9:d6:7d:78:be:e8:bf:8e:61:a7:98:93:
         4e:87:b7:a8:bb:86:15:45:4b:1c:71:9c:43:7b:92:b8:ab:30:
         d6:f9:31:9d:06:aa:87:70:ac:23:e3:78:15:d8:19:0c:f2:ec:
         07:a2:b5:ad:f7:59:7d:5c:23:3b:5a:d2:16:8c:39:35:67:12:
         5d:09:87:dc:d5:e6:bf:df:79:b1:73:54:b1:06:8d:35:55:50:
         fb:f2:21:77:49:cc:a2:98:a3:e1:46:7c:f3:73:b6:e8:14:57:
         2f:b2:8c:a1:d1:76:ae:1d:3d:89:9b:ee:4b:49:b5:f6:86:88:
         01:c5:ca:25:f5:45:f3:1b:20:d6:06:85:0d:5e:22:01:7e:7f:
         c7:b6:6d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:40 2026 by rpki-client